Privacy Policy
In short
- We collect what we need to run your account: your email, your worlds and files, what you've bought and sold, how many AI credits you've used, and your conversations with support.
- No ads, no tracking across sites, no analytics cookies, and we never sell your information.
- The Director and rocks from a photo run on your own AI key: your request goes through us to the provider you chose, under its terms with you. We don't store your key. Support chat goes to our AI provider, Anthropic, and isn't used to train AI.
- Payment details go straight to Stripe; we never see your card number.
- You can see, download, correct or delete your information by writing to hello@genmodic.com.
1. Who we are
Genmodic is run by Fingerprint Creative Inc., postal address, which is responsible for (the “controller” of) your personal information. Contact: hello@genmodic.com. This policy covers the Genmodic website, editor, player, world shop, model marketplace and support. The local edition of Genmodic that runs only on your own computer sends us nothing; its AI features send your requests directly to Anthropic (and to Meshy, for model generation) using keys you enter.
2. What we collect
| What | Details | Why |
|---|---|---|
| Account | Email address, password (stored only as a salted hash we can't reverse), your name, when you joined, whether you've confirmed your email, and when you agreed to the Terms and this policy (and which version). | To give you an account, sign you in and contact you about it. |
| Date of birth | The date of birth you give at sign-up. It's private: never shown on your profile or to other people, and only support can change it. | To check you're old enough for an account where you live, and to keep what's only for adults (selling, Mature 18+ worlds and models) for adults. |
| Where you are and your language | Your country or region, time zone and language, filled in from your device's settings at sign-up and changeable in your account. | To apply the age rules of your country, show dates and times in your time zone, and show Genmodic in your language on every device. |
| Signing in with another service | If you sign in with Google, Apple, Microsoft or Discord: that service's id for you, the email address and name it gives us, and the address of your picture there (Google and Discord). We never get your password for that service. | To sign you in, and to offer that picture as your profile picture. |
| Profile | Handle, display name, bio and profile picture, if you set them up. These are public. | To show who made a shared world. |
| Your worlds | The worlds you save online, a picture of each, a reference photo if you added one (downsized), titles, descriptions, visibility, content rating, play counts, and for worlds in the shop: tags, a longer description, screenshots and a trailer. | To save, open and share your worlds. |
| Files and library | Models, sculpting, painted ground, photos, screenshots and trailer videos you upload (up to 95 MB each), your online model library, and models you list in the marketplace. | To store your work online within your plan's allowance and show it on every device. |
| Store activity | Which shared worlds you've played while signed in (first and last time, and how many times), your wishlist, and reviews you write. Reviews are public, with your handle (or "A player") and how many times you played. | To show your library and reviews, and to count plays. |
| Purchases | Your plan, packs, credit bundles, worlds and models bought and sold, prices and dates, refunds and chargebacks with their reason, and Stripe's IDs for your customer record and payments. Not your card number. | To give you what you paid for, keep financial records, and pay creators. |
| Creator payouts | If you sell worlds or models, Stripe collects your identity, tax and bank details for its Connect service. We keep only your Stripe account ID and whether payouts are ready. | To pay you and meet tax-reporting rules. |
| AI use | For each AI generation on our account (such as AI video): when, which model, our cost and the credits charged. Director requests run on your own key: we don't record them, store your key, or keep your prompts or the AI's replies on our servers beyond what you save in a world. | To charge credits accurately and prevent abuse. |
| Security | Sign-in sessions (a random token, stored as a hash), failed sign-in attempts (email and time), email-link tokens (stored as a hash). Our host, Cloudflare, processes your IP address and browser details to deliver the site and block attacks. | To keep accounts secure. |
| Reports and messages | Reports you make about a world or model, directly or through support (your account, what you reported, your reason and any rating you suggested), and emails you send us. | To moderate and answer you. |
| Support conversations | Your messages in Contact support and the replies, the labels our AI assistant adds (topic, how you seemed to feel, a one-line summary), and everything it did or asked a person to approve (refunds, plan cancellations, emails sent, reports). Our team sees these with your email, plan, handle and purchases. | To help you, keep a record of what was done on your account, and check the assistant's work. |
The editor also keeps some settings in your own browser (for example sound, quality, recently used models, your own kits and your last saved world). These stay on your device; see Cookies.
We don't collect sensitive information such as health, beliefs or biometrics, and we ask you not to put it in worlds, prompts or photos.
3. Legal bases (EEA and UK)
- Contract: running your account, saving worlds, purchases, payouts and AI features you ask for.
- Legitimate interests: security, preventing fraud and abuse, moderation, answering support requests, summarising feedback to improve Genmodic, defending disputed payments (sharing purchase and usage facts with Stripe), and fixing problems, in ways you'd reasonably expect.
- Legal obligation: tax and accounting records, and responding to lawful requests.
- Consent: anything optional we ask you about, such as product news emails. You can withdraw consent at any time.
4. Who we share it with
We share personal information only with the companies that help run Genmodic (listed with what they do in Service providers), only for that purpose and under contracts that protect it. These include Cloudflare (hosting and storage), Stripe (payments and payouts), Resend (email) and Anthropic (the Director, support and other AI features).
