Flux3D Privacy Policy

Last updated: 29 July 2025

Flux3D is a service of ScansMatter B.V., a company based in the Netherlands. This policy explains how we collect and use personal data when you visit our website (https://flux3d.ai), request a quote or otherwise interact with us. The policy also describes your rights under the EU General Data Protection Regulation (GDPR) and other applicable Dutch and EU law. For purposes of this policy, “we” and “our” refer to Flux3D/ScansMatter B.V. and “you” refers to anyone who visits our website or uses our services.

1. Personal data we collect

1.1 Information you provide

When you request a quote, contact us or create an account, we collect the information you choose to share with us. This may include:

  • Contact details and identity information – e‑mail address, name, telephone number and postal address. Quote requests ask for contact information so we can send you an accurate price estimate and follow up.

  • Company information – company name, VAT number and billing address, if you place an order on behalf of a business.

  • Project information and files – information about the 3D asset you want us to create and any reference files or documents you upload. We use these materials to understand your requirements and prepare a quote.

1.2 Information we collect automatically

We use cookies and similar technologies to operate our website and measure its use. A cookie banner allows you to accept or reject non‑essential cookies and to customize your preferences. The categories of cookies are:

  • Necessary cookies – essential for basic site functionality, such as secure log‑ins and remembering your consent preferences. These do not store personal data.

  • Functional cookies – enable features such as content sharing and third‑party tools.

  • Analytical cookies – measure visitor interactions and provide insights on traffic sources.

  • Advertisement cookies – deliver personalized ads and analyze campaign effectiveness.

We may also collect technical information such as IP addresses, device identifiers, browser type, language settings and usage data. This information helps us analyze performance, detect fraud and improve our services.

2. Purposes and legal bases

We process your personal data for the purposes listed below. Under the GDPR, we must have a legal basis for each purpose.

Purpose Legal basis Description
Providing quotes and responding to enquiries Contract (Article 6(1)(b) GDPR) To review your quote request and send you an accurate price estimate. We may contact you to ask clarifying questions or to follow up on your request.
     
Customer support and communication Contract, Legitimate interest (Article 6(1)(f) GDPR) We respond to your questions and may contact you about project status. We keep records to resolve disputes and improve our services.
     
Marketing communications (optional) Consent (Article 6(1)(a) GDPR) We may send updates, offers or newsletters if you opt‑in. You can withdraw your consent at any time via the unsubscribe link or by contacting us.
Analytics and site improvement Legitimate interest or Consent Analytical cookies help us understand how visitors interact with our site. We rely on your consent for non‑essential cookies.
Compliance and legal obligations Legal obligation We may process data to comply with tax, accounting and other legal requirements, respond to lawful requests from authorities or enforce our rights.

3. How we share your data

We only share personal data when necessary for the purposes described above:

  • Service providers – Our web hosting provider (Namecheap) stores our website data in the EU. We use a content‑delivery network (CDN) that may temporarily route traffic via servers outside the EU. We also use payment processors (WooCommerce, Stripe, PayPal, iDEAL) to handle transactions. These partners process data on our behalf under data‑processing agreements.

  • Professional advisers – accountants, lawyers or auditors may access data to perform services for us under confidentiality obligations.

  • Group companies – Flux3D is a sister company of ScansMatter.com – within our corporate group we may share data for internal administration and support.

  • Legal compliance – we may disclose information if required by law or necessary to protect our rights, property or safety.

We do not sell your personal data. We do not use the models you submit for AI training; your models belong to you, although we may request permission to feature completed work in our portfolio.

4. International data transfers

Some of our service providers or CDN nodes may be located outside the European Economic Area (EEA). When personal data is transferred to a third country, we ensure that an adequate level of protection is in place. This may involve using standard contractual clauses approved by the European Commission, which provide contractual safeguards for transfers to countries without an adequacy decision commission.europa.eu. By using our services you acknowledge that such transfers may occur.

5. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described above. In general:

  • Quote requests that do not result in an order are deleted or anonymized after 12 months.

  • Customer account data, order information and invoices are retained for at least seven years to comply with tax and accounting obligations.

  • Project files and assets are stored during your contract and deleted upon request or after a reasonable period following project completion.

  • Backups and logs are kept for a limited time to ensure security and continuity.

6. How to contact us and complain

If you have questions about this privacy policy or wish to exercise your rights, please contact us via our Contact page at https://flux3d.ai/contact/. Alternatively, you can reach ScansMatter B.V. at support@flux3d.ai

7. Data security

We implement appropriate technical and organizational measures to protect personal data, including encryption (HTTPS) for data in transit, secure hosting, access controls and regular backups. We store passwords in hashed form and restrict access to personal data to authorized employees and service providers. However, no system can be guaranteed completely secure; you are responsible for keeping your account credentials confidential and notifying us of any suspected unauthorized use.

8. Updates to this policy

We may amend this privacy policy from time to time to reflect changes in our practices, the law or our services. Updates will be posted on this page with a new “Last updated” date. Please review this policy periodically. If the changes are significant, we will provide a prominent notice or seek your consent where required by law.