Embed3D by Enduvo
Legal

Privacy Policy

Your privacy is important to us. This policy outlines how we collect, use, and protect your information.

Who we are

Embed3D is owned and operated by Enduvo, Inc. ("Enduvo," "we," "us," or "our"). This Policy explains how we collect, use, disclose, and protect information in connection with Embed3D's website(s), dashboard, APIs, documentation, storage/CDN, and our embeddable WebGL/three.js player (the "Service"), including when the Player is embedded on third-party sites and apps that accept iframes.

Contact: legal@enduvo.com • Mail: Legal Department, Enduvo, Inc., 2601 W. Lake Ave., Suite A6-110, Peoria, IL 61615, USA.

Scope

This Policy applies to: (a) visitors to our sites, (b) account holders and uploaders of 3D assets, and (c) viewers who interact with the Player on our sites or on third-party embedding sites. Third-party sites where the Player appears have their own privacy practices—please review them separately.

Information we collect

A) Information you provide

  • Account & billing: name, email, password (hashed), organization, role, plan, billing/contact details.
  • Content data: 3D models, textures/materials, scenes, animations, thumbnails, titles/descriptions, and asset metadata you upload or provide.
  • Support & communications: messages, feedback, error reports, survey responses.

B) Information collected automatically

  • Device & network: IP address, approximate location (derived from IP), user agent, language, referrer/UTM tags, timestamp.
  • Player telemetry (WebGL): GPU vendor/renderer strings, WebGL feature support and extensions, shader compile/link errors, viewport size, FPS/frame timing, memory and buffer metrics, crash logs, quality settings chosen, and other diagnostics necessary to render and troubleshoot.
  • Interaction events: load, play, pause, camera rotate/pan/zoom, hotspot clicks, UI control usage, embed domain/referrer, errors, and completion events.
  • Cookies & local storage: session/auth tokens, preferences, A/B assignment, analytics identifiers.

C) Information from partners

  • Analytics (e.g., Google Analytics/GA4): page views, screens/events, device info, approximate geolocation, and cross-session identifiers; analytics providers may receive your IP address and set/read identifiers (cookies or similar).

How we use information

We use information to:

  • Provide and operate the Service (hosting, processing, streaming, embedding, and caching).
  • Process & optimize 3D assets (e.g., DRACO/KTX2 compression, mesh/texture optimization) and generate derivatives (thumbnails, previews).
  • Maintain safety & integrity (fraud/abuse prevention, rate limiting, security monitoring, investigating incidents).
  • Measure & improve performance (telemetry, crash/error diagnostics, QA, feature development, analytics and A/B testing).
  • Communicate with you (service messages, transactional emails; marketing with your preferences).
  • Comply with law and enforce our Terms.

Legal bases (EEA/UK only)

Where applicable, our legal bases include contract (to provide the Service), legitimate interests (to secure, improve, and measure performance), consent (for certain cookies/marketing where required), and legal obligations.

Cookies and similar technologies

We use cookies, local storage, and pixel tags for authentication, preferences, analytics, and performance. You can control cookies via browser settings; blocking some cookies may impact functionality. For Google Analytics, you may use the GA Opt-out Browser Add-on and industry opt-outs at the DAA and NAI sites.

Analytics & advertising disclosures (US state privacy laws)

We do not exchange personal information for money. However, under California's CPRA and similar state laws, certain analytics and cross-context behavioral advertising activities may be deemed a "sale" or "sharing" of personal information. You may opt out of sale/sharing via our [link or settings] or by emailing legal@enduvo.com. We do not knowingly sell/share the personal information of users under 16.

How we share information

We share information with:

  • Service providers / processors: cloud hosting, storage/CDN, logging/monitoring, analytics (e.g., Google Analytics), email and support tools, payment processors (if/when used). They act under contract and are restricted from using data for their own purposes.
  • Embedding sites: when you view a Player on a third-party site, that site may independently collect data per its policy; we may receive referrer and domain metadata to secure and operate the embed.
  • Corporate affiliates & transfers: in the event of a merger, acquisition, or asset sale.
  • Legal & safety: to comply with law or protect rights, safety, and security.

We do not provide end users' personal information to other customers except as necessary to deliver requested functionality or with your direction.

Data retention

We retain information as long as needed for the purposes above, including account lifecycle, legal/compliance requirements, and security. We may retain logs for a limited period for security and diagnostics, and retain backups for disaster recovery.

International transfers

Data may be processed in the United States and other countries that may have different data-protection laws. When we transfer personal data internationally, we use appropriate safeguards (e.g., Standard Contractual Clauses or other legally recognized mechanisms) consistent with applicable law.

Security

We employ technical and organizational measures designed to protect personal information (access controls, encryption in transit, monitoring, and secure development practices). No system is perfectly secure; we encourage responsible disclosure of vulnerabilities at legal@enduvo.com.

Your rights

California (CPRA)

California residents have the right to know/access, delete, correct, and port certain personal information; to opt out of sale/sharing; to limit use/disclosure of Sensitive Personal Information (if collected); and to be free from discrimination for exercising these rights. We follow verification steps before fulfilling requests (we may require information to verify your identity and, in some cases, a sworn declaration). You can submit requests via legal@enduvo.com or by mail (see Contact).

Do Not Track: industry standards are not uniform; we do not respond to DNT signals at this time.

Shine the Light: We do not share personal information with third parties for their own direct marketing without your consent; you may contact us for details as permitted by California law.

EEA/UK and other jurisdictions

Subject to law, you may have rights to access, rectify, erase, restrict, object, and port your data, and to withdraw consent where processing is based on consent. To exercise rights, contact legal@enduvo.com.

Children

Embed3D is not directed to children under 13 (or higher age as required by local law). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us to request deletion.

Player-specific details

  • Telemetry: The Player collects WebGL/graphics capabilities, performance, and error data to render scenes, detect compatibility issues, and improve quality.
  • Event logging: We record non-content interaction events (e.g., play/rotate/zoom/hotspot clicks) and technical events (e.g., buffer loads, shader errors) tied to your session or account to operate and improve the Service.
  • Derivatives: We generate optimized derivatives (e.g., DRACO/KTX2, mesh decimation, thumbnails) solely to provide and improve the Service; derivatives may persist in caches for a limited time.
  • Third-party embeds: When the Player runs on another site, that site may collect additional data; we are not responsible for that site's practices.
  • Access controls: Customers may configure embed settings (e.g., public/unlisted, allowed domains) which affect what is collected and displayed to viewers.

Your choices

  • Account settings: update profile, preferences, and (where available) privacy controls.
  • Analytics: use the GA opt-out add-on and advertising industry opt-outs (DAA/NAI).
  • Cookies: manage via browser settings or our preference center (where available).
  • Marketing emails: opt out via unsubscribe links or by contacting us.

Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date and, where required, notify you through the Service or by email. Continued use of the Service after the effective date constitutes acceptance.

Contact us

Enduvo, Inc. (for Embed3D)
Legal Department
2601 W. Lake Ave., Suite A6-110
Peoria, IL 61615, USA

Email: legal@enduvo.com