Privacy & Data Protection

SparkOrbit (“we”, “us”, “our”) provides a 3D screenshot, mockup and animation studio. For the purposes of the EU General Data Protection Regulation (GDPR), SparkOrbit is the data controller of the personal data described in this policy. You can reach us at [email protected].

We only collect what we need to run the service:

• Account data — your name, email address and hashed password when you register.
• Content you create — the screenshots you upload and the 3D projects you save.
• Billing data — subscription status and a customer identifier from our payment processor. We never see or store your full card details.
• Technical data — basic log and device information needed to keep the service secure and reliable.

Under the GDPR we rely on the following legal bases: performance of a contract (to provide the service you sign up for), legitimate interests (to keep the service secure and improve it), consent (for non-essential cookies), and legal obligation (for tax and accounting records).

We use your data to create and manage your account, store and render your projects, process subscriptions, respond to support requests, and protect the service against abuse. We do not sell your personal data, and we do not use your uploaded content to train third-party models.

We use strictly necessary cookies to keep you signed in and secure. With your consent we may also use analytics cookies to understand how the product is used. You can accept or reject non-essential cookies at any time using the consent banner, and you can change your choice by clearing the cookie for this site.

We share data only with trusted service providers who process it on our behalf under a data processing agreement — for example cloud hosting, file storage and payment processing. Each is bound to use your data only to deliver their service to us.

Where data is transferred outside the European Economic Area, we ensure an adequate level of protection using the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

We keep account and project data for as long as your account is active. If you delete your account, we remove your personal data and content within 30 days, except where we must retain limited records to meet a legal obligation.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at [email protected] and we will respond within 30 days.

Questions about this policy or your data? Contact our privacy team at [email protected].