Privacy Policy.

1. Who is responsible for your information

ImageTo3DPrint.com is operated by MTTenterprise Inc. at 201-1525 Alta Vista Drive, Ottawa, Ontario K1G 0G1, Canada. MTTenterprise is responsible for the personal information described in this Privacy Policy and acts as the controller where that concept applies. Privacy questions and requests can be sent to our privacy contact at [email protected].

This policy covers the website, supported 3D viewers, image conversion, accounts, billing and related support. Embroidery File Converter is also owned by MTTenterprise but has its own privacy policy. Common ownership does not mean your uploads are automatically shared between these services.

2. Information we collect

The information involved depends on the features you use:

• Account details: name, email, password hash, verification status, preferences, and security information such as passkey records or two-factor settings when enabled. If you use an authenticated API, access-token and related device/session records may be stored.
• Conversion content: uploaded images or SVG artwork, filenames, file types and sizes, source identifiers, image dimensions, model settings, generated models, colour regions, previews, geometry reports, warnings and preparation results.
• Billing records: customer and checkout identifiers, selected products or formats, amounts and currency, payment status, subscriptions, credits, entitlements, refunds and disputes. Stripe collects payment details and may collect your checkout email and billing information; we do not store full card numbers or card security codes.
• Technical information: IP address, browser/user-agent information, request times, essential session and guest-access identifiers, language or appearance preferences, hashed signup-device and IP signals, service errors and security events.
• Support information: messages, contact details and any receipt or diagnostic information you choose to provide. Please do not send sensitive images or payment-card information in ordinary email.

3. Local viewers and uploaded conversions

In our free STL, STEP, OBJ, 3MF, GLB and general 3D file viewers, the file you select is read and rendered in your browser. It is not uploaded to the conversion service merely to view it. Visiting a viewer page still involves ordinary website requests, essential preferences and security logs. Loading a sample model retrieves the sample from our website.

Creating a model from an image is different: the image is uploaded to private application storage and sent to our conversion engine. The engine prepares artwork, builds geometry and creates the preview, report and exports. Authorized routes control access to private conversion files. Your uploads are not placed in a public gallery or used in our marketing without separate permission.

Only submit material you are authorized to process, including photographs of other people or client artwork. Remove unnecessary personal or confidential information before uploading. Use a local viewer, rather than an image-conversion upload, if you only need to inspect an existing supported 3D file.

4. Automatic image preparation

When automatic artwork analysis is enabled and applicable, we send a resized, re-encoded copy of raster artwork to a third-party AI image analysis service to classify the image and help preserve details during preparation. We do not send account or billing details with that analysis request. The analysis assists preparation; it does not certify printability or reconstruct hidden surfaces.

When background removal needs external segmentation and that service is enabled, our conversion engine may send an image copy to a third-party background removal service. Other inputs can be handled with local background detection or segmentation. Choosing to keep the background does not by itself disable every other automatic preparation feature.

We use the provider responses to fulfil your conversion request. Derived analysis results may be cached for up to 24 hours. Local foreground-mask caches are short-lived, ordinarily 30 minutes and configured to expire within 24 hours; they are used to avoid repeating preparation for the same image.

We do not sell your artwork or use uploaded artwork to train our own AI models. Our image processing service providers process submitted copies under applicable service agreements and data-handling terms. They may retain data for safety, security or legal purposes under those terms. Deleting a file from our Service does not promise immediate deletion of all provider records. Contact [email protected] for more information about these providers or before uploading material that requires a specific confidentiality agreement, processing location or zero-retention arrangement.

5. Why we use information

We use information to:

• Deliver the requested preparation, conversion, viewing, geometry checks and downloads, and keep account or purchase history.
• Authenticate users, maintain guest access, manage preferences and send requested account, security and billing messages.
• Process payments, subscriptions, credits, refunds and disputes.
• Protect files and accounts, enforce reasonable service limits, prevent payment or repeated-account abuse, and diagnose failures or performance problems.
• Respond to support and privacy requests, comply with legal obligations and resolve disputes.

Where applicable, these activities rely on performing a contract, consent, legal obligations or our legitimate interests in operating and securing the Service. Where consent is required, we seek it for the relevant processing; this policy is not a blanket waiver of consent rights. We do not use your uploaded content for advertising profiles or cross-context behavioural advertising.

6. Cookies and browser storage

We use essential session, authentication and security cookies, along with language, appearance and sidebar preferences. A guest-access cookie normally lasts up to 30 days and lets us associate your browser with your conversions and model purchases. Session and other cookie lifetimes depend on their purpose and configuration.

