Privacy Policy

Last updated: July 2026 · Controller: [ENTITY NAME] · Contact: [CONTACT EMAIL]

1. Who we are

Illusion Lab ("we", "us") operates this website and the generation service described below. For the purposes of the GDPR, [ENTITY NAME] acts as the Data Controller. Questions about this policy or your data can be sent to [CONTACT EMAIL].

2. Data we collect

• Account data — when you sign in with Google, we receive your email address, name, and profile picture from Google, and store a Google account identifier to link future sign-ins to the same account.
• Session data — a session cookie identifies you as signed-in; before sign-in, an anonymous session cookie identifies your browser for a limited free trial.
• Content you submit — text prompts and any image you upload for 3D generation.
• Generated content — the 3D models, thumbnails, textures, and exported videos produced from your prompts/uploads, stored against your account.
• Saved presets — named configuration presets you choose to save.
• Credit balance — the number of generation credits associated with your account.
• Technical data — your IP address is read transiently to enforce rate limits and prevent abuse; it is not stored in our database.

3. Who we share it with

• Google — for authentication (Google Sign-In).
• Meshy AI, our 3D-generation provider — receives the prompts and images you submit in order to generate 3D models on our behalf. Requests to Meshy are flagged for Meshy's own automated content moderation.
• Object storage provider — an S3-compatible storage service used to host the 3D assets and videos generated from your content.

We do not use analytics or advertising trackers, and we do not sell your data.

4. Legal basis for processing (GDPR)

We process account and content data to perform our contract with you (to provide the generation service you request), and technical/rate-limit data on the basis of our legitimate interest in preventing abuse of the service.

5. Retention

We retain your account and generated content for as long as your account is active. You can request deletion of your account and associated content at any time by contacting us.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, or port your personal data, and to object to certain processing. To exercise any of these rights, contact [CONTACT EMAIL].

7. Children

This service is not directed at children under 16, and we do not knowingly collect data from them.

8. Changes to this policy

We may update this policy as the service evolves; the "Last updated" date above will reflect the most recent revision.