Skip to content

Legal

Privacy Policy

How Culet Studio collects, uses, shares and protects personal data, and the rights you have over it.

Last updated:

  1. 1.Who we are

    Culet Studio, based in India, runs culetstudio.com, studio.culetstudio.com and the embeds we host (the "Service"). For the personal data described here, we decide why and how it is used. That makes us the "data fiduciary" under India's Digital Personal Data Protection Act, 2023, and the "controller" under the EU and UK GDPR.

    Contact for anything about privacy: hello@culetstudio.com.

  2. 2.Your CAD files

    When you open a file in the studio, your browser reads it and the studio measures and renders it on your own computer. The file isn't sent to us.

    When you open a file, the studio sends us one small usage record: the file's format (for example 3DM or STL) and its size in bytes. It does not include the file's contents or its name.

    When you export a 360° spin or a live 3D view, we store what the viewer needs so it can be shown on your site: the rendered frames (for a spin) or the 3D model (for a live view), with its title and the account that made it.

    Product photos (Packshot) are rendered and saved on your computer. We only record that a photo was saved.

  3. 3.What we collect

    WhenWhat we collect
    You create an accountYour name, work email, company (optional) and password. The password is stored only as a secure hash.
    You sign inA session record with your IP address, browser type (user agent) and times, used to keep you signed in and protect your account.
    You use the studioUsage records: when you open a file (its format and size), export a 360° or 3D view, or save product photos.
    You export an embedThe frames or 3D model, the title, its frame count and the account that made it.
    You contact usYour name, email, company, role, message and browser type from the contact form, plus any emails we exchange.
    You use the live chatYour messages and the details the chat provider collects (see its policy).
    You visit the websiteTechnical logs kept by our hosting providers, such as IP address, pages requested and time, for security and reliability.
  4. 4.What we don't collect

    • The contents or names of the CAD files you open.
    • Payment card or bank details. The Service is free.
    • Advertising or cross-site tracking data. We don't use advertising cookies or sell audiences.
    • Sensitive personal data, such as health, religion or biometric data. Please don't send us any.
  5. 5.How we use it, and why

    PurposeData usedLegal basis
    Create and run your account, sign you in, keep it secureAccount, sessionTo provide the Service you asked for (contract); your consent where the law requires it
    Host and deliver the embeds you exportEmbed dataContract
    Reply to questions and support requestsContact form, chat, emailsYour request (consent / legitimate interest)
    Understand how the Service is used and improve itUsage recordsLegitimate interest
    Send account emails (verification, sign-in links, password resets)Email addressContract
    Tell you about important changes to the Service or these policiesEmail addressContract / legal obligation
    Prevent abuse, enforce our Terms, meet legal obligationsAny of the above, as neededLegal obligation / legitimate interest
  6. 6.Who we share it with

    We don't sell personal data, and we don't share it for advertising. We share it only with:

    Service providers who run parts of the Service for us

    ProviderWhat they doWhere
    Vercel Inc.Hosting the website and the admin toolsServers in the EU (Frankfurt) and a global delivery network
    Contabo GmbHHosting the studio and stored 360° and 3D embedsContabo data centers
    Neon Inc.Database for accounts, usage counts, embeds and enquiriesNeon cloud database
    Cloudflare, Inc. (R2)Storing and delivering blog imagesCloudflare's global network
    tawk.to Inc.Live chat on the websitetawk.to's servers
    An email delivery providerSending account emails (verification, sign-in links, password resets)The provider's servers

    They may only use the data to provide their service to us.

    Others, only when needed

    • Authorities, courts or others when the law requires it, or to protect our users, the Service or our rights.
    • A buyer or successor if Culet Studio is sold or reorganized. This policy will keep applying to your data.

    Embeds you export are public to anyone with their link or the page they are placed on.

  7. 7.International transfers

    We are based in India, and our service providers process data in other countries, including the European Union and the United States. Where data moves between countries, we rely on the safeguards the law requires, such as the providers' data processing terms and standard contractual clauses.

  8. 8.How long we keep it

    DataKept for
    Account detailsWhile your account is open. Deleted within 30 days after you ask us to close it.
    Sign-in sessionsUntil you sign out or the session expires (usually after 7 days without use). Deleted with the account.
    Usage recordsWhile your account is open. Deleted with the account.
    EmbedsUntil you ask us to take them offline, or your account is closed. Then deleted within 30 days.
    Contact form enquiriesUp to 24 months after our last exchange, then deleted.
    BackupsUp to 30 days, after which deleted data is gone from backups too.
  9. 9.How we protect it

    • Your CAD files are processed in your browser, so most of your design data never reaches us.
    • Data is encrypted in transit (HTTPS), and passwords are stored only as secure hashes.
    • Access to personal data is limited to the people who need it to run the Service.
  10. 10.Your rights

    Wherever you live, you can ask us to:

    • tell you what personal data we hold about you, and give you a copy;
    • correct data that is wrong or incomplete;
    • delete your data and close your account;
    • take any of your embeds offline;
    • withdraw any consent you gave us.

    In India

    Under the Digital Personal Data Protection Act, 2023, you also have the right to grievance redressal and to nominate someone to exercise your rights if you die or become unable to. If you aren't satisfied with our response, you can complain to the Data Protection Board of India.

    In the EU, EEA and UK

    You also have the right to object to processing based on our legitimate interests, to restrict processing, and to data portability, and you can complain to your local data protection authority.

    In California and other US states with privacy laws

    You have the right to know, correct and delete your personal information. We don't sell or share personal information for cross-context behavioral advertising, and we won't treat you differently for using your rights.

    How to make a request

    Email hello@culetstudio.com from the address on your account. We may ask you to confirm your identity. We will reply within 30 days, or sooner where the law requires.

  11. 11.Children

    The Service is for adults working in the jewelry trade and is not meant for anyone under 18. We don't knowingly collect data from children. If you believe a child has given us personal data, contact hello@culetstudio.com and we will delete it.

  12. 12.Cookies

    We use a cookie to keep you signed in, and the live chat sets its own. See our Cookie Policy for the full list.

  13. 13.Changes to this policy

    When we change this policy, we will update the date at the top. For important changes, we will tell account holders by email or in the Service before they take effect.

  14. 14.Contact and grievances

    Questions, requests or complaints about your personal data: the Grievance Officer, Culet Studio, at hello@culetstudio.com. We will acknowledge your message within 24 hours and aim to resolve it within 15 days.