Privacy Policy

1. What we collect

Depending on how you use the service:

• Account data: name, email address, profile photo and job title (from Google sign-in or what you enter).
• Workspace data: team names, member emails and roles, branding you upload.
• Content: 3D scenes, video, images, audio, comments, annotations, camera views and exports you create or upload.
• Review activity: names entered by guest reviewers, their comments, and which review links were opened.
• Billing data: plan, invoices and the last four digits of a card, held by Stripe; we never store full card numbers.
• Technical data: IP address, browser type and diagnostic logs needed for security and to fix problems.

2. How we use it

To provide and secure the service (sign-in, storing and streaming your media, sharing review links), to bill paid plans, to send transactional emails (invitations, review notifications, billing), to provide support, and to understand aggregate usage so we can improve the product. We do not sell personal data and do not show advertising.

3. Who processes it for us

We use a small number of providers, each bound by its own data-processing terms:

• Google Cloud / Firebase: authentication, database, file storage, hosting and server functions.
• Mux: video encoding, storage and streaming.
• Stripe: subscriptions and payments.
• Resend: transactional email delivery.
• Slack and Airtable: only if you connect them, for notifications you choose to send.

4. Cookies and local storage

The service uses only strictly necessary storage: your sign-in session, your preferences (theme, layout) and caches that make the app fast, kept in your browser's local storage. We do not set advertising or third-party analytics cookies, which is why you will not see a cookie banner. Stripe sets its own cookies on its hosted checkout pages.

5. Sharing and review links

Content is private to your workspace unless you share it. Review links can be opened by anyone who has the link (with a name prompt) or restricted to signed-in accounts; you choose per link and can revoke a link at any time. Guest reviewers see the comps you shared and the comments on them.

6. Retention and deletion

Your content stays as long as your account does. Deleting a version, project or workspace removes its files from our storage and from Mux; deleting your account (Settings → Personal settings) removes your profile and content. Billing records are kept as long as tax law requires. Backups expire on a rolling schedule.

7. Your rights

You can access and update your profile in Settings, export your media at any time, and delete your account yourself. If you are in the EU/UK you also have the rights to data portability, restriction and objection, and to complain to your supervisory authority. For any request, email info@preshow.link.

8. Security

Data is encrypted in transit and at rest by our providers, access is limited to what each role needs, and two-factor authentication is available for email/password accounts. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.

9. Changes and contact

We will announce material changes to this policy in the app or by email. For any privacy question, or to ask for a copy or deletion of your data, contact Toy Robot Media at info@preshow.link and we will respond within 30 days.