Privacy Policy
Last Updated: June 2026
1. Introduction
Welcome to Mithrai Spatial ("we," "our," "us"). We value your privacy and are committed to protecting the personal data and spatial creations you upload to our platform. This Privacy Policy describes how we collect, store, and process your information when you use our website, dashboard, and 3D/AR viewers.
2. Information We Collect
We collect the following details to ensure high-performance rendering and secure account isolation:
- Account Credentials: Email addresses and passwords collected securely during account creation to isolate your custom projects.
- Uploaded 3D Assets: GLB, GLTF, and USDZ model files you upload to build your spatial experiences.
- Multimedia Assets: Background music tracks, images, and video files attached to hotspots and spatial memory nodes.
- Anonymized View Metrics: Device breakdown (mobile, tablet, desktop), QR scans, page view timestamps, and hotspot click counts. We do not track individual IP addresses or store personal behavioral profiles of your visitors.
3. Third-Party Integrations & CDN Providers
We utilize certified enterprise cloud systems to power our high-fidelity asset hosting and databases:
- Appwrite: Powers our secure account authentication and metadata storage databases.
- Cloudinary CDN: Delivers global content distribution for your uploaded 3D models and media assets to guarantee sub-second load times on mobile WebXR browsers.
- Vercel: Hosts our serverless computation nodes and background USDZ converter pipeline.
4. Cookies and Local Storage
Mithrai uses local storage to maintain session states and store user preferences (like pricing tier options or local version backups of your drafts). Cookies are used solely for account authentication purposes. We do not place ad trackers or sell browsing data to advertising brokers.
5. Data Retention & Deletion
You own 100% of your spatial assets. If you delete a project from your dashboard, the 3D model, USDZ binary, hotspot records, and attached media are permanently deleted from Appwrite storage and Cloudinary instantly. If you delete your account, all associated databases are fully purged.
6. Your Privacy Rights (GDPR / CCPA)
Depending on your location, you may have rights under the General Data Protection Regulation (GDPR) or California Consumer Privacy Act (CCPA) to access, correct, or request deletion of your data. To request data deletion or a copy of your stored records, please reach out to us at:
privacy@mithrai.com