Legal

Privacy Policy

Last updated: May 23, 2026

This Privacy Policy describes how 3D Architectural Solutions (“3DAS,” “we,” “us,” or “our”) handles information in connection with the EDIT by DIY Render application (the “Service”).

1. Who we are

Controller: 3D Architectural Solutions (3DAS)
Address: Miromar Design Center, 10800 Corkscrew Road, Suite 382, Estero, FL 33928, United States
Phone (Naples): 239-580-6899
Privacy inquiries: 3d@3das.com

2. Scope

This policy applies to information processed when you use the Service, including websites and hosts such as edit.diyrender.com and related development or staging environments. It does not govern third-party sites we link to (for example, your Google Cloud console or the DIY Render customer portal). Those sites have their own policies.

3. Information we collect

Account and authentication. Where login is required, we use Auth0, Inc. to authenticate you. We may receive an account identifier (such as an Auth0 subject ID) and profile elements that Auth0 shares with our application according to your login method and our configuration. We use this to operate accounts, enforce access, and sync usage data with our backend.

Usage, billing, and limits. Our servers may process data such as generation counts, wallet or credit balance flags, subscription status, role, and similar account metadata returned from authenticated endpoints. This helps us enforce fair use and deliver paid tiers.

Content you submit. When you use AI features, your prompts, images, masks, and related inputs may be transmitted to Google (Gemini / Google Generative AI) and, for certain features (for example, upscaling or models hosted on Replicate), to Replicate and underlying model providers. That processing may occur directly from your browser to Google when you use your own API key, or through our application servers and proxies (for example, services hosted on Google Cloud).

API keys you store locally. If you choose to save a Google API key in your browser (or load one from Google AI Studio), that key remains on your device unless you or the application sends it to our servers as part of a request. You control that choice; we encourage you to treat API keys as secrets.

Analytics and diagnostics. We use Google Analytics (Google LLC) on the Service; measurement IDs or tags may be present in our pages. Where configured, we use PostHog (PostHog Inc.) for product analytics. PostHog may use cookies and local storage; we configure product analytics without session replay by default in our codebase. We may associate analytics identifiers with your Auth0 subject ID when login is required, to understand product usage in aggregate.

Technical logs. Like most web services, we and our hosting providers may collect server logs (IP address, user agent, timestamps, request paths) for security, debugging, and compliance. Retention periods vary by system; contact 3d@3das.com for more detail.

Support and feedback. If you contact us or submit feedback, we process the contents of your message and contact details you provide. We retain such communications as long as needed to respond and for our legitimate business records unless a longer period is required by law.

4. Legal bases (EEA/UK users)

If you are in the European Economic Area or United Kingdom, we rely on one or more of: contract (to provide the Service you request); legitimate interests (to secure the Service, understand usage, and improve features, balanced against your rights); and consent where required (for example, non-essential cookies or marketing, if we use them). You may have rights to access, rectify, erase, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority.

5. How we use information

6. Sharing and subprocessors

We share information with service providers who process it on our instructions:

We may also share information if we believe disclosure is required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale, subject to applicable law.

7. International transfers

We and our providers may process information in the United States and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses. Contact 3d@3das.com regarding data processing agreements where applicable.

8. Retention

We retain information only as long as necessary for the purposes described in this policy, unless a longer period is required by law.

3DAS systems: Prompts, images, and masks sent through our application servers or proxies are processed only to complete your request and are not retained for product purposes after the request finishes. Anonymized text data (prompts with identifiers removed) may be used to improve our models and applications. Operational logs (timestamps, paths, errors) are retained for 90 days.

Third-party AI providers: Google and Replicate process inputs under their terms and retention practices. We do not control whether they log, cache, or use data for model improvement. See §6 and their linked policies.

Account metadata is retained while your account is active and for a reasonable period afterward.

9. Security

We implement technical and organizational measures appropriate to the risk, including encryption in transit where standard for web services and access controls for production systems. No method of transmission or storage is completely secure.

10. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to opt out of certain processing. Contact 3d@3das.com. If you use Auth0 login, you may also manage some profile data through your identity provider or Auth0’s interfaces.

Account deletion. Email support@diyrender.com from your account email with subject “Account deletion request.” We verify identity manually and complete deletion of account metadata we control within 30 days. Subscriptions should be cancelled in the customer portal first where applicable. Billing/tax records may be retained as required by law (7 years). Data stored only in your browser must be cleared locally; we cannot remote-delete it.

California residents. If the California Consumer Privacy Act or California Privacy Rights Act applies, you may have additional rights regarding personal information and sensitive personal information, including opt-out of sale/sharing (we do not “sell” personal information in the conventional sense, but analytics cookies may constitute “sharing” under California law). Contact 3d@3das.com to exercise applicable rights.

Do Not Track. There is no consistent industry standard for “Do Not Track”; we treat privacy choices as required by applicable law.

11. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact 3d@3das.com and we will take appropriate steps.

12. Changes

We may update this policy from time to time. We will post the revised policy with a new “Last updated” date and, where appropriate, provide additional notice.

13. Contact

3D Architectural Solutions (3DAS)
Miromar Design Center
10800 Corkscrew Road, Suite 382
Estero, FL 33928
Phone (Naples): 239-580-6899
Privacy: 3d@3das.com