1. Introduction

Full Scale AR ("Full Scale AR", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your information.

By using our website, iOS app, or Revit Exporter ("Service"), you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1. Account Information

2.1.1. Website users (Scene authors)

Email address
Securely hashed password (for email-based accounts)
If you sign in with Google: your name, profile picture, and Google account identifier, as provided by Google OAuth

2.1.2. App users

No information collected

2.1.3. Cookies & Local Storage

We use minimal browser storage to support core functionality:

A cookie (sidebar:state) to remember your sidebar preference
localStorage to persist temporary model viewer state

We do not use tracking cookies or third-party analytics cookies.

2.2. Scene Data

When you upload or create Scenes using the website, we collect and store:

3D model files used to build Scenes
Scene names, associated projects, and descriptions
QR codes generated to access Scenes
USDZ files created through Scene processing

2.3. Administrative Access to User Content

Full Scale AR administrators have the technical capability to view uploaded 3D models and Scene data. This access is used strictly for:

Technical support and troubleshooting
Debugging and quality assurance
System maintenance and security

Models and Scene content will not be downloaded, reproduced, modified, or used for any purpose without explicit consent from the Space owner. Administrative access is restricted to authorized personnel only.

2.4. IP Addresses

When a visitor accesses a Scene through the web viewer or iOS app, we process the requesting IP address temporarily for rate limiting and abuse prevention. IP addresses are not stored with Scene access logs and are not shown to Space owners.

3. What We Do Not Collect

Full Scale AR does not collect:

Camera photos or videos captured during AR sessions
Real-world location addresses or precise GPS location
Personal information from users accessing Scenes via the iOS app (no login required)

4. How We Use Information

We use the collected information to:

Provide Scene creation and AR visualization functionality
Host and process User Content into formats usable in AR
Communicate important account or billing notifications
Improve system reliability and security

We do not sell or market your data.

4.1. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:

Contract performance: Processing necessary to provide the Service you have signed up for
Legitimate interests: For security, fraud prevention, service improvement, and ensuring system reliability
Consent: Where you have explicitly agreed to specific processing activities

5. Sharing of Information

We only share information with trusted providers necessary to operate the Service (e.g., hosting and processing services).

These providers may only use data to support the Service and must protect it.

We may disclose information if required by law.

6. Data Security

We use reasonable administrative, technical, and physical safeguards to protect user data, including:

Encryption in transit
Secure authentication
Access controls

However, no system is fully secure, and we cannot guarantee security of information at all times.

7. Data Retention

Scene content becomes inaccessible immediately when a subscription lapses.

The user is notified via email.
Content is retained for 30 days, during which users may renew access.
After 30 days, all related data is permanently deleted.

Users may delete any Scene at any time through the website.

8. Your Privacy Rights

You may request:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete information
Erasure: Request deletion of your personal data
Data Portability: Request a copy of your data in a structured, machine-readable format
Object: Object to processing of your data in certain circumstances
Restrict Processing: Request that we limit how we use your data
Withdraw Consent: Where we rely on consent, withdraw it at any time

To make a request, email: support@fullscalear.com

EU Residents: If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data in accordance with applicable law.

9. Children's Privacy

The Service is not intended for children under 13 years of age. Users must be at least 13 years old to create an account or use the Service. If we become aware that a user under 13 has joined the service, we will promptly delete the user profile and its associated data.

10. International Data Transfers

The Service is operated in the United States. By using the Service, you agree to the processing of information in the United States.

For EEA Residents: Your data may be transferred to, stored, and processed in countries outside the European Economic Area, including the United States, where data protection laws may differ from those in your country.

We use service providers (such as Supabase for hosting and database services) that implement appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission, to ensure your data receives adequate protection.

11. Changes to this Policy

We may update this Privacy Policy as needed. We will post the updated version on our website and update the "Last Updated" date.

Continued use of the Service after changes signifies acceptance of the updated terms.

12. Contact Information

Full Scale AR
support@fullscalear.com