A signup-device cookie may last up to 90 days. We store keyed hashes of signup-device identifiers and IP signals to identify repeated registrations and determine whether additional email verification is necessary. These signals are pseudonymous, not necessarily anonymous.

Browser storage may keep appearance preferences or workspace state. You can manage cookies and local storage in your browser. Clearing or blocking them can sign you out, remove preferences or prevent guest access to purchased files. The Service does not currently install advertising trackers or optional third-party analytics cookies. Stripe may use cookies and fraud-prevention technologies on its hosted pages under its own policy.

7. Who receives information

We disclose information needed to operate the Service to hosting, storage, email and operational providers; to third-party image analysis and background removal services for the enabled preparation features described above; and to Stripe for checkout, billing, fraud prevention, subscriptions, refunds and disputes. These providers have their own security and retention practices, and some, including Stripe, act independently for certain legal or fraud-prevention purposes.

We may also disclose necessary information to professional advisers under confidentiality obligations, in response to lawful requests, to protect people or legal rights, or as part of a business transaction such as a merger or sale subject to applicable safeguards. We do not sell personal information or uploaded artwork, and do not share them for targeted advertising.

• Stripe Privacy Policy (opens in a new tab)

8. How long we retain information

Unpurchased source images, previews and conversion files normally expire 24 hours after creation. A completed model purchase extends the conversion and associated source to a 30-day download window from purchase. Check the expiry shown for your file. Files become unavailable at expiry and are removed by scheduled cleanup; physical deletion may occur after the exact expiry time.

Temporary processing files are removed when the processing task finishes. Short-lived analysis and foreground caches follow the periods described above. Provider-held copies follow the provider’s applicable retention terms rather than our download window.

Account and preference information is retained while needed to operate your account. Billing records may remain after a model file expires or an account is deleted where needed for accounting, taxes, refunds, disputes or other legal obligations. Security and support records are retained only as reasonably needed for their stated purposes, legal requirements and resolving incidents or claims.

You can request earlier deletion of uploads and personal information by contacting [email protected]. Account deletion does not necessarily remove all private conversion files immediately; they also follow scheduled expiry unless separately deleted. Where backups are maintained, residual copies may remain until the normal backup cycle completes and are restricted from ordinary use. Legal holds may require longer retention of relevant records.

9. Security and international processing

We apply reasonable safeguards appropriate to the information, including private file storage, authorization checks, password hashing, rate limits and transport encryption for the production Service. No online service can guarantee absolute security. Notify us promptly if you suspect unauthorized access to your account or files.

MTTenterprise is based in Canada. Our providers may process information in Canada, the United States or other countries where their infrastructure operates. This can make information subject to foreign laws and lawful access requests. We remain responsible for arranging appropriate safeguards for processing performed on our behalf and use transfer mechanisms where applicable law requires them. Do not assume that files remain exclusively in Canada.

If a security breach meets applicable reporting or notification thresholds, we will notify the relevant authorities and affected individuals as required by law.

10. Your choices, requests and complaints

You can update your profile or request account deletion in account settings. To request access to, correction, a copy of or deletion of your personal information or files, contact [email protected]. Depending on your location, you may also have rights to withdraw consent, object to processing, restrict processing, portability or other protections. Withdrawing consent does not affect processing already lawfully performed and can prevent us from providing the affected feature.

We may ask for proportionate identity verification. For a guest purchase, include the receipt or checkout identifier and relevant details, but not your card number. We will explain if a legal exception requires us to keep records or limits what we can provide. We will respond within the period required by applicable law and will not discriminate against you for exercising a protected privacy right.

You may raise concerns with our privacy contact. You can also complain to the Office of the Privacy Commissioner of Canada or the relevant provincial regulator, and to your local supervisory authority where its law applies, including in the EEA or UK. Rights under US state privacy laws apply where the law covers our processing; this policy does not claim that every regional law applies to every user.

• Office of the Privacy Commissioner of Canada (opens in a new tab)

11. Children’s information

The Service is not directed to children under 13 or the higher age required by applicable law, and we do not knowingly collect their information. A minor needs authorization from a parent or guardian. If you believe a child submitted personal information without appropriate authorization, contact [email protected] so we can investigate and take appropriate action.

12. Policy changes and contact

We will update the effective date when this policy changes and give additional notice of material changes when required. If a new purpose or disclosure requires consent, posting an updated policy does not replace that consent. This document is currently provided in English; contact us for language assistance. Mandatory language rights continue to apply.

For a privacy request or question, email [email protected] or write to the Privacy Contact, MTTenterprise Inc., 201-1525 Alta Vista Drive, Ottawa, Ontario K1G 0G1, Canada. Please do not attach sensitive artwork or identity documents to ordinary email unless we have agreed on a suitable method.