Privacy Policy

01 Who We Are

ARView ("we", "us", "our") is a web-based augmented reality platform operating at arview.space. We provide tools that allow users to upload 3D models, generate AR share links, QR codes, and embed widgets. Our support contact is support@arview.space.

02 Information We Collect

Account Information

When you create an account we collect your name, email address, and a hashed (bcrypt) password. We never store passwords in plain text.

Uploaded Files

We store the 3D model files (.glb, .gltf, .usdz) you upload. Free plan files are deleted after 24 hours. Paid plan files are stored permanently until you delete them.

Usage Data

We automatically collect: IP address (for rate limiting), browser type, device type, AR view counts per model, and menu scan counts. This data is used solely to operate and improve the service.

Payment Information

Payments are processed by Stripe. We store only your Stripe Customer ID — we never see or store your full card number, CVV, or bank details. Stripe's privacy policy applies to payment data.

Restaurant & Fashion Partners

If you register as a restaurant or fashion brand, we additionally collect your business name, trade license documents, address, phone, and website for verification purposes.

03 How We Use Your Information

• To provide and operate the ARView platform
• To process payments and manage subscriptions via Stripe
• To send transactional emails (account confirmation, billing receipts)
• To detect and prevent abuse, fraud, and rate-limit misuse
• To improve the service based on aggregated usage analytics
• To contact you about your account or support requests

We do not use your data for advertising, sell it to third parties, or share it with anyone except as described in this policy.

04 Data Sharing

We share your data only with:

• Stripe — payment processing (your email and name)
• Hostinger — server infrastructure provider (stores data on our behalf)
• Law enforcement — only if required by valid legal process

05 Data Retention

• Free uploads: deleted automatically after 24 hours
• Paid uploads: stored until you delete them or close your account
• Account data: retained while your account is active; deleted within 30 days of account deletion
• Payment records: retained for 7 years for tax/legal compliance (held by Stripe)
• Server logs: retained for 30 days then automatically purged

06 Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data via your account settings
• Delete your account and all associated data
• Export your uploaded models at any time from your dashboard
• Object to processing by contacting us at support@arview.space

To exercise any of these rights, email support@arview.space. We will respond within 30 days.

07 Security

We protect your data with: HTTPS/TLS encryption in transit, bcrypt password hashing (cost factor 12), SQLite database stored outside the web root, rate limiting on all upload and auth endpoints, and file execution blocked in the uploads directory via .htaccess.

08 Cookies

We use minimal cookies — see our Cookie Policy for details.

09 Changes to This Policy

We will notify registered users by email of any material changes to this policy at least 14 days before they take effect. Continued use of ARView after the effective date constitutes acceptance.