Privacy Policy

1. Who We Are

Volugraph Ltd. (“Volugraph”, “we”, “us”, or “our”) is the data controller for the personal data we collect when you use the Volugraph platform at volugraph.com and our associated mobile applications. We are a company registered in England and Wales, with our registered office at 71-75 Shelton St, London WC2H 9JQ, United Kingdom.

For questions about this Privacy Policy or your personal data, contact us at support@volugraph.com.

2. Data We Collect

We collect the following categories of personal data:

• Account and contact details: Email address, display name, profile information you provide when you register or update your account.
• Content you upload: 3D Gaussian capture files and related metadata you upload or create through the Service.
• Usage and device data: IP address, browser type, device type, operating system, and timestamps. Our hosting and security systems may also log requests as needed to operate the Service, prevent abuse, and troubleshoot issues. We do not use third-party analytics or advertising trackers on the website.
• Payment information: Billing address and payment method details are processed by our payment provider (Stripe). We do not store your full card number on our servers.
• Communications: Records of support requests, feedback, and email exchanges with us.

3. How We Use Your Data

We use your personal data for the following purposes and legal bases:

• Providing the Service: To operate, maintain, and improve the platform, including processing and storing your Gaussian captures, authenticating you, and delivering features. Legal basis: performance of our contract with you.
• Communications: To respond to your enquiries, send account-related and transactional emails (e.g. password resets, subscription confirmations), and notify you of important changes. Legal basis: contract performance and legitimate interests.
• Optional product email: If you opt in under Settings, we may email you about major feature launches and technology updates. You can withdraw consent at any time using the same control. Legal basis: consent.
• Security and compliance: To detect and prevent misuse, enforce our Terms of Service, and comply with legal obligations. Legal basis: legitimate interest and legal obligation.

4. Third-Party Services

We share data with trusted third parties who help us operate the Service:

• Firebase / Google Cloud: Authentication, cloud storage for your capture files, hosting, and backend infrastructure. Data processing is governed by Google’s Data Processing Terms.
• Stripe: Payment processing. Stripe collects and processes payment details in accordance with its privacy policy. We receive limited billing information (e.g. last four digits of card, billing address).
• Resend: Transactional email delivery (account-related, subscription, and support emails).
• MapTiler: Map tiles and geospatial imagery when you use map features in the Service. Requests may include approximate location or viewport data needed to load the map.
• GPU compute providers (e.g. RunPod): Processing of uploads (such as video and images) and generation of 3D outputs on infrastructure we configure for the capture pipeline. These providers process files only as instructed by us to deliver the Service.
• Google Fonts: The marketing site and app load font stylesheets from Google’s font service when you use the Service; Google may receive technical data typical of a font request (such as IP address).

Each of these providers has its own privacy policy. We select providers who commit to appropriate safeguards for your data.

5. Cookies and Similar Technologies

We use cookies and local storage only where needed to run the Service: for example to keep you signed in, protect your account, remember in-app preferences (such as layout), and resume uploads or workspace state. We do not use advertising cookies, behavioural profiling, or third-party analytics or marketing pixels on this site.

• Authentication: Session and security tokens from Firebase Auth / Google Cloud so you can stay logged in safely.
• Essential preferences: Browser storage to remember choices you make in the app (for example sidebar state or map basemap) and to reduce friction when you return to a project.
• Cookie notice preference: A small record that you have seen our essential cookie information.

You can control cookies through your browser settings. Blocking essential cookies or storage may affect your ability to use the Service.

6. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service. When you close your account, we delete your Gaussian 3D capture data and account information within a reasonable timeframe, subject to legal retention obligations.

Payment and billing records may be retained for up to 6 years to comply with UK tax and accounting requirements. Limited server logs and security records may be kept for a period necessary for abuse prevention, security, and legal compliance, after which they are deleted or aggregated where appropriate.

You may request deletion of your data at any time by contacting us at support@volugraph.com. We will respond in accordance with applicable data protection law.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Data in transit is encrypted using TLS.
• Firebase and Google Cloud provide enterprise-grade security for stored data.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• We regularly review our security practices and update them as appropriate.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority (the ICO in the UK) as required by law.

8. Your Rights (UK GDPR)

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your data in certain circumstances.
• Right to data portability: You can request a copy of your data in a machine-readable format.
• Right to restrict processing: You can ask us to limit how we use your data in certain situations.
• Right to object: You can object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@volugraph.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. International Transfers

Some of our service providers (including Firebase/Google, Stripe, Resend, MapTiler, GPU compute providers, and Google Fonts) may process data outside the United Kingdom or European Economic Area. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, Standard Contractual Clauses approved by the UK authorities, or equivalent mechanisms.

You can request further information about the safeguards we use by contacting us at support@volugraph.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will give you at least 30 days’ notice by email or via a prominent notice within the Service before the new policy takes effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

If you do not agree to the changes, you may close your account before the new policy takes effect.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: