Privacy Policy

Last Updated: 03 May 2026

Welcome to dudo. This Privacy Policy outlines how S.C.B. Digiworks Limited ("we," "our," or "us") collects, uses, protects, and handles your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws. We believe in transparency, especially when it comes to the creativity of children and your personal information.

1. The Data We Collect

To provide our 2D-to-3D service, we strictly collect only the data necessary to fulfill your requests:

• Account Information: When you sign in using Google, Apple, or an email Magic Link, we collect your email address and basic profile identifier to create your account and manage your Tokens.
• Uploaded Media: We collect the images, drawings, and artwork you upload to generate 3D previews.
• Fulfillment Details: If you purchase a physical figure, we collect your shipping address and name to deliver the product.

2. Third-Party Processors

We rely on specialized, secure third-party services to operate dudo. We do not sell your data to any third parties. Your data is only shared with the following processors to the extent necessary to provide the service:

Processor	Purpose & Data Handled
Stripe	Handles 100% of payment processing. We never see, collect, or store your credit card data on our servers.
Google Gemini API	Processes your uploaded 2D artwork into a 3D-ready illustration. Google does not use data submitted via its enterprise APIs to train its foundation models.
Wavespeed AI	Generates the final 3D model from the illustration. Data is retained temporarily by Wavespeed strictly for the generation process and is subject to their enterprise privacy terms.

3. Data Retention Limits

We minimize the amount of time we store your data to protect your privacy and reduce server overhead.

• Unordered Generations: Images uploaded to generate 3D previews that do not result in a physical purchase are retained on our servers for a maximum of 30 days, after which they are permanently and automatically deleted.
• Purchased Orders: Images and resulting 3D models linked to completed purchases are retained for 6 months for order fulfillment, quality control, and customer service dispute resolution purposes.
• Account Data: Your email and Token balance are retained as long as your account is active. If you request account deletion, this data is erased immediately.

4. Marketing Opt-In & Social Media

We love showcasing the amazing creations our users make, but we will never use your child's artwork or the resulting 3D model for marketing or social media without your explicit consent.

• Consent is strictly opt-in via a dedicated checkbox during the checkout process.
• If you opt-in, we will anonymously feature the artwork and 3D figure (e.g., on our Instagram or website). We will never attach your name, your child's name, or location to the media.
• You may revoke this consent at any time by contacting us, and we will promptly remove the imagery from our platforms.

5. Your GDPR Rights

As an EU resident, you possess the following strict rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Erasure (The Right to be Forgotten): You can request that we delete your account, order history, and uploaded images at any time.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data (e.g., updating a shipping address).
• Right to Data Portability: You can request your data in a structured, commonly used format.

6. Contacting the Data Controller

For any privacy-related inquiries, requests to exercise your GDPR rights, or data deletion requests, please contact our Data Protection Officer at:

• Email: support.dudo3d@gmail.com
• Address: S.C.B. Digiworks Limited, Ermoupoleos 4, 3011, Limassol, Cyprus