Privacy Policy

Illusio 3D — illusio3d.com and the builder at app.illusio3d.com

Last updated: 2 September 2026

Who is responsible for your data

Santeri Salmi, Finland, is the controller of the personal data described here.

For anything on this page — a question, a request, a complaint — write to [email protected].

We have not appointed a Data Protection Officer, and are not required to.

The short version

Illusio 3D is a design tool. The things you make in it — your screen measurements, your reference photographs, your 3D scenes — are yours. They are stored so that you can come back to them, and they are not read, mined, sold, or used to train anything.

Analytics is off until you turn it on. If you decline, no analytics script is ever loaded.

Everything we store sits on servers in the EU.

What we collect, and why

A session, before you have an account

The builder creates an anonymous session the first time you open it, so that you can start work without signing up. This is a random identifier stored against your browser and on our server. It carries no name, no email, and no address.

If you later create an account, that session becomes your account. If you never do, it stays anonymous.

• Legal basis: our legitimate interest in letting you try the tool without handing over your details first (GDPR Art. 6(1)(f)).
• Kept for: 30 days after your last visit, if you never signed up and never saved anything. Then deleted automatically.

Your account

If you create one, we store your email address and the time you signed in. If you set a password, it is stored as a salted hash by our authentication provider — it is never visible to us, and cannot be recovered, only reset.

• Legal basis: performance of our agreement with you (Art. 6(1)(b)).
• Kept for: as long as the account exists. Delete it and this goes with it.

What you make

Projects you save to the cloud, and the files you upload into them — reference photographs, images, video, 3D models, fonts. Also your saved presets.

Reference photographs deserve a specific mention. They are pictures of real places, often taken on site, and they may show people, signage, or an identifiable location. They are stored privately, readable only by your own account, and we do not look at them except where you have specifically asked us to help with a project.

• Legal basis: performance of our agreement with you (Art. 6(1)(b)).
• Kept for: as long as you keep the project. Deleting a project deletes its files. Deleting your account deletes all of them.

Licences and credits

If you hold a Motion licence, we store the email address it is granted to, its expiry date, and an internal note. If you buy export credits, we store the balance and a record of each transaction.

A licence is keyed to an email address rather than to an account, so that it can be granted before you sign up and survives you deleting and remaking an account.

• Legal basis: performance of our agreement with you (Art. 6(1)(b)); and, for transaction records, our legal obligations under accounting law (Art. 6(1)(c)).
• Kept for: the life of the licence, plus six years from the end of the accounting year for anything with a payment attached.

Bug reports

When you send feedback from inside the app, we receive your message, the reply address you choose to give (optional), and an automatic snapshot of your setup:

This exists because "it looks wrong on my machine" is not a fixable report without it. It is shown to you before you send, and nothing about your project's *content* is included — no text, no images, no geometry.

• Legal basis: our legitimate interest in diagnosing and fixing faults (Art. 6(1)(f)).
• Kept for: 24 months.

Analytics — only if you say yes

We ask once, in a bar at the bottom of the screen. If you allow it, we record product events: an export ran, a template was applied, a purchase completed — together with your user identifier and, if you are signed in, your email address. Never the contents of your work.

If you decline, or simply ignore the bar, the analytics script is never loaded and no identifier is created. Declining is not a setting we then work around.

You can change your mind either way under Settings → Privacy.

• Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.
• Kept for: 12 months.

Stored on your device only

The app keeps a few preferences in your browser's local storage. These never reach us:

illusio3d.theme · illusio3d.uiscale · illusio3d.rail-width · illusio3d.timeline-height · illusio3d.timeline-open · illusio3d.camrig-shut · illusio3d.noncommercial-until · illusio3d.analytics-consent · illusio3d.trial-resume

Your sign-in token is also held there, which is what keeps you signed in between visits.

We use no advertising cookies and no third-party tracking. If you allow analytics, PostHog sets its own identifier at that point, and not before.

Who else processes it

We use a small number of providers. Each is bound by a data processing agreement, and none of them may use your data for their own purposes.

Where it goes

Everything we store is stored in the EU.

Cloudflare operates a global network, so a request may be *served* from an edge location outside the EEA, and its logs may be processed there. Where a provider processes personal data outside the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses, which each of the providers above incorporates into its data processing agreement.

We do not sell your data, and we do not share it with anyone beyond the providers above, except where the law requires it.

Decisions, and whether you have to give us anything

No automated decision-making, and no profiling. Nothing here decides anything about you by machine — not your access, not your pricing, not what you are shown. A Motion or Advanced licence is granted by a person reading your request.

Giving us your email address is necessary to have an account, hold a licence, or buy credits; without it those things cannot work, though the builder itself can be used without an account at all. Everything else is optional: your name and company on a trial request help us answer it, a reply address on a bug report is the price of an answer rather than the price of being heard, and analytics is refused by default.

Your rights

Under the GDPR you may ask us to:

• give you a copy of your data, or a portable export of it;
• correct anything wrong;
• delete it — you can delete projects and your whole account from inside the app, and we will do it by hand on request;
• restrict or object to processing we base on legitimate interests, including bug-report diagnostics;
• withdraw consent to analytics, at any time, with no effect on anything else.

Write to [email protected]. We will answer within one month.

We would rather hear from you directly, and will try to put right anything we have got wrong. That is not a condition of anything: you have the right to lodge a complaint with a supervisory authority at any time — in Finland the Office of the Data Protection Ombudsman (*Tietosuojavaltuutetun toimisto*), https://tietosuoja.fi, or the authority where you live.

Security

Data is encrypted in transit and at rest. Access to your projects and files is enforced at the database level, row by row, so that one account cannot read another's work. Passwords are hashed, never stored in readable form, and cannot be retrieved by us or by anyone with administrative access.

Administrative access to accounts is limited to the controller named at the top of this page, and is used to grant licences, answer bug reports, and honour the requests described above.

Children

Illusio 3D is a professional tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, write to us and we will remove it.

Changes

If we change how we handle your data in a way that matters, we will update this page and, where the change is significant, tell you in the app. The date at the top always reflects the current version.