Privacy Policy

1. Who is responsible

LI KUN operates pictostl at pictostl.com and is responsible for the personal information we handle to provide the service. Contact support@pictostl.com for privacy questions or requests. This notice covers our website, accounts, image-to-3D processing, and related support. Payment and sign-in providers also process some information independently under their own privacy notices.

2. Information used by the service

Account records include your email address, name or display name, authentication credentials or linked sign-in identifiers, session information, and account settings. Password-based accounts use protected password credentials; we do not need your Google password when you choose Google sign-in.

Generation records include the images you submit, selected views and quality settings, task identifiers and status, generated models, previews, and associated credit usage. Support correspondence includes the information you choose to send us.

Billing records include your plan, payment and subscription identifiers, order status, credit grants and consumption, and refund information. Checkout providers collect payment details directly. pictostl does not store complete payment-card numbers or card security codes.

Our application and infrastructure providers process technical information such as IP addresses, request times, browser information, error reports, and security events to deliver the service and investigate failures or abuse. Please avoid uploading unnecessary personal, confidential, or sensitive information.

3. Purposes and legal bases

We use information to sign you in, process your images, deliver models, maintain your task history and credit balance, administer subscriptions and payments, send account messages, and answer support requests. We also use necessary records to prevent misuse, protect the service, resolve billing disputes, and meet legal obligations.

Where a legal basis is required, these activities rely on providing the service you request, compliance with applicable law, and legitimate interests in reliable and secure operation where those interests do not override your rights. We seek consent for processing that requires it; you may withdraw that consent without affecting earlier lawful processing.

4. Images and AI processing

Generating a model requires sending your selected images and generation settings to fal.ai and the model services used for that request. The current integrations use the Trellis and Tripo model families. These providers receive the content needed to perform the conversion and may process it outside your country.

Your account assets are not published in a public gallery by default. Authorized storage requests and limited-lived download links are used to provide access. Anyone you share downloaded files or usable access links with may be able to access that content.

We do not train our own AI models on private uploads or generated models. This statement describes pictostl's use; it is not a promise about a provider's separate retention or processing. Provider terms and applicable processing agreements govern their handling of data.

5. Providers and other disclosures

The production service uses Vercel for application hosting and privacy-focused public-page analytics, Neon for database records, Cloudflare R2 for private files, fal.ai for generation, Resend for transactional email, and Creem for checkout and payments. Google receives sign-in information if you select Google sign-in and receives limited public-page measurements through Google Analytics. External scheduling services trigger maintenance endpoints; those jobs do not require copies of your images or models.

We share the information necessary for each service. Creem handles its payment, tax, fraud prevention, and related obligations under its own terms. We may also disclose information when legally required, to investigate abuse or protect rights, or in a business transfer subject to appropriate protections.

We do not sell personal information or use private generation content for targeted advertising. Provider websites have their own privacy notices.

6. Cookies and browser storage

Essential cookies support sign-in and account security. Browser storage can retain preferences and an upload draft so that you can continue after signing in. The draft is eligible for restoration for up to 24 hours and is removed when the restoration routine next reads it; closing the browser alone does not necessarily erase it. You can remove it by clearing this site's browser data.

We use Vercel Web Analytics and Google Analytics 4 to understand visits to the public homepage, pricing page, and legal pages. We remove query strings and do not send analytics events from sign-in, account, billing, order, administration, API, upload, or generation routes. We do not send emails, uploaded images, generated models, order details, or account identifiers as analytics events.

Vercel Web Analytics is configured for cookie-free public-page measurements. Google Analytics enhanced measurement, advertising features, Google Signals, and custom events are disabled; analytics and advertising storage are denied by default. Google may receive limited technical information and cookieless measurement signals when a public page loads. We will request consent before enabling analytics storage where applicable law requires it. The current release does not include advertising trackers or a general marketing-email program. Blocking analytics does not prevent core account features from working; blocking essential storage can.

7. Retention and deletion

Successful task files, including source images, covers, and generated model files in our active storage, are scheduled for cleanup 30 days after completion. Download the files you want to keep. Incomplete uploads and failed-task files normally become eligible for cleanup after approximately one day. Removal is performed by scheduled jobs and may be delayed by operational failures; files past their availability period are not intended as permanent storage.

This file-retention period does not erase account, task metadata, subscription, order, or credit records. Those records are retained as needed to operate your account, preserve credit entitlements, address disputes, and meet applicable legal obligations. Support and security records are retained only as needed for their purpose or a legal requirement. Provider backups and independent payment or AI records may follow separate retention arrangements.

You may request deletion at support@pictostl.com. We will verify the request, explain any records we must retain and why, and handle it within the applicable legal time limits. Deleting website files does not delete copies you downloaded or shared.

8. Security and international processing

We use access controls, encrypted connections, private asset storage, and restricted service credentials. No internet service can promise complete security. We investigate incidents and provide notifications where required by law.

Our providers may process information in the United States and other countries where they operate. Laws can differ between locations. Where required, international processing must use an applicable lawful transfer mechanism and appropriate safeguards. Contact us for information about processing relevant to your account.

9. Your choices and rights

Depending on the law applicable to you, you may request access, correction, deletion, a portable copy, restriction of processing, or an objection to processing. You may withdraw consent where consent is the basis and raise a complaint with the competent privacy authority. These rights may have lawful exceptions.

Send requests from your account email to support@pictostl.com and describe what you need. We may ask for proportionate identity verification, but do not send passwords or full payment-card details. We will explain the outcome and any available appeal process and will not penalize you for exercising a protected right.

10. Eligibility, updates, and contact

pictostl is intended for adults aged 18 or older. If you believe a child has submitted personal information, contact us so we can investigate and take appropriate action.

We will update this page when our practices change and provide additional notice for material changes where required. For any question about this notice, contact LI KUN at support@pictostl.com.