Embed3D by Enduvo
Legal

Privacy Policy

Your privacy is important to us. This policy outlines how we collect, use, and protect your information.

Who we are

Embed3D is owned and operated by Enduvo, Inc. ("Enduvo," "we," "us," or "our"). This Policy explains how we collect, use, disclose, and protect information in connection with Embed3D's website(s), dashboard, application programming interfaces (APIs), documentation, storage/content delivery networks (the "Service"), and our embeddable WebGL/three.js player (the "Player"), including when the Player is embedded on third-party sites and apps that accept iframes.

Contact: legal@enduvo.com • Mail: Legal Department, Enduvo, Inc., 2601 W. Lake Ave., Suite A6-110, Peoria, IL 61615, USA.

Scope

This Policy applies to: (a) visitors to our sites, (b) account holders and uploaders of 3D assets, and (c) viewers who interact with the Player on our sites or on third-party embedding sites. Third-party sites where the Player appears have their own privacy practices—please review them separately.

Geographic scope: The Service is intended for users located in the United States. We do not target, market to, or knowingly collect personal information from individuals in the European Economic Area, United Kingdom, or other jurisdictions outside the United States.

Information we collect

A) Information you provide

  • Account & billing: name, email, password (hashed), organization, role, plan, billing/contact details.
  • Content data: 3D models, textures/materials, scenes, animations, thumbnails, titles/descriptions, and asset metadata you upload or provide.
  • Support & communications: messages, feedback, automated error reporting, survey responses.

B) Information collected automatically

  • Device & network: IP address, approximate location (derived from IP), user agent, language, referrer/UTM tags, timestamp.
  • Player telemetry (WebGL): GPU vendor/renderer strings, WebGL feature support and extensions, shader compile/link errors, viewport size, FPS/frame timing, memory and buffer metrics, crash logs, quality settings chosen, and other diagnostics necessary to render and troubleshoot.
  • Interaction events: load, play, pause, camera rotate/pan/zoom, hotspot clicks, UI control usage, embed domain/referrer, errors, and completion events.
  • Cookies & local storage: session/auth tokens, preferences, A/B assignment, analytics identifiers.

C) Information from partners

  • Analytics (e.g., Google Analytics/GA4): page views, screens/events, device info, approximate geolocation, and cross-session identifiers; analytics providers may receive your IP address and set/read identifiers (cookies or similar).

How we use information

We use information to:

  • Provide and operate the Service (hosting, processing, streaming, embedding, and caching).
  • Process & optimize 3D assets (e.g., DRACO/KTX2 compression, mesh/texture optimization) and generate derivatives (thumbnails, previews).
  • Maintain safety & integrity (fraud/abuse prevention, rate limiting, security monitoring, investigating incidents).
  • Measure & improve performance (telemetry, crash/error diagnostics, QA, feature development, analytics and A/B testing).
  • Communicate with you (service messages, transactional emails; marketing with your preferences).
  • Display publicly available Content, organization names, and logos for marketing and promotional purposes (you may opt out by emailing embed3dsupport@enduvo.com).
  • Comply with law and enforce our Terms & Conditions.

Cookies and similar technologies

We use cookies, local storage, and pixel tags for authentication, preferences, analytics, and performance. You can control cookies via browser settings; blocking some cookies may impact functionality. For Google Analytics, you may use the GA Opt-out Browser Add-on and industry opt-outs at the DAA and NAI sites.

Analytics & advertising disclosures (US state privacy laws)

We do not exchange personal information for money. However, under California's CPRA and similar state laws, certain analytics and cross-context behavioral advertising activities may be deemed a "sale" or "sharing" of personal information. You may opt out of sale/sharing by emailing legal@enduvo.com. We do not knowingly sell/share the personal information of users under 16.

How we share information

We share information with:

  • Service providers / processors: cloud hosting, storage/CDN, logging/monitoring, analytics (e.g., Google Analytics), email and support tools, payment processors (if/when used). They act under contract and are restricted from using data for their own purposes.
  • Embedding sites: when you view a Player on a third-party site, that site may independently collect data per its policy; we may receive referrer and domain metadata to secure and operate the embed.
  • Corporate affiliates & transfers: in the event of a merger, acquisition, or asset sale.
  • Legal & safety: to comply with law or protect rights, safety, and security.

We do not provide end users' personal information to other customers except as necessary to deliver requested functionality or with your direction.

Data retention

We retain information as long as needed for the purposes above, including account lifecycle, legal/compliance requirements, and security. We may retain logs for a limited period for security and diagnostics, and retain backups for disaster recovery. Following account termination or cancellation, we may delete your data in accordance with our Terms & Conditions.

International transfers

Where we process data: Your information is processed and stored in the United States. By using the Service, you consent to the transfer and processing of your information in the United States.

Security

We employ technical and organizational measures designed to protect personal information (access controls, encryption in transit, monitoring, and secure development practices). No system is perfectly secure; we encourage responsible disclosure of vulnerabilities at legal@enduvo.com.

Your rights

California (CPRA)

California residents have the right to know/access, delete, correct, and port certain personal information; to opt out of sale/sharing; to limit use/disclosure of Sensitive Personal Information (if collected); and to be free from discrimination for exercising these rights. We follow verification steps before fulfilling requests (we may require information to verify your identity and, in some cases, a sworn declaration). You can submit requests via legal@enduvo.com or by mail (see Contact).

Do Not Track (DNT): industry standards are not uniform; we do not respond to DNT signals at this time.

Shine the Light: We do not share personal information with third parties for their own direct marketing without your consent; you may contact us for details as permitted by California law.

Age requirements & children's privacy

You must be eighteen (18) years of age or older to create an Account or use the Service. If you are between 16 and 18 years of age, you may only use the Service with the verifiable consent and supervision of a parent or legal guardian who agrees to be bound by these terms.

We do not knowingly collect personal information from anyone under the age of sixteen (16). If we learn that we have collected personal information from a person under 16, we will take steps to delete that information promptly. If you believe that a person under 16 has provided us with personal information, please contact us at embed3dsupport@enduvo.com.

Player-specific details

  • Telemetry: The Player collects WebGL/graphics capabilities, performance, and error data to render scenes, detect compatibility issues, and improve quality.
  • Event logging: We record non-content interaction events (e.g., play/rotate/zoom/hotspot clicks) and technical events (e.g., buffer loads, shader errors) tied to your session or account to operate and improve the Service.
  • Derivatives: We generate optimized derivatives (e.g., DRACO/KTX2, mesh decimation, thumbnails) solely to provide and improve the Service; derivatives may persist in caches for a limited time.
  • Third-party embeds: When the Player runs on another site, that site may collect additional data; we are not responsible for that site's practices.
  • Access controls: Customers may configure embed settings (e.g., public/unlisted, allowed domains) which affect what is collected and displayed to viewers.

Your choices

  • Account settings: update profile, preferences, and (where available) privacy controls.
  • Analytics: use the GA opt-out add-on and advertising industry opt-outs (DAA/NAI).
  • Cookies: manage via browser settings or our preference center (where available).
  • Marketing emails: opt out via unsubscribe links or by contacting us.

Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date and, where required, notify you through the Service or by email. Continued use of the Service after the effective date constitutes acceptance.

Contact us

Enduvo, Inc. (for Embed3D)
Legal Department
2601 W. Lake Ave., Suite A6-110
Peoria, IL 61615, USA

Email: legal@enduvo.com