Privacy Policy

This policy explains what personal data Bubo2, Inc. ("Bubo²", "we"), 1111B S Governors Ave STE 23389, Dover, DE 19904, US, collects, why, and what your rights are. It covers our websites (bubo2.com, app.bubo2.com, 3d.bubo2.com), the Bubo² app, and the Bubo² viewer — including when it's embedded on other people's sites.

The short version

• We collect what we need to run the Service: your account details, your workspace's content and settings, billing status (never your card number), and usage data.
• Photos and videos you upload may contain personal data — you're responsible for having the right to capture and upload them; we process them to build and serve your Models and, unless your workspace opts out, to improve our algorithms.
• The embedded viewer collects basic view analytics for the Showcase owner. It doesn't build advertising profiles, and we don't sell anyone's data.
• You can access, correct, export, or delete your data — email legal@bubo2.com.

1. Data we collect

Account and workspace data. Name, email address, password (hashed), workspace membership and role, and the settings and content of your workspaces — Models, Showcases, Galleries, and their configuration.

Sign in with Google. If you sign in with Google, Google shares your name, email address, and profile picture with us. We use your name and email address to create your account and sign you in. We don't store or use your profile picture.

Uploaded capture files. The photos and videos you upload to create Models. These may incidentally contain personal data (people, interiors, license plates). We process them to build and serve your Models and delete them automatically — about 1 week after your Model finishes processing, or about 2 weeks after upload if no Model is created. Unless your workspace has opted out of Service improvement (see §2), we may keep a subset longer in a separate, access-restricted development dataset. For what you capture, you are the controller: it's your responsibility to have the consents your capture requires; we process it on your instructions (and, for Service improvement, for our own account — see §2).

Files imported from Google Drive. If you import photos or videos from Google Drive, you choose them in Google's file picker, and we can access only the files you pick. We receive a short-lived access token from Google, which our import job uses to copy those files to our servers. From then on they are uploaded capture files like any others, handled as described above — including, unless your workspace opts out, use to improve our algorithms (§2). We share Google user data only with the service providers in §3, we don't use it for advertising, and we don't sell it.

Billing data. Your plan, credit balance and ledger, invoice history, and a card summary (brand, last four digits, expiry) — supplied by our payment provider, Stripe, which handles the payment itself. We never receive or store full card numbers. Stripe processes your payment data under its own privacy policy.

Onboarding data. If you complete the post-first-model survey, your answers (role, use case, how you found us). If you claim the social-share credit, the proof you submit is retained for spot-checking.

Usage and technical data. Log data (IP address, browser/device type, pages and actions, timestamps), crash and error reports, and the emails you exchange with us. In the app, this includes product analytics: which features you use and when (for example, creating a project, starting a build or publishing a Showcase), linked to your account and workspace and collected with PostHog. It records actions, counts and page paths, along with your browser, operating system, device type and model, screen and window size, language, time zone and the website that referred you. It doesn't record the content you upload or the names you give things, it stores nothing in your browser, and it keeps no location derived from your IP address.

Viewer analytics (visitors). When anyone views a published Showcase — on 3d.bubo2.com or embedded on a third-party site — we record the view: timestamp, coarse location derived from the IP address, device/browser type, and on some plans interaction data (which parts of the Model were explored, as aggregated heatmaps). This is provided to the Showcase owner as analytics. We do not use it to build advertising profiles or track visitors across unrelated sites, and we do not store identifiers that single out individual viewers.

Cookies. The bubo2.com marketing site and the public Showcase pages on 3d.bubo2.com use Plausible Analytics, which sets no cookies and stores no IP addresses — we see aggregate visit counts and referral sources, not individual people, and nothing is used to track you across other sites. The bubo2.com site sets one first-party cookie (bubo2_attr, expires after 180 days) the first time you visit: it records how you arrived — the campaign tags on the link you clicked, the referring site, and the landing page. It doesn't identify you; if you later create an account, we attach that arrival information to your workspace so we know which of our marketing channels work. It is never shared with third parties and never used to track you elsewhere. You can block or delete it in your browser; the site works the same without it. 3d.bubo2.com, the app and the embedded viewer set no analytics cookies.

Launch notification list and early access. If you ask to be notified when Bubo² launches (bubo2.com/get-notified) or ask to try it before launch (bubo2.com/early-access), we store your email address, which of the two you asked for, the submission time, and the arrival information described above with our email provider, Mailgun, and use it to send you a confirmation, the launch announcement and, if we pick you, an invitation to try Bubo² before launch. Reply to any of these emails — or write to legal@bubo2.com — and we'll remove your address. The signup form is protected by Cloudflare Turnstile, which checks the request for spam signals; it sets no cookies and doesn't track you across sites.

