Privacy Policy

Hero3D (hero3d.app) turns a text prompt into a 3D hero section you can embed on your website. This policy describes what data Hero3D collects, why, and where it goes. It covers the hero3d.app dashboard and the Hero3D embed script served to third-party sites.

The data controller is Taehun Kim (Taehun Kim Software Lab), Republic of Korea — reachable at taehun@taehun.dev for any request in this policy.

Account. When you sign in we store your email address and, if you use a social provider, the basic profile it returns (name, avatar). Accounts belong to a workspace ("org") used to keep your scenes separate from everyone else's.

Content. The prompts you type, the scenes they produce, and the scenes you publish or download. Published and gifted scenes are public by design — anyone with the link can view them.

Billing. Payments are processed by Polar Software, Inc., trading as Polar, as Merchant of Record and authorized reseller. Card details never touch our servers; we receive order events (order id, product, the email used at checkout) to grant and revoke what you bought.

Usage. Generation counts (for the daily free allowance and credits) and aggregate embed load counts. Embeds do not set tracking cookies and do not profile visitors of the sites they are placed on.

Technical. Standard server logs (IP address, user agent, timestamps) kept for security, rate limiting and abuse prevention.

Hero3D uses cookies and browser storage to run the service — never for advertising or cross-site tracking. Three things are stored on hero3d.app: your sign-in session (set by Firebase Authentication when you log in), your language preference, and Google Analytics cookies we use to understand aggregate site usage (pages visited, referrers) — not to build profiles of you, and never for advertising. The Hero3D embed placed on other people's websites is unchanged: it sets no cookies, loads no analytics, and does not identify their visitors.

If you sign in with Google, we request only your email address and basic profile. This data is used solely to authenticate you and identify your account. It is not sold, not used for advertising, and not shared with third parties except the processors listed below. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

To operate the service: generate scenes from your prompts, host your embeds, enforce generation allowances, grant purchase entitlements, respond to support requests, and keep the service safe. Aggregated, non-identifying usage data may be used to improve the product.

These operations are automated. AI agents, not staff, carry out routine handling — including support replies and decisions about credits, refunds and account limits that follow our published rules. You can ask for a human to look at any such decision: write to the contact address below and a person will review it. See section 1 of the Terms of Service for who is accountable.

Your data is processed by the following infrastructure providers:

• Google Cloud — application hosting (Cloud Run) and asset storage.
• Google Firebase — authentication.
• Supabase — database.
• Google Gemini API — your prompts are sent to Gemini to produce the scene configuration. Prompts are processed as service data, not used to identify you.
• Polar Software, Inc. (trading as Polar) — payments, receipts and tax handling as Merchant of Record.
• Google Analytics — aggregate usage measurement on hero3d.app only (page views, referrers). Never loaded in the Hero3D embed on customer sites.

These providers operate globally, so your data is transferred and processed outside your country, including in the United States. We rely on the providers' standard contractual safeguards for those transfers.

Account data is kept while your account exists. To delete your account and its data, email us at taehun@taehun.dev. Billing records are retained by Polar Software, Inc. as required by law. Server logs rotate on a short schedule.

You can request access to, correction of, or deletion of your personal data at any time via the contact address below; we respond within 30 days. If you are in a jurisdiction with specific data-protection rights (such as the GDPR or Korea's PIPA), we honor those requests accordingly, including withdrawal of consent and objection to processing.

Hero3D is not directed at children under 13 and does not knowingly collect their data.

We may update this policy as the service evolves. The date at the top reflects the latest revision; material changes will be noted on this page.

Questions about this policy: taehun@taehun.dev