Privacy Policy

Effective date: October 12, 2026

This policy explains which personal data is processed when you use 3DVIZAI services, for what purposes and on what legal grounds, to whom it is transferred, and what your rights are. It is also our privacy notice under the Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Data Controller

Your personal data is processed by the operator of the 3DVIZAI services (“3DVIZAI”) as data controller. For questions and requests about this policy: info@3dvizai.com.

2. Scope

This policy covers the 3dvizai.com website, demo booking and live demo requests, 3DVIZAI Planner and the brand management panel, and the AI application at app.3dvizai.com. When you buy a product from a Brand’s storefront, the purchase is completed on the Brand’s own website and your personal data in that purchase is subject to the Brand’s privacy policy.

3. Personal Data We Process

• Identity and contact: name and email address when you create an account; full name, email, company and phone number for a demo booking; a business email address for a live demo request.
• Account and transactions: sign-in method (email/password or Google), credit activity and purchase records. Card details are processed by the payment provider and are not seen or stored by 3DVIZAI.
• Content: 3D models and images you upload, text and prompts you write, room plans and designs you save, and generated images and videos.
• Booking: the meeting date, time and time zone you choose.
• Technical: IP address, browser and device information, session and error logs; short-lived rate-limiting records to prevent abuse; the country derived from your IP address to show prices in the right currency.
• Source: for demo and live demo requests, the page from which you sent the form and, if present, campaign link parameters.

4. Purposes

• Creating accounts, managing sign-in and keeping sessions secure;
• Providing 3DVIZAI Planner and AI image and video generation, and saving and sharing room plans;
• Managing credit balances and processing purchases;
• Scheduling, confirming, changing or cancelling demo meetings and sending related notifications; emailing the live demo link;
• Providing support, fixing errors, preventing misuse and fraud, and improving the services;
• Meeting legal obligations and responding to requests from competent authorities.

5. Legal Grounds

Your personal data is processed on the following grounds under Article 5 of KVKK:

• it is directly related to the conclusion or performance of a contract (account, service, purchase, demo booking);
• it is necessary for the data controller to comply with a legal obligation;
• it is necessary to establish, exercise or protect a right;
• it is necessary for the legitimate interests of the data controller, provided your fundamental rights and freedoms are not harmed (security, preventing misuse, improving the service);
• where required by law, your explicit consent.

6. How Data Is Collected

Your personal data is collected electronically through account and contact forms, the demo booking form, your actions in the services and the content you upload, and automatically while you use the website.

7. Transfers and Service Providers

Your personal data is not sold. It is shared only to the extent necessary for the service with the following providers:

• Cloudflare: hosting, database and file storage;
• Google: “Sign in with Google” authentication, Gemini AI processing, and Google Calendar and Google Meet for demo meetings;
• Resend: verification, booking and notification emails;
• kie.ai and xAI: image and video generation when you choose their AI models;
• Shopier: payment processing for credit purchases.

Some of these providers operate servers outside Türkiye, so your data may be transferred abroad to the extent necessary to provide the service. Transfers abroad are made in accordance with the procedures set out in Article 9 of KVKK. Data may also be shared with competent public authorities where a legal obligation exists.

When you contact us on WhatsApp, the conversation is subject to WhatsApp’s (Meta’s) own terms.

8. Retention

• Demo booking contact details (name, email, company, phone) are deleted 12 months after the meeting date.
• The email address in a live demo request is deleted 12 months after the request.
• Rate-limiting records are deleted automatically after about one hour.
• Account, content and transaction data is kept while your account is active. When you ask for your account or content to be deleted, it is deleted within a reasonable time; records subject to legal retention duties are kept for the required period.
• Event records at the calendar provider are kept according to the connected account’s settings and the provider’s policies.

9. Cookies and Local Storage

3DVIZAI websites do not use tracking cookies for advertising or analytics. Only technologies needed for the service to work are used:

• in the AI application, a sign-in cookie that keeps your session open (up to 30 days) and browser storage;
• your browser’s local storage for settings such as the theme and for rooms you create in 3DVIZAI Planner without an account. This data stays on your device and is lost when you clear your browser data;
• strictly necessary cookies used by our infrastructure provider for security and performance.

You can manage cookies and local storage in your browser settings; blocking necessary cookies may stop some features, such as sign-in, from working.

10. Security

Reasonable administrative and technical measures such as encryption, access control and logging are applied to protect personal data. Passwords are stored in an irreversible form. Nevertheless, no system transmitting data over the internet can guarantee absolute security.

11. Your Rights

Under Article 11 of KVKK you may apply to the data controller to:

• learn whether your personal data is processed and request information about it;
• learn the purpose of processing and whether it is used for that purpose;
• know the third parties in Türkiye or abroad to whom it is transferred;
• request correction if it is incomplete or inaccurate;
• request deletion or destruction under the conditions set out in KVKK;
• request that corrections, deletions or destructions be notified to the third parties to whom the data was transferred;
• object to a result against you arising exclusively from automated analysis of the processed data;
• claim compensation if you suffer damage from unlawful processing.

Send your request with information that allows us to verify your identity to info@3dvizai.com. Requests are concluded free of charge as soon as possible and within 30 days at the latest, depending on their nature. If your request is rejected, you find the answer insufficient or it is not answered in time, you may complain to the Turkish Personal Data Protection Board.

12. Children

The services are not directed at children. People under 18 should not create an account without the consent of a parent or guardian.

13. Changes

This policy may be updated from time to time. The current version is published on this page with its effective date. For the terms of use of the services, see the Terms of Use.