Privacy Policy
Last updated 27 October 2026
This explains what information Arisa Studio, ABN 14 462 831 339 (“we”, “us”) collects when you use the service at viewer.arisastudio.com.au, why, who else handles it, and how to delete it.
In short
- We collect your email, a protected form of your password, and the files and job details you upload.
- We use no advertising or tracking cookies, and no analytics.
- Your data is stored and processed outside Australia.
- You can delete your account yourself.
What we collect
- Your account: your email address, and your password in a protected form that we cannot read.
- Your uploads: the model files you upload (we keep the converted model, and a QR drawing file once one has been made for a job), and the job number, job name, revision and dates you enter. The original IFC file is deleted from our server after conversion. The stored file’s name includes a cleaned-up version of the name of the file you uploaded.
- Teams: team names, members’ email addresses, and invitations (including the email address of someone you invite). Your team can see which member’s email uploaded or edited a job.
- API keys: only a scrambled version, never the key itself.
- Technical logs: our server records each request’s IP address, the address requested and the time. We use these to keep the service secure and fix problems. The protection that limits repeated sign-up and password-reset requests also holds IP addresses briefly in memory.
Why we use it
To run your account, store and show your models, send you emails (confirmation, password reset, team invitations), protect the service from abuse, and fix problems. We do not sell your information and do not use it for advertising.
Who else handles it
- Supabase (login and database): your email, protected password, job details and team information. Southeast Asia (Singapore).
- Hetzner (hosting): our server receives your uploads and keeps the logs above. Singapore.
- Cloudflare (file storage and bot check): your uploaded model files are kept in Cloudflare’s storage. We have not chosen a specific region, so they sit on Cloudflare’s global network. Cloudflare also runs the bot check on sign-up and some forms, and sees your IP address and browser details when it loads.
- Resend (email): sends our emails, so it sees the recipient’s email address and the message. Ireland.
- Google Fonts: our pages load their fonts from Google, so Google receives your IP address and browser details. The viewer also loads its 3D code from jsDelivr, which receives the same.
Your information is stored and processed outside Australia: in Singapore, in Ireland, and on Cloudflare’s global network.
Anyone with a link can see a model
A model link needs no login. Anyone who has it can see the model, and its job number, name and revision. See our Terms of Use.
On your device
When you log in, your login session is kept in your browser’s storage on your device, so you stay logged in. Some pages also keep a prefilled email address or a resend timer for as long as the tab is open. We set no advertising or tracking cookies and use no analytics. The Cloudflare bot check and Google Fonts load from their own servers and may store information on your device that we do not control.
How long we keep it
We keep your account and files until you delete them or delete your account. We do not currently delete files automatically after a set time. We have not set an automatic deletion time for server logs. Our providers may keep backups and their own logs for some time after you delete something, and we do not control how long.
Deleting your account
In your dashboard, choose Delete my account (next to Log out). You will be asked to type a confirmation, and offered a chance to export your projects first. If you own a team, you must transfer or delete it first.
It deletes: your login, the projects and revisions in your personal space and their stored files, and your API keys.
It does not delete:
- things you uploaded into a team you do not own. They stay in that team, and your email address stays shown as the uploader;
- invitations sent to your email address, which may stay in the sending team’s invitation list;
- server logs, and provider backups and logs (see above).
We delete files from storage when you delete them, but a failed deletion could leave a file behind. If you need something removed, email us. To delete a single project or revision, use the delete button in your dashboard.
Seeing or correcting your information
Email us and we will tell you what we hold about you, or correct it.
Changes
We may update this page. The date at the top shows the latest version.