Privacy policy

Last updated: 2 August 2026

The data controller is Solaas Tech SRL, VAT/CIF 54888013, registered office at Strada Prieteniei nr. 7, bl. P, sc. B, ap. 26, Constanța, Romania. You can reach us at randora@grappes.dev.

1. What we collect

• Account data: email address, name and password (stored cryptographically, as a hash).
• Sign in with Google or Apple: if you choose to sign in this way, we receive from Google/Apple an account identifier, your email address and, where available, your name. We never receive your Google/Apple password.
• Payments: payments are processed by Stripe; we only keep the purchase history and credit ledger of your account, not your card details.
• Content: the 3D models you upload and the images generated for your jobs.
• Technical data: server logs required for the operation and security of the service.

2. How we use data

We use data exclusively to provide the service: authentication, 3D model processing, image generation and delivery, and account-related communication. We do not sell your data and we do not use it for advertising.

3. AI processing

For the visual evaluation of renders, preview images generated from your model are sent to an AI model provider (Anthropic) strictly for image quality analysis. The material names found in your file are sent there too, when we build the materials you asked for.

If you use the AI Editor, the image you are editing (one of your renders or a photo you upload), the area you select and the instruction you write are sent to the image model provider fal.ai, strictly to generate the result you asked for. The editor only runs when you ask it to: if you never open it, nothing is sent there.

Your original 3D models never leave our servers to any third party. Only images and text are sent to the providers above, never your source files.

4. Storage and deletion

Models and images are stored on our servers in the European Union for as long as your account is active. You can request deletion of a job or of your entire account at any time, and the associated data is removed.

5. Cookies

We use a single strictly necessary session cookie, for authentication. We do not use tracking or advertising cookies.

6. Your rights

Under GDPR you have the right to access, rectify, delete, restrict and port your data. To exercise these rights, write to randora@grappes.dev.