Privacy policy and terms.

The controller for the processing described here is ASH Software, Switzerland. You can reach us about privacy at support@rhinocollab.com.

Account data: name, display name, optional studio or company, email, hashed password, and the plan you subscribe to.

Content: 3D models, project metadata, and chat/session data you upload or generate while collaborating.

Billing data: handled by Stripe. We store only the Stripe customer and subscription IDs, the active plan, and the billing interval. We never see your full card details.

Usage data: basic logs (IP address, timestamps, request paths, user agent) needed to operate and secure the Service.

Cookies: a session cookie that keeps you signed in. No third-party advertising cookies.

To operate the Service, process payments, send transactional email (account, invites, billing), enforce plan limits, prevent abuse, and comply with legal obligations. We do not sell your personal data.

Stripe: payments and invoicing (Ireland and the United States).

Amazon Web Services: hosting and database in the EU, region eu-north-1 (Stockholm, Sweden); uploaded model files in the EU, region eu-central-1 (Frankfurt, Germany).

Resend: transactional email delivery (United States).

Vercel: website hosting and cookieless analytics (United States, with a worldwide edge network).

Each processor handles your data under its own privacy terms. We pass only what is necessary for them to provide the service.

We keep account and content data while your account is active. When you delete your account, your content is removed and your account record is soft-deleted into a separate table for up to 90 days to handle fraud, chargebacks, and legal holds, then permanently erased. Backups may retain data for up to 30 additional days.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict processing. You can exercise most of these rights directly from the dashboard (change name, change password, delete account) or by emailing support@rhinocollab.com. You also have the right to lodge a complaint with a data protection authority: in Switzerland the FDPIC, and in the EU/EEA your national authority.

We use industry-standard measures (HTTPS in transit, at-rest encryption for storage, hashed passwords, least-privilege access) to protect your data. No system is perfectly secure; you are responsible for keeping your credentials confidential and for maintaining independent backups of important files.

We store your account data and database on Amazon Web Services in the EU, in Stockholm (Sweden), and your uploaded model files on Amazon Web Services in the EU, in Frankfurt (Germany). Some providers process data in the United States: Vercel (website hosting), Stripe, Inc. (payments) and Resend (email). For US transfers we rely on the recipient's EU-US and Swiss-US Data Privacy Framework certification where it applies, and otherwise on the European Commission's standard contractual clauses with the Swiss addendum. Destination countries: Sweden, Germany, Ireland and the United States. Write to support@rhinocollab.com for a copy of the safeguards.

We may update this Policy. We will post the new version here with a new date, and for material changes we will tell account holders by email at least 30 days beforehand.

Privacy questions: support@rhinocollab.com.