Privacy Policy — Nora3d.ai

This Privacy Policy describes how Nora3d ("we", "us", or "our") collects, uses, discloses, and protects information when you use the Nora3d mobile and/or web application, related websites, and services (collectively, the "Services"). By using the Services, you agree to this Privacy Policy.

If you do not agree, please do not use the Services.

1. Who We Are

Controller / Operator: Nora3d
Contact (privacy): nora3d.ai@gmail.com

For data protection inquiries, please contact us using the email above.

2. Information We Collect

We collect information depending on how you use the Services and your choices.

2.1 Information You Provide

Account information: such as email address, username, password (stored in hashed form where applicable), and profile details you choose to provide.
User content: such as text prompts, commands, sketches, 3D models, files, images, export formats, and other materials you upload or generate while using the Services.
Communications: messages you send to us (e.g., support requests, feedback).

2.2 Information Collected Automatically

Device and app data: device type, operating system version, app version, language, time zone, screen parameters, and similar diagnostic information.
Identifiers: device identifiers and advertising identifiers only where permitted by the platform and your settings, and where we use them as described in this policy.
Log and usage data: events such as feature usage, session duration, crash logs, performance data, and error reports to maintain reliability and security.
Network data: general connection information (e.g., IP address) used for security, fraud prevention, and service delivery.

2.3 Information from Third Parties

Sign-in providers: if you sign in with Apple, Google, or other supported providers, we receive information that the provider shares with us according to your settings.
Payment processors: for purchases or subscriptions, payment information is processed by Apple App Store, Google Play, or other authorized payment partners. We generally receive limited transaction-related information (such as subscription status), not your full card details.

3. How We Use Information

We use information to:

Provide, operate, maintain, and improve the Services;
Process AI-assisted features (including analyzing prompts and user content to generate outputs);
Authenticate accounts, secure the Services, detect abuse, fraud, and security incidents;
Provide customer support and respond to requests;
Send service-related notices (e.g., security alerts, policy updates) where permitted;
Analyze usage in aggregated or de-identified form to understand product performance;
Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your personal information for third-party targeted advertising unless we clearly disclose it and obtain consent where required.

4. AI Processing and Outputs

The Services may use artificial intelligence models (including cloud-based models operated by us or our subprocessors) to process your inputs and generate outputs (such as text or 3D-related results).

Inputs and outputs may be processed on servers located in various countries, consistent with Section 8.
Accuracy: AI outputs may be incorrect, incomplete, or unsuitable for a particular purpose. You are responsible for how you use outputs.
Training: Unless we explicitly state otherwise in-product or in a separate notice, we do not use your personal content to train generalized AI models. If we ever change this, we will provide clear notice and, where required, obtain consent.

5. Legal Bases (EEA/UK/Switzerland Users)

Where applicable laws require a legal basis, we rely on:

Contract: to provide the Services you request;
Legitimate interests: to secure the Services, improve reliability, and prevent abuse;
Consent: where required for optional processing;
Legal obligation: where we must process data to comply with the law.

6. Sharing of Information

We may share information:

With service providers who process data on our behalf under contracts, only as needed to provide the Services;
With platform providers (Apple, Google) as required for distribution, payments, and platform rules;
For legal reasons if we believe disclosure is required by law, regulation, legal process, or governmental request;
In connection with business transfers such as a merger, acquisition, or asset sale.

We may share aggregated or de-identified information that cannot reasonably identify you.

7. Retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account (where available), we will delete or anonymize personal information unless retention is required by law.

8. International Transfers

If you use the Services from outside the country where we operate primary servers, your information may be transferred to and processed in other countries where privacy laws may differ. Where required, we implement appropriate safeguards (such as standard contractual clauses).

9. Your Rights and Choices

Depending on your location, you may have rights to:

Access, correct, or delete certain personal information;
Object to or restrict certain processing;
Port data where applicable;
Withdraw consent where processing is consent-based;
Lodge a complaint with a supervisory authority.

How to exercise rights: contact nora3d.ai@gmail.com. We may need to verify your request.

9.1 California Residents (CCPA/CPRA)

California residents may have additional rights under the CCPA/CPRA, including rights to know, delete, and correct personal information. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under California law unless we disclose otherwise and offer applicable opt-out mechanisms.

9.2 Account Deletion

Where the Services support account creation, you may request account deletion through in-app settings (if available) and/or by contacting nora3d.ai@gmail.com.

10. Children's Privacy

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.

11. Security

We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

12. Third-Party Links and Services

The Services may contain links to third-party websites or services. Their practices are governed by their own policies. We are not responsible for third-party practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy at https://nora3d.ai/privacy and update the "Last updated" date. If changes are material, we will provide additional notice as required by law.

14. Contact

Questions about this Privacy Policy:

Email: nora3d.ai@gmail.com
Operator: Nora3d