Privacy Policy

1. Who we are

VextoryHub ("we", "us") operates VextoryHub.com, a marketplace for 3D assets and printable models. This policy explains what personal data we collect, why, and the choices you have.

2. Information we collect

• Account data: name, email address and profile image provided by your sign-in provider (Google or Discord).
• Purchase data: products bought, licence chosen, order amounts and dates. Card details are entered on Stripe and never reach our servers.
• Creator data: store name, bio, uploaded files and descriptions, and payout details you provide.
• Usage data: pages viewed, downloads, device and browser type, IP address and approximate location, collected through server logs.
• Communications: messages to support, DMCA reports (including your name and contact details) and newsletter sign-ups.
• Guest checkout: your email address, which we use to deliver your order and link it to your account when you sign in with the same email.

3. How we use information

• To provide the Platform: process orders, deliver files through short-lived secure download links and manage subscriptions.
• To keep the Platform safe: detect fraud, enforce our terms, review uploads and handle copyright reports.
• To communicate: transactional emails, support replies and, if you opt in, our newsletter. You can unsubscribe at any time.
• To improve the Platform: analyse aggregated usage to fix problems and build features.
• To meet legal obligations such as tax, accounting and responding to lawful requests.

4. Legal bases (EEA/UK users)

We process data to perform our contract with you, for our legitimate interests (security, fraud prevention, product improvement), to comply with legal obligations, and with your consent where required (for example the newsletter).

5. Who we share data with

We do not sell your personal data. We share it only with:

• Payment processor: Stripe, to take payments and manage subscriptions.
• Infrastructure providers: hosting, database and file storage (for example Cloudflare R2) that process data on our behalf.
• Sign-in providers: Google and Discord, when you choose to sign in with them.
• Creators: when you buy a model or join a Tribe, the Creator can see aggregate sales information. We do not give Creators your email address.
• Authorities or advisers where required by law or to protect rights and safety.

6. Cookies and similar technologies

We use essential cookies and local storage for sign-in sessions and to remember your cart. We do not use advertising cookies. If we add analytics that require consent, we will ask first.

7. Retention

We keep account data while your account is open. Order records are kept as long as needed for accounting and legal purposes. Newsletter data is kept until you unsubscribe. When data is no longer needed it is deleted or anonymised.

8. International transfers

Our providers may process data in countries outside your own. Where required we rely on appropriate safeguards such as standard contractual clauses.

9. Your rights

Depending on where you live (for example under GDPR or CCPA) you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to certain processing, and to withdraw consent. To exercise a right, email [email protected]. You may also complain to your local data-protection authority.

10. Security

We use encryption in transit, private storage for source files, signed short-lived download links and access controls. No system is perfectly secure, so we cannot guarantee absolute security.

11. Children

The Platform is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

12. Changes and contact

We may update this policy and will post the new date above. Questions or requests: [email protected].