Legal

Privacy Policy

Last updated: 30 October 2026

This policy explains what information MeshMAX collects when you use the platform, how we use it, and the choices you have. We keep it short and plain on purpose.

MeshMAX (“MeshMax”, “we”, “us”) is a no-code platform for building and publishing interactive 3D and AR experiences for the web, operated by Sajjad Sabour. This policy covers meshmax.app, the Studio at studio.meshmax.app, published viewers, and our API. By using MeshMax you agree to this policy.

01Information we collect

We collect only what we need to run the service:

• Account information — your email address. If you sign in with Google, we also receive your name, profile picture, and Google account ID (see section 02).
• Content you create — the 3D models, images, textures, audio, and scenes you upload or generate, plus the project settings you configure.
• Usage and storage data — basic information such as projects created, storage used, and which scenes are published, so we can show your account status and enforce plan limits.
• Configurator analytics — when a visitor interacts with a published configurator, we record aggregated, non-identifying interaction data (for example, which options are viewed) so you can see how your scenes perform.
• Technical data — standard request information (such as IP address and browser type) processed by our hosting provider for security and to keep the service running. We use local browser storage to keep you signed in; we do not use advertising cookies.

02Signing in with Google

If you choose “Continue with Google”, Google shares your name, email address, profile picture, and Google account identifier with us. We use this only to create and secure your account and to sign you in. We do not access any other Google data, and we never use Google account data for advertising or sell it.

You can disconnect MeshMax from your Google account at any time from your Google Account permissions page.

03How we use your information

• To provide the Studio, host your projects, and publish your scenes.
• To sign you in and keep your account secure (including bot protection on sign-in).
• To send transactional email such as your one-time sign-in link.
• To show you usage, storage, and analytics for your own projects.
• To maintain, debug, and improve the platform.

04AI features and your content

Some features (for example, turning a photo into a 3D model, or generating image and video renders) send the content you submit to third-party AI providers to perform that task. This only happens when you choose to use those features. Your content is processed to return a result to you; we do not use your private project content to train our own models.

05Service providers

We rely on a small number of trusted providers who process data on our behalf:

• Cloudflare — hosting, storage, database, and security.
• Resend — delivering sign-in emails.
• Google — sign-in, when you choose it.
• Meshy.ai, Tripo3D, Cloudflare Workers AI, and Google (Gemini image generation, “Nano Banana”) — AI generation and render features, when you use them.

These providers may process data outside your country. We share only what each provider needs to perform its function.

06We do not sell your data

We do not sell or rent your personal information, and we do not share it for advertising. We disclose information only to the providers above, when required by law, or to protect the rights and safety of users and the service.

07Data retention

We keep your account information and content for as long as your account is active. When you delete a project it is removed from your account, and when you close your account we delete your personal information and content, except where we must retain limited records to meet legal obligations.

A free account with no projects or pages that has not been used for 12 months may be deleted; we email 30 days before, and signing in keeps it. When an account is deleted, its data also leaves our backups within 30 days. Our records of AI usage and credits keep the numbers only, with nothing that identifies you.

08Your rights

You can access, correct, export, or delete your information. You can delete or deactivate your account yourself in the dashboard (Account & Plan); a deletion happens 7 days after you ask and can be cancelled until then. For anything else, contact us at the address below. You can also revoke Google access as described in section 02.

09Security

We protect your account with measures including encrypted connections, session tokens, and bot protection on public endpoints. No method of transmission or storage is completely secure, but we work to safeguard your information and review our security regularly.

10Children

MeshMax is a business tool not intended for children. It is not directed to anyone under 16, and we do not knowingly collect their information.

11Changes to this policy

We may update this policy as the platform evolves. When we make material changes we will update the date above and, where appropriate, notify you. Continued use after changes means you accept the updated policy.

12Contact

Questions about privacy or your data? Email privacy@meshmax.app.