Privacy Policy
Last updated
RealityTwinz (realitytwinz.com) is operated by Neat Media SRL, Romania ("RealityTwinz", "we", "us"). We are the controller of the personal data described here. This policy explains what we collect when you browse the site, create an account, upload captures, buy a licence or request a capture, and what rights you have.
Questions or requests about your data: office@realitytwinz.com.
What we collect
When you create an account
- Your email address and password. The password is stored only as a secure hash by our authentication provider; we never see it.
- The profile details you choose to add: display name, username, bio, website, social links, profile picture and banner. Your profile is public.
When you upload or publish a capture
- The files you upload (Gaussian splats, point clouds, meshes, collision meshes) and the thumbnails, titles, descriptions, categories and location details you add.
- Published captures are visible to everyone together with your creator name.
- Captures of real places can show people, vehicles or private property. Please read the Creator terms before you publish.
When you request a capture
The details you type into the request form: name, email, company, project location, deadline, budget and project description, so we can reply with a plan and a quote.
When you buy a licence
Payments are handled by Stripe. We receive the order (listing, licence, amount, status and your email) but never your card number. Stripe processes payment data under its own privacy policy.
When you link a PlayCanvas account
The access token you give us so we can publish to your PlayCanvas account. It is stored encrypted and is never sent back to your browser. You can remove it at any time in your settings.
When you use the site
- A few events we record ourselves to run and improve the service: searches you submit, captures you favourite, captures submitted for review or published, and capture requests sent. When you are signed in, these can be linked to your account.
- Technical data our hosting provider handles to deliver and protect the site, such as your IP address, browser type and the time of the request.
What we do not collect
- We use no advertising trackers and no third party analytics.
- Files you open in the Studio from your own computer stay in your browser. They are never uploaded to our servers, and videos are rendered in your browser too.
- We do not sell your personal data.
Why we use it and on what legal basis
- To provide the service you asked for: your account, hosting and showing your captures, selling and delivering licences, answering capture requests (performance of a contract, GDPR Article 6(1)(b)).
- To keep the service secure, prevent abuse and fraud, and understand which features are used so we can improve them (our legitimate interests, Article 6(1)(f)).
- To keep invoices and accounting records and answer lawful requests from authorities (legal obligation, Article 6(1)(c)).
- To send you news or offers, only if you have agreed to it, and you can withdraw that consent at any time (consent, Article 6(1)(a)).
Who processes data for us
We use a small number of providers who process data on our behalf, under contracts that oblige them to protect it:
- Supabase: database and sign in.
- Cloudflare: hosting, file storage (R2), image delivery (Cloudflare Images) and network security.
- Stripe: payments.
- PlayCanvas: only when you link your account and publish a capture there.
- Our email delivery provider: account and service emails.
Some pages also load content from other services, which then receive your IP address and may set their own cookies under their own policies: Google Fonts (the fonts this site uses), arrival.space (interactive spaces), SuperSplat and PlayCanvas (scene viewers and preview images).
We may also disclose data when the law requires it, to protect our rights or the safety of others, or as part of a sale or merger of our business, in which case this policy continues to apply.
International transfers
Some providers process data outside the European Economic Area, for example in the United States. Where they do, the transfer is covered by the EU and US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
How long we keep it
- Account and profile: until you delete your account.
- Captures and files: until you delete them or your account. Copies in backups disappear within a few weeks.
- Capture requests: as long as needed to answer and follow up, and no longer than three years after our last contact.
- Orders and invoices: for the periods Romanian accounting and tax law requires.
- Technical logs: a short period set by our hosting provider, normally days.
Security
Every connection to the site is encrypted. Capture files are private by default and reached only through links that expire. Linked account tokens are stored encrypted. No system is perfectly secure, so please use a strong, unique password and tell us at once if you suspect misuse of your account.
Your rights
Under the GDPR you can ask us to:
- Give you a copy of your personal data, or send it to another provider in a common format.
- Correct data that is wrong or incomplete.
- Delete your data, unless the law requires us to keep it.
- Restrict or stop using your data, including objecting to use based on our legitimate interests.
- Withdraw consent you gave earlier, without affecting what we did before.
You can update most profile details yourself in your settings. For anything else, email office@realitytwinz.com. We answer within one month.
You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority in the country where you live.
Children
The service is not meant for children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Cookies and browser storage
We use one small cookie and some browser storage to keep you signed in and remember your settings. The Cookies Policy lists them all.
Changes to this policy
When we change this policy we update the date at the top. If a change matters for how we use your data, we will tell signed in users by email or on the site before it applies.
Contact
Neat Media SRL, Romania. Email: office@realitytwinz.com.