Privacy Policy

Effective date: 24 June 2026

AssetFilm is operated by Cobra Designs Studio (“we”, “us”, “our”). This policy explains what personal data we collect when you use AssetFilm, why we collect it, how long we keep it, and what rights you have over it.

1. Data we collect

Account data

When you register we store your email address and a hashed (bcrypt) copy of your password. We never store your password in plain text. If you sign in with Google we store your Google account ID and the email address Google provides.

Uploaded 3D assets

GLB / GLTF files you upload are stored on our render infrastructure so we can produce the renders you request. Files are linked to your account and are not shared with other users.

Render jobs

We store metadata about each render job you create (chosen shots, settings, status, output file location) so you can download results and view your history.

Payment data

Credit purchases are processed by Stripe. We do not see or store your card number. We receive a confirmation from Stripe after payment, which we use to credit your account. Your email address is shared with Stripe to associate the payment with your account. Stripe’s privacy policy applies to data processed on their platform.

Feedback

If you submit in-app feedback we store your rating, message text, the job it relates to, and whether you ticked “OK to follow up”. This data is used only to improve AssetFilm.

Local browser storage

We store two small items in your browser’s localStorage: a count of how many renders you have downloaded (used to decide when to show a feedback prompt) and a preference flag if you dismiss that prompt. No third-party advertising or analytics scripts are present.

Server logs

Our server records standard request logs (timestamps, endpoints called, HTTP status codes). Logs are retained for up to 30 days for debugging and security purposes.

2. How we use your data

• To authenticate you and maintain your session.
• To store your assets and deliver rendered output files to you.
• To process credit purchases and maintain your credit balance.
• To send transactional emails (email verification, password reset, render-complete notifications). We do not send marketing emails without your consent.
• To improve the product using aggregated feedback.

3. Data processors

We use the following third-party services that process data on our behalf:

• Stripe — payment processing (your email, purchase amount).
• Google — optional OAuth sign-in (your Google account ID and email).

Render jobs are processed on infrastructure we operate ourselves (on-premises render farm). Your uploaded 3D assets do not leave our infrastructure.

4. Data retention

• Uploaded assets and render outputs: retained until you delete them, or until your account is closed.
• Soft-deleted assets: permanently purged within 7 days of deletion.
• Account data: retained until you request deletion (see Section 5).
• Credit transaction records: retained for 7 years for financial record-keeping.
• Server logs: retained for up to 30 days.

5. Your rights

You can request a copy of, correction to, or deletion of your personal data at any time by emailing privacy@assetfilm.com. We will respond within 30 days. Note that we may retain transaction records for the period required by law even after account deletion.

If you are in the European Economic Area you also have the right to lodge a complaint with your local data protection authority.

6. Security

Passwords are hashed with bcrypt before storage. Sessions use cryptographically random tokens. All data in transit is encrypted via HTTPS. We do not store payment card details.

7. Changes to this policy

We may update this policy. If we make a material change we will update the effective date at the top and, where practical, notify you by email.

8. Contact

Questions about this policy: privacy@assetfilm.com