1. Information We Collect

We collect the following types of information:

• Account information: When you sign up via OAuth (GitHub, Google, Discord) or email, we collect your username, display name, email address, and profile picture as provided by your authentication provider.
• User content: 3D design files, images, comments, and other content you upload to MeshBoard.
• Usage data: Page views, idea views, design downloads, votes, and other interactions with the Service.
• Payment information: If you use tipping features, payment processing is handled by third-party providers. We do not store credit card numbers or bank account details.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Display your profile and content to other users
• Send notifications about activity on your content
• Process tips and payments
• Detect and prevent abuse, fraud, and security issues
• Comply with legal obligations

3. Information Sharing & Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Public content: Your profile, designs, comments, and votes are visible to other users and may be indexed by search engines.
• Service providers: We use third-party services for hosting (Vercel, Supabase), authentication, and payment processing. These providers only access information necessary to perform their services.
• Legal requirements: We may disclose information if required by law, subpoena, or legal process.

4. Cookies and Similar Technologies

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.

5. Data Retention

We retain your account information and content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Anonymized usage data may be retained indefinitely for analytics purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest. All authentication is handled through secure OAuth providers or encrypted password storage. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and associated data
• Export your data in a portable format
• Object to processing of your personal data

To exercise these rights, contact us at the email address below.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to opt out: We do not sell your personal information. If this changes in the future, we will provide a clear opt-out mechanism.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at the email address below.

9. International Data Transfers

MeshBoard is operated from the United States. Your information is stored and processed on servers located in the United States via our service providers (Vercel and Supabase). If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

10. Children’s Privacy

MeshBoard is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via the Service or email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, please contact us at privacy@aipothery.com.