PRIVACY POLICY
Last updated April 19, 2026
This Privacy Notice for
vitrine
("we," "us,"
or "our"), describes how and
why we might access, collect, store, use, and/or
share ("process") your personal
information when you use our services
("Services"), including when
you:
-
Visit our website at
https://vitrine3d.com
or any website of ours that links to this Privacy
Notice
-
Use vitrine. vitrine is a web-based platform for
creating, managing, and embedding interactive 3D
product visuals. Users can upload, generate, or
create 3D models, configure how they look, and embed
them on any website. The service includes a visual
editor, cloud hosting for assets, and integrations
with e-commerce platforms.
-
Engage with us in other related ways, including any
marketing or events
Questions or concerns? Reading
this Privacy Notice will help you understand
your privacy rights and choices. If you do not
agree with our policies and practices, please do
not use our Services. If you still have any
questions or concerns, please contact us at
[email protected].
SUMMARY OF KEY POINTS
This summary provides key points from our
Privacy Notice. You can find out more
details by using the table of contents
below.
What personal information do we
process?
When you visit, use, or navigate our Services, we
may process personal information depending on how
you interact with us and the Services, the choices
you make, and the products and features you
use.
Do we process any sensitive personal
information?
We do not process sensitive personal
information.
Do we collect any information from third
parties?
We do not collect any information from third
parties.
How do we process your information?
We process your information to provide, improve, and
administer our Services, communicate with you, for
security and fraud prevention, and to comply with
law. We process your information only when we have a
valid legal reason to do so.
In what situations and with which parties do we
share personal information?
We may share information in specific situations and
with specific third parties.
How do we keep your information safe?
We have adequate organizational and technical
processes and procedures in place to protect your
personal information. However, no electronic
transmission over the internet or information
storage technology can be guaranteed to be 100%
secure.
What are your rights? Depending on
where you are located geographically, the applicable
privacy law may mean you have certain rights
regarding your personal information.
How do you exercise your rights?
The easiest way to exercise your rights is by
submitting a
data subject access request, or by contacting us.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short:
We collect personal information that you
provide to us.
We collect personal information that you
voluntarily provide to us when you register on the
Services, express an interest in obtaining
information about us or our products and Services,
when you participate in activities on the Services,
or otherwise when you contact us.
Personal Information Provided by You.
The personal information we collect may include the
following:
-
email addresses
-
usernames
-
passwords
-
contact or authentication data
-
debit/credit card numbers
Sensitive Information. We do not
process sensitive information.
Payment Data. We may collect data
necessary to process your payment if you choose to
make purchases. All payment data is handled and
stored by Stripe. You may find their privacy notice
here:
https://stripe.com/privacy.
Social Media Login Data. We may
provide you with the option to register with us
using your existing social media account details. If
you choose to register in this way, we will collect
certain profile information about you from the
social media provider, as described in the section
called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.
All personal information that you provide to us
must be true, complete, and accurate, and you must
notify us of any changes to such personal
information.
Information automatically collected
In Short:
Some information — such as your Internet
Protocol (IP) address and/or browser and device
characteristics — is collected automatically
when you visit our Services.
We automatically collect certain information when
you visit, use, or navigate the Services. This
information does not reveal your specific identity
but may include device and usage information, such
as your IP address, browser and device
characteristics, operating system, language
preferences, referring URLs, device name, country,
location, information about how and when you use our
Services, and other technical information. This
information is primarily needed to maintain the
security and operation of our Services, and for our
internal analytics and reporting purposes.
Like many businesses, we also collect information
through cookies and similar technologies. You can
find out more about this in our Cookie Notice:
https://vitrine3d.com/cookie-policy.
The information we collect includes:
-
Log and Usage Data. Log and usage data is
service-related, diagnostic, usage, and performance
information our servers automatically collect when
you access or use our Services and which we record
in log files.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short:
We process your information to provide,
improve, and administer our Services,
communicate with you, for security and fraud
prevention, and to comply with law.
