Privacy Policy

This policy explains how trellis-2.com ("TRELLIS.2", "we", "us") handles personal information when you visit the site, create an account, generate a 3D model, make a payment, or contact support.

Information We Handle

Account and authentication

We handle your name, email address, account identifiers, sign-in method, and security/session records. If you use a third-party sign-in provider, that provider sends us the account details needed to authenticate you.

Generation and service activity

To provide image-to-3D generation, we handle uploaded images, selected settings, task status, provider responses, generated files, credit usage, and activity history. Do not upload confidential material or personal information you do not have permission to use.

Device, log, and usage information

Our systems and service providers may receive IP address, browser and device type, operating system, referring page, timestamps, requested URLs, error details, and security events. We use this information to operate, secure, debug, and improve the service.

Payment information

Payment processors collect card or other payment credentials directly. We do not store full card numbers. We may store transaction and billing records such as payment provider, customer identifier, order or subscription status, amount, currency, invoice identifier, and payment timestamps.

Support and communications

We handle the messages and attachments you send to support, along with delivery, bounce, open, or click events where the configured email provider makes those events available.

Cookies, Analytics, and Advertising

We use essential cookies or similar storage for authentication, security, language, and user preferences. Optional analytics may measure page visits and product events when configured.

Google AdSense is disabled by default in our application. If advertising is enabled, it is limited to eligible editorial content pages. Google and its partners may use cookies, web beacons, IP addresses, or similar technologies to deliver, measure, and protect ads. Google explains how partner sites use data in How Google uses information from sites or apps that use our services.

Where required in the EEA, United Kingdom, or Switzerland, advertising must not be enabled until a Google-certified consent management platform is configured. Available consent and advertising choices will be presented by that platform. You can also review Google Ads personalization controls and industry opt-out choices.

Why We Use Information

We use information to:

• create and secure accounts;
• run generation tasks, maintain activity history, and account for credits;
• complete payments, subscriptions, refunds, and fraud checks;
• provide support and service notices;
• diagnose errors, prevent abuse, and protect users and infrastructure;
• measure and improve site content and product usability;
• comply with legal obligations and enforce our terms.

Depending on your location, our legal basis may be performance of a contract, legitimate interests, consent, or compliance with law.

Service Providers and Disclosure

We disclose only the information needed to providers that help us operate authentication, AI inference, hosting, database and file storage, payments, email delivery, analytics, advertising, security, and customer support. Those providers process information under their own terms and privacy notices.

We may also disclose information when required by law, to respond to a valid legal request, to investigate fraud or abuse, to protect rights and safety, or as part of a business reorganization. We do not sell personal information for money. Advertising-related disclosures, when enabled, may be treated as "sharing" under some laws; use the consent and opt-out controls described above where available.

Retention

We keep account, generation, payment, security, and support records only as long as reasonably needed for the purposes described above, including providing the service, resolving disputes, preventing fraud, meeting accounting obligations, and enforcing agreements. Retention periods vary by record type and legal requirements. Backups may take additional time to expire.

Inactive accounts that have never paid

Starting with schedules created under this policy, a verified account may be scheduled for deletion when all of the following remain true: it was created more than 30 days ago, we have recorded no sign-in, session, or other account activity for at least 30 consecutive days, and it has never completed a payment. Accounts with an active subscription, payment history, refund, chargeback, payment dispute, or a legal/accounting retention requirement are excluded.

When an account qualifies, we schedule deletion 30 days in advance and send an account-status notice to its verified email address. We send another reminder approximately 7 days before deletion. Signing in or using the confirmation page linked from the notice cancels the schedule. Merely opening an email does not cancel it.

Unused free, trial, referral, or promotional credits do not prevent deletion and expire when the account is deleted. Before deletion we recheck activity and payment status. After deletion, we may retain a minimal non-reversible email hash, delivery/suppression record, or other record required to document the deletion, prevent unwanted future mail, resolve abuse, or comply with law. We do not use those retained records to recreate the account.

Security and International Processing

We use access controls, transport encryption, and operational safeguards appropriate to the service. No internet transmission or storage system is completely secure. Our providers may process information in countries other than your own, subject to the safeguards required by applicable law.

Your Choices and Rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection, or withdraw consent where processing relies on consent. You may also opt out of non-essential communications. We may need to verify your account before completing a request, and some records must be retained for legal, security, or accounting reasons.

Children

The service is not designed for children under 13. If local law requires a higher minimum age, a parent or guardian must provide any required authorization. Contact us if you believe a child submitted personal information without appropriate permission.

Changes and Contact

We may update this policy as the service or legal requirements change. The updated date above shows the latest revision. Material changes will be posted on this page.

For privacy questions or rights requests, visit our Contact page or email [email protected]. Do not send passwords, API keys, or full payment-card details.