If you choose to sign in with Google, Apple, Microsoft or Discord, that company confirms who you are to us and learns that you use Genmodic, under its own privacy policy. We receive only what's listed in section 2.
We also share information:
- With other people, when you choose: public and unlisted worlds, models you list, your profile, and your handle on worlds you share. Store and marketplace pages show creators' handles, names, bios and how many people got each model. Reviews you write are public with your handle and how many times you played. Buyers of your worlds and models see your handle; Stripe shows creators what they need about a sale, not the buyer's card.
- When the law requires it, or to protect people's safety, our rights or the Service, after checking the request is valid.
- In a business transfer, such as a merger or sale, where this policy continues to protect your information.
We don't sell or rent personal information, and we don't “share” it for cross-context behavioural advertising as California law defines it.
5. AI features
The Director and rocks from a photo run on your own API key for the AI provider you choose (Anthropic, OpenAI, Google, xAI or Meta). The key is kept in your browser. With each request we pass your request, a screenshot of the view, a description of the scene, your game's bible if it has one and the photo if you've given one, with your key, to that provider. We don't store the key or the request. The provider processes it under its own terms with you, which decide what it keeps and whether it trains on it.
Support. Contact support is answered first by an AI assistant (Claude, from Anthropic). To help you, it sends Anthropic your conversation and the account details it looks up: your email, plan, renewal date, credits, storage and purchases. It applies fixed refund rules on its own: inside them it refunds straight away; anything else goes to a person, and you can always ask for a person to review its answer. If a payment is disputed, Claude drafts our response from the purchase and how it was used (when you bought it, how often you opened it, how many devices you're signed in on); a person reviews it before it goes to Stripe. Claude also summarises feedback for our team. More in AI features.
6. How long we keep it
| Information | How long |
|---|---|
| Account, profile and worlds | Until you delete them or your account. A deleted world is removed at once; files only it used are removed later files are swept only on your next save, so add a scheduled clean-up and state a period, and database backups that may still contain its details expire within 30 days. |
| Sign-in sessions | They work for 30 days, or until you sign out. Expired session records are never deleted today: add a clean-up and say when. |
| Failed sign-in attempts and email links | Failed attempts count for 15 minutes; email links expire after 1 hour (password resets) or 24 hours (confirmations). The records are cleared only when a new attempt or link comes in: add a scheduled clean-up before promising a period. |
| Purchases, sales, refunds, chargebacks and AI-use records | 7 years, because tax and accounting law requires it, even after your account is deleted. These records are deleted with the account in the database today; the deletion routine must keep them first. |
| Reports | Up to 2 years after we've dealt with them, or longer for a legal claim. |
| Emails with us and support conversations | Up to 3 years after the last message. Nothing deletes support conversations yet: confirm the period and add the clean-up. When you delete your account, they're separated from it and your email is removed. Today a ticket keeps the email after deletion; the deletion routine must clear it. |
| Play history, wishlist and reviews | Until you remove them or delete your account. |
Worlds and models that other people have bought stay available to those buyers after you delete your account, as the Creator Terms explain, but without your email or other account details. Account deletion isn't built yet, and the database would remove bought worlds with their seller: build a deletion routine that keeps them before launch.
7. Deleting your account
Write to hello@genmodic.com from your account's email and ask us to delete your account. We'll confirm, then delete your account, profile, saved worlds and stored files within 30 days, and cancel any subscription. Records we must keep by law (section 6) stay, separated from your account, until their time is up. You can download any world first with Download in the editor.
8. Your rights
Wherever you live, you can ask to see the personal information we hold about you, get a copy to take elsewhere, correct it, delete it, or object to or restrict how we use it. Email hello@genmodic.com. We'll check it's really you, answer within 30 days (45 under some US state laws), and won't treat you differently for asking. You can let someone act for you with your written permission. If we say no, you can appeal by replying to our answer.
In the EEA or the UK you can also complain to your data protection authority. In California and other US states with privacy laws, you have the rights above; we don't sell or share personal information for advertising, and we don't use sensitive personal information in ways that would give you a right to limit it.
9. Children
Genmodic isn't for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, email us and we'll delete it. Sign-up asks your date of birth: to check you're old enough for an account, and to decide whether you can see worlds and models rated Mature 18+, which are shown only to signed-in adults. Your date of birth is never shown to anyone else; other people and creators only ever see whether something is available to you. Teenagers' accounts follow the age rules in the Terms of Service; profiles are optional, and a teenager's worlds are only public if they choose.
10. International transfers
We're in the United States, and our service providers may process information in the US and other countries. When information from the EEA, UK or Switzerland is sent to them, we rely on the EU–US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses and the UK addendum.
11. Security
Passwords are hashed with PBKDF2 and never stored as written; session and email-link tokens are stored only as hashes; connections are encrypted; and access to our systems is limited. No system is perfectly secure: use a unique password, and tell us about anything suspicious. To report a vulnerability, see Reporting a security issue. If a breach affects you, we'll tell you as the law requires.
12. Emails from us
We send account emails you can't switch off while you have an account (confirmations, password resets, replies to your support conversations, and important changes; Stripe sends payment receipts). If someone tries to sign up with your address, we email you instead of creating a second account. We'll only send product news if you agree to it, and every news email has an unsubscribe link.
13. Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before it applies. The date at the top shows when it last changed.