Privacy Policy

1. Who we are

Zlim is a 3D model optimization service operated by ModaX, Inc. (“Zlim”, “we”, “us”). We take 3D models in supported formats and return optimized GLB files, through our website, hosted REST API, command-line tool, and MCP server.

If you have any questions about this policy or your data, contact us at contact@modax.ai.

2. Information we collect

We collect the following categories of information:

• Account information — your email address, and, if you sign in with Google, the name and basic profile details Google shares. Passwords are handled and hashed by our authentication provider; we never see them in plain text.
• 3D files you submit — the model files you upload to be optimized, and the optimized output we generate from them.
• Usage and job data — records of your optimization jobs (file names, sizes, formats, options, and results), your monthly usage against your plan quota, and API-key metadata (a hashed key, its name, and creation date — never the full key after it is first shown to you).
• Billing information — if you subscribe, our payment processor collects and processes your payment details. We do not store your card number; we retain a customer identifier and your subscription status.
• Analytics and device data — when you use our website we collect usage analytics (pages viewed, key actions such as sign-up and checkout, approximate location, and device/browser type) through Google Firebase Analytics. See “Cookies and analytics” below.
• Logs and security data — technical logs including IP address and request metadata, used to operate the Service, enforce rate limits, and prevent abuse.

3. How we use your information

We use the information we collect to:

• Provide the Service — authenticate you, run your optimization jobs, store and deliver your files, and enforce plan quotas.
• Process payments and manage subscriptions.
• Communicate with you — respond to support requests and send service-related notices.
• Maintain security — detect, prevent, and respond to fraud, abuse, and technical issues.
• Understand and improve the Service, generally in aggregate.
• Comply with our legal obligations.

4. Legal bases (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of our contract with you (to provide the Service); our legitimate interests (to secure, maintain, and improve the Service and understand how it is used); your consent (for non-essential analytics, where required); and compliance with legal obligations.

5. Your 3D files and content

Your uploaded models and their optimized outputs are yours. We access and process them only to provide the Service — to run the optimization you request and to let you download the result.

We do not use your models to train machine-learning models, and we do not share them with other customers. Files are held in private storage and reachable only through short-lived, signed links generated for your own requests.

You can delete your files and your account at any time; see “Your rights and choices”.

6. How we share information

We do not sell your personal information. We share it only with service providers (“subprocessors”) that help us run the Service, under agreements that require them to protect it:

• Supabase — authentication, database, and file storage.
• Stripe — payment processing.
• Google (Firebase Analytics) — website analytics.
• Vercel — website hosting.

We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and security of Zlim, our users, or the public. If we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.

7. Cookies and analytics

We use cookies and similar technologies for two purposes: essential cookies that keep you signed in and secure your session, and analytics cookies set by Google Firebase Analytics to understand how the website is used. Essential cookies are required for the Service to work. You can control or clear cookies through your browser settings.

8. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service. We retain uploaded files and optimization outputs only as long as necessary to provide the Service and let you download your results; you may delete them sooner. We keep certain records — such as billing history and security logs — for longer where required to meet legal, tax, or accounting obligations. When information is no longer needed, we delete or anonymize it.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined.

You can update your details or delete your account from your dashboard, or by contacting us at contact@modax.ai. We will respond within the time required by applicable law, and you will not be treated differently for exercising your rights.

10. International data transfers

We are based in the United States and our infrastructure is hosted in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for these transfers.

11. Security

We protect information with technical and organizational measures, including encryption in transit, private file storage reachable only via short-lived signed links, and hashing of passwords and API keys. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us at contact@modax.ai and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

Questions or requests about this policy or your data? Email us at contact@modax.ai. ModaX, Inc., operator of Zlim (zlim.ai).