Privacy Policy

1. Scope

This Privacy Policy applies globally to all users of the MyWorlds Gen service.

2. Data We Collect

Account Data

• Email address
• Password (hashed)
• Name (if provided)

Usage Data

• Session information
• Device information and browser type
• IP address
• Credit consumption and project activity

We do not currently use third-party analytics tools. Only essential functional cookies are used.

User Input & Generated Content

Users may provide:

• Text prompts and configuration inputs
• Uploaded assets (images, textures)
• 3D scene configurations

We process:

• Generated 3D scenes, images, and videos
• Edited outputs and previews
• Associated metadata

AI Processing

Inputs may be processed using AI systems (including third-party providers such as Replicate) to generate 3D environments, images, and videos. Only anonymized inputs are sent to AI providers.

Payments

Payment data is processed via Stripe. We do not store credit card numbers or full payment details on our servers.

3. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies. For full details, see our Cookie Policy.

4. Purpose

We use your data to:

• Generate 3D environments, images, and videos
• Provide scene editing and creative tools
• Process payments and manage subscriptions
• Send transactional emails (welcome, password reset, payment confirmation)
• Improve the service and fix bugs
• Protect against fraud and misuse

5. Legal Basis

We process your personal data on the following legal bases:

• Contract: To provide the services you have signed up for
• Legitimate interest: To improve and secure our services
• Consent: Where required, such as for optional communications

6. Data Sharing

We share your data only with the following service providers:

• Cloudflare: Web hosting, API infrastructure, and file storage (R2)
• Stripe: Payment processing
• Replicate: AI image and video generation (anonymized inputs only)
• Sendio: Transactional email delivery

We never sell your personal data to third parties.

7. Retention

Your data is retained only as long as you have an active account. Upon account deletion, your data will be permanently removed within 30 days. Billing records are retained for 7 years in accordance with legal obligations.

8. User Responsibility

Users must ensure they have the necessary rights to any content they upload to the service, including images, textures, and other assets.

9. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your projects and generated content
• Opt out of marketing communications

To exercise these rights, contact us at support@cstmware.com.

10. International Transfers

Your data may be transferred to and processed in countries outside of the Czech Republic. When this occurs, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

11. Security

We implement standard security measures to protect your data. Passwords are hashed using bcrypt. All communication is encrypted via HTTPS. Access to your data is restricted to authorized team members only.

12. Contact

For any questions regarding this Privacy Policy, contact us at support@cstmware.com.