Privacy Policy

Account information. When you sign up: your name, email address, and password. Passwords are stored hashed; we never see or store them in plain text.

Session and security data. When you sign in we record session tokens, IP address, and browser user agent. We use these to keep your account secure and your session working.

Content you create. Your prompts, chat messages, generated 3D models, parameter values, and project organization. This is the core of the Service. It is stored so your history, downloads, and gallery work.

Guest sessions. If you try Meshra without an account, we set an anonymous session identifier (a cookie) so your trial generations work and can be claimed by your account if you later sign up.

Waitlist. If you join a plan waitlist, we store the email address you submit and the plan you chose.

API keys. If you create API keys, we store them (hashed) along with usage needed for rate limiting.

We do not run advertising trackers, we do not build advertising profiles, and we do not track you across other websites. We do not collect or store payment card data: payments are handled by Lemon Squeezy, our payment provider and merchant of record, so your card details go to them and never reach us. We do not sell or rent personal data to anyone.

We use essential cookies only: authentication session cookies and the anonymous guest session identifier. We use browser local storage for small interface preferences (for example, remembering that you dismissed a one-time notice). There are no advertising or cross-site tracking cookies.

Analytics. On our public pages (the home page, blog, pricing, docs, and contact, but not the builder) we use Cloudflare Web Analytics to count page views and see which sites link to us. It is built to be privacy-preserving: it sets no cookies, uses no local storage, does not fingerprint your device, and does not follow you to other websites. It records the page viewed, the referring site, and coarse technical details such as browser, device type, and country.

Account email (always sent). Some email is part of running your account and is sent for as long as the account exists: confirming your email address when you sign up, and our reply when you write to us through the contact form. We send these because we need to in order to provide the Service you asked for. Switching off product email, below, does not stop them: an address we cannot write to is an account you could not verify or recover.

A link you asked us to send. If you try Meshra without an account and ask us to email you a link back to the part you just made, we send that one message to the address you typed, and we keep that address so we can see where the link went if you tell us it did not arrive. You can ask for that link at most three times. It is not a newsletter and it carries no unsubscribe link, because you asked for it and we do not send another unless you ask again.

Product email (you can switch it off). We send one welcome message when you create an account, and, if you close or leave the builder while a part is still being generated, a short note when that part finishes successfully. That is the entire list. We send them on the basis of our legitimate interest in helping you get use out of an account you chose to create, and you can object at any time by switching them off.

How to switch product email off.Every product email carries an unsubscribe link that works in a single click, with no sign-in and no account screen to find, and standard unsubscribe headers so the "Unsubscribe" button built into your mail client works too. Either one records the choice against your account and stops the sending itself, not merely the display of a preference. The page you land on also lets you turn product email back on, in case the link was followed by accident.

Reports to us. When someone reports a shared part, comment, or photo, we email ourselves a notification so that a human can review it. That message goes to our own inbox, not to you.

All of the above is delivered by Resend, our email provider (see section 5), which processes the recipient address and the content of the message on our behalf in order to deliver it. We send from [email protected]. We do not send email on behalf of other companies, we do not send advertising, and we do not share or sell your address.

The Service runs on cloud infrastructure, and a small number of service providers process data on our behalf solely to operate the Service (for example, hosting, file storage and delivery, generating your models, processing payments, sending the email described in section 4 (Resend), and the privacy-preserving page analytics described above). We do not use your content to train AI models, and we share data with no one else, except where required by law.

We keep your data while your account is active. You can delete individual generations and projects in the app. To delete your account and associated personal data entirely, email [email protected] from the address on the account and we will process the request promptly.

Depending on where you live (for example, under the GDPR in the EU/EEA or the CCPA in California), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected].

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

If we make material changes, we will update this page and the effective date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

NovaForge Labs LLC · 1209 Mountain Road PL NE STE N, Albuquerque, NM 87110, USA
[email protected], or use our contact form.