We process your personal information for a
variety of reasons, depending on how you
interact with our Services, including:
-
To facilitate account creation and
authentication and otherwise manage user
accounts.
-
To deliver and facilitate delivery of services
to the user.
-
To respond to user inquiries/offer support to
users.
-
To send administrative information to
you.
-
To protect our Services. We may
process your information as part of our efforts to
keep our Services safe and secure, including fraud
monitoring and prevention.
-
To identify usage trends. We may
process information about how you use our Services
to better understand how they are being used so we
can improve them.
-
To save or protect an individual's vital
interest.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS
YOUR INFORMATION?
In Short:
We only process your personal information when
we believe it is necessary and we have a valid
legal reason to do so under applicable law, like
with your consent, to comply with laws, to
provide you with services, to protect your
rights, or to fulfill our legitimate business
interests.
The General Data Protection Regulation (GDPR) and
UK GDPR require us to explain the valid legal bases
we rely on. As such, we may rely on the following
legal bases:
-
Consent. You can withdraw your
consent at any time.
-
Performance of a Contract.
-
Legitimate Interests. For example,
to analyze how our Services are used and to diagnose
problems and/or prevent fraudulent activities.
-
Legal Obligations.
-
Vital Interests.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL
INFORMATION?
In Short:
We may share information in specific situations
described in this section and/or with the
following third parties.
The third parties we may share personal information
with are as follows:
-
Allow Users to Connect to Their Third-Party
Accounts:
Google account, Shopify
-
Invoice and Billing: Stripe
-
User Account Registration and
Authentication:
Google Sign-In
-
Database & File Storage:
Supabase
-
Content Delivery Network:
Cloudflare
We may also need to share your personal information
in the following situations:
-
Business Transfers. We may share
or transfer your information in connection with, or
during negotiations of, any merger, sale of company
assets, financing, or acquisition of all or a
portion of our business to another company.
5. DO WE USE COOKIES AND OTHER TRACKING
TECHNOLOGIES?
In Short:
We may use cookies and other tracking
technologies to collect and store your
information.
We may use cookies and similar tracking
technologies (like web beacons and pixels) to gather
information when you interact with our Services.
Some online tracking technologies help us maintain
the security of our Services and your account,
prevent crashes, fix bugs, save your preferences,
and assist with basic site functions.
6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED
PRODUCTS?
In Short:
We offer products, features, or tools powered
by artificial intelligence, machine learning, or
similar technologies.
As part of our Services, we offer products,
features, or tools powered by artificial
intelligence, machine learning, or similar
technologies (collectively, "AI Products"). These
tools are designed to enhance your experience and
provide you with innovative solutions.
Our AI Products
Our AI Products are designed for the following
functions:
All personal information processed using our AI
Products is handled in line with our Privacy Notice
and our agreement with third parties.
7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In Short:
If you choose to register or log in to our
Services using a social media account, we may
have access to certain information about
you.
Our Services offer you the ability to register and
log in using your third-party social media account
details. Where you choose to do this, we will
receive certain profile information about you from
your social media provider. The profile information
we receive may vary but will often include your
name, email address, friends list, and profile
picture.
We will use the information we receive only for the
purposes described in this Privacy Notice. We
recommend that you review their privacy notice to
understand how they collect, use, and share your
personal information.
8. IS YOUR INFORMATION TRANSFERRED
INTERNATIONALLY?
In Short:
We may transfer, store, and process your
information in countries other than your
own.
Our servers are located in the United States. If
you are a resident in the European Economic Area
(EEA), United Kingdom (UK), or Switzerland, we will
take all necessary measures to protect your personal
information in accordance with this Privacy Notice
and applicable law.
We have implemented measures to protect your
personal information, including by using the
European Commission's Standard Contractual Clauses
for transfers of personal information. Our Standard
Contractual Clauses can be provided upon
request.
9. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short:
We keep your information for as long as
necessary to fulfill the purposes outlined in
this Privacy Notice unless otherwise required by
law.