2. Why we process it, and on what basis

• To provide the Service (account management, processing your uploads into Models, hosting and serving Showcases, billing, support) — performance of our contract with you.
• To secure and improve the Service (logs, abuse and fraud prevention, aggregate usage analysis, capacity planning) — our legitimate interests in running a safe, working product.
• To understand how the app is used (product analytics) — our legitimate interest in seeing which features help people and where they get stuck. You can object at any time by emailing legal@bubo2.com; we then stop product analytics for your account and delete what it recorded.
• To improve our algorithms and train our models — unless your workspace opts out, we use uploads, the masks generated while processing them, resulting Models, and processing telemetry to tune our 3D reconstruction and to train and evaluate the machine-learning models behind features like automatic masking — our legitimate interest in improving the core technology, with the safeguards described in the Terms (separate access-restricted dataset; never published, never marketed, never shown to other users). Opt out at any time by emailing support@bubo2.com.
• Viewer analytics for Showcase owners — our legitimate interest (and our customers') in providing the analytics the plans include, implemented with data minimization (coarse location, aggregation).
• To communicate with you — contract (service messages) or consent/legitimate interest (product news; every marketing email has an unsubscribe link, and we don't email marketing without an opt-out path).
• To comply with law (tax and accounting records, responding to lawful requests) — legal obligation.
• To measure our marketing — when you first visit bubo2.com we record how you arrived (campaign tags, referring site, landing page) and, if you create an account, attach it to your workspace — our legitimate interest in knowing which of our channels work.

3. Who we share it with

We share personal data only with the service providers we need to run Bubo², and only what each one needs for its part of the Service:

• Infrastructure and hosting: Amazon Web Services (storage, compute, CDN), US/EU regions.
• Website hosting: Vercel, for bubo2.com and 3d.bubo2.com.
• GPU processing: GPU Mart, operated by Database Mart LLC (US) — its GPU servers run the 3D reconstruction that turns your uploaded photos and videos into Models.
• Payments: Stripe.
• Email: Mailgun (transactional and notification email) and Google Workspace (business email, including support and privacy correspondence).
• Website analytics: Plausible Analytics (EU-hosted, cookie-free), on the bubo2.com marketing site and the public Showcase pages on 3d.bubo2.com — not in the app, and not in Showcases embedded on other sites.
• Product analytics: PostHog (EU-hosted, cookie-free), in the app only — not on 3d.bubo2.com's Showcase pages and not in Showcases embedded on other sites.
• Spam protection: Cloudflare (Turnstile check on the bubo2.com signup form).

We also share data if the law requires it, to protect our rights or users' safety, or as part of a merger or sale of the company (we'd notify you). We don't sell personal data, and we don't share it with advertisers.

If you connect a third-party service (for example importing files from Google Drive), we access only what you select, with your permission, under that service's terms.

4. International transfers

We're a US company and process data in the United States (with some infrastructure in EU regions). Where EU/UK data protection law applies, transfers rest on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

5. Retention

• Uploaded capture files: deleted automatically (about 1 week after processing, or 2 weeks if unused).
• Development dataset (algorithm improvement): kept while needed for the improvement work; your workspace's data is removed within 30 days after you opt out or delete your account or workspace.
• Models, Showcases, Galleries: until you delete them or your account.
• Account data: while your account is active, then deleted within 30 days of account deletion.
• Billing and credit-ledger records: kept as long as tax and accounting law requires.
• Viewer analytics: raw view events are kept for up to 14 months; aggregated statistics are kept indefinitely (they contain no personal data).
• Product analytics: kept for up to 7 years; deleted with your account, or earlier on request.
• Backups: expire on a rolling schedule.

6. Your rights

Depending on where you live (GDPR in the EU/UK, CCPA in California, and similar laws elsewhere), you can ask us to access, correct, export, delete, or restrict the personal data we hold about you, object to processing based on legitimate interests, and withdraw consent at any time. You can also complain to your local data-protection authority.

To exercise any of these, email legal@bubo2.com from the address on your account. We respond within the timeframe the law requires (a month under GDPR). We don't discriminate against you for exercising your rights.

If you appear in someone else's capture (for example, a photo used to build a Model), the person who uploaded it is responsible for it — but you can also contact us and we'll help route or handle your request.

7. Security

We protect data with encryption in transit, encryption at rest in our cloud storage, access controls and role separation, and audit logging on money-adjacent records. No system is perfectly secure; if a breach affects your personal data, we'll notify you and the authorities as the law requires.

8. Children

The Service isn't directed at children and we don't knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we'll delete it.

9. Changes and contact

We'll post changes here and, for material changes, notify you by email or in-app with reasonable notice. The current version always lives at bubo2.com/legal/privacy.

Controller: Bubo2, Inc., 1111B S Governors Ave STE 23389, Dover, DE 19904, US — legal@bubo2.com