We will only keep your personal information for as
long as it is necessary for the purposes set out in
this Privacy Notice. No purpose in this notice will
require us keeping your personal information for
longer than the period of time in which users have
an account with us.
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short:
We aim to protect your personal information
through a system of organizational and technical
security measures.
We have implemented appropriate and reasonable
technical and organizational security measures
designed to protect the security of any personal
information we process. However, despite our
safeguards and efforts to secure your information,
no electronic transmission over the Internet or
information storage technology can be guaranteed to
be 100% secure. You should only access the Services
within a secure environment.
11. DO WE COLLECT INFORMATION FROM MINORS?
In Short:
We do not knowingly collect data from or market
to children under 18 years of age.
We do not knowingly collect, solicit data from, or
market to children under 18 years of age. By using
the Services, you represent that you are at least
18. If you become aware of any data we may have
collected from children under age 18, please contact
us at
[email protected].
12. WHAT ARE YOUR PRIVACY RIGHTS?
In Short:
Depending on your state of residence in the US
or in some regions, such as the EEA, UK,
Switzerland, and Canada, you have rights that
allow you greater access to and control over
your personal information. You may review,
change, or terminate your account at any
time.
In some regions, you have certain rights under
applicable data protection laws, including the right
to request access, rectification, erasure,
restriction, data portability, and the right to
object to processing. You can make such a request by
contacting us using the contact details provided in
the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.
Withdrawing your consent:
You have the right to withdraw your consent at any
time by contacting us.
Account Information
If you would at any time like to review or change
the information in your account or terminate your
account, you can log in to your account settings and
update your user account.
Cookies and similar technologies:
Most Web browsers are set to accept cookies by
default. If you prefer, you can usually choose to
set your browser to remove cookies and to reject
cookies. For further information, please see our
Cookie Notice:
https://vitrine3d.com/cookie-policy.
If you have questions or comments about your
privacy rights, you may email us at
[email protected].
13. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems
include a Do-Not-Track ("DNT") feature or setting.
At this stage, no uniform technology standard for
recognizing and implementing DNT signals has been
finalized. As such, we do not currently respond to
DNT browser signals. If a standard for online
tracking is adopted that we must follow in the
future, we will inform you about that practice in a
revised version of this Privacy Notice.
14. DO UNITED STATES RESIDENTS HAVE SPECIFIC
PRIVACY RIGHTS?
In Short:
If you are a resident of California, Colorado,
Connecticut, Delaware, Florida, Indiana, Iowa,
Kentucky, Maryland, Minnesota, Montana,
Nebraska, New Hampshire, New Jersey, Oregon,
Rhode Island, Tennessee, Texas, Utah, or
Virginia, you may have the right to request
access to and receive details about the personal
information we maintain about you and how we
have processed it, correct inaccuracies, get a
copy of, or delete your personal
information.
We have not sold or shared any personal information
to third parties for a business or commercial
purpose in the preceding twelve (12) months. We have
disclosed the following categories of personal
information to third parties for a business or
commercial purpose: Category A. Identifiers.
Your Rights: Right to know, right
to access, right to correct, right to request
deletion, right to obtain a copy, right to
non-discrimination, and right to opt out of targeted
advertising, sale of personal data, or
profiling.
Appeals: If we decline to take
action regarding your request, you may appeal our
decision by emailing us at
[email protected].
15. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update
this notice as necessary to stay compliant with
relevant laws.
We may update this Privacy Notice from time to
time. The updated version will be indicated by an
updated "Revised" date at the top of this Privacy
Notice. We encourage you to review this Privacy
Notice frequently.
16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this
notice, you may email us at
[email protected]
or contact us by post at:
vitrine
Bern, Bern 3014
Switzerland
17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE
DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country or
state of residence in the US, you may have the right
to request access to the personal information we
collect from you, details about how we have
processed it, correct inaccuracies, or delete your
personal information. You may also have the right to
withdraw your consent to our processing of your
personal information. To request to review, update,
or delete your personal information, please fill out
and submit a
data subject access request.
7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?