Privacy Policy

Last updated: July 24, 2026 This Privacy Policy explains what personal information Filafy collects, how it is used, and the choices you have. It applies to the Filafy website and web application at https://filafy.app (the "Service"). Filafy is operated by an individual sole proprietor based in Nova Scotia, Canada (referred to here as "the developer," "we," "us," or "our"). We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and, where they apply, the General Data Protection Regulation (GDPR) for users in the European Economic Area and the United Kingdom and applicable U.S. state privacy laws. By using the Service, you agree to the practices described in this Policy. This Policy is incorporated into the Terms of Service. 1. SUMMARY OF OUR APPROACH A few things that shape everything below: • Nothing you convert is stored permanently until you save a project or download a result. Most of what you do is transient and swept automatically. • Your images are processed on our own server. Background removal and subject isolation use a machine-learning model that runs on our infrastructure. Your images are never sent to a third-party AI or image-processing service, and are never used to train any model. • We use analytics and advertising technology — Google Analytics and Meta (Facebook) advertising tools — to understand how the Service is used and to reach potential users. This can include matching a scrambled ("hashed") version of your email address to a Meta account. You can control all of it, and where the law requires it we ask for your consent first. See Sections 6 and 8. • We do not sell your personal information for money. Some U.S. state privacy laws define "sale" or "sharing" broadly enough to include advertising technology like ours; Section 6 explains how to opt out. • Marketing email is strictly opt-in and separate from account creation. • You can delete your account yourself, at any time, from Settings. 2. INFORMATION WE COLLECT 2.1 Information you provide • Account information. Your email address and a securely hashed version of your password. We store password hashes using a strong, salted algorithm — never your password in plain text. • Two-factor authentication data. If you enable TOTP two-factor authentication, we store the secret needed to verify your one-time codes. • Invite code. If you register with an invite code, the code is recorded and associated with your account, so we can understand where sign-ups come from ("source attribution"). • Legal acceptance. The version of the Terms of Service and Privacy Policy you accepted. • Marketing consent. Whether you opted in to marketing email, and the date and time you did so (see Section 5). • Uploaded content. Images you upload for conversion, any 3D model files you upload, and associated conversion settings, crops, and face selections. • Your equipment and preferences. The filaments you indicate you own (including per-filament priority), the printers you own and your default printer, nozzle size, print-quality tier, preferred slicer, default and hidden styles, filament-library display preferences, and advanced-feature toggles. • Locale settings. Your time zone, unit preference (metric or imperial), and country. Country is used to choose the correct regional Amazon marketplace for filament "Buy" links. • Support communications. If you contact us — through the support channel, the in-app "Report an issue" tool, or email — we receive whatever information you choose to share. 2.2 Information generated by your use of the Service • Conversion results and projects. Generated previews and, once you save or download, saved outputs together with the original upload, any attached model, and the settings needed to reopen the project. • Job records. Operational records of conversion jobs, including the style and settings used and timing. • Credit ledger. An append-only record of credit events (consumption, refunds, and — in future — purchases or grants) used to operate the credit system accurately. • Aggregate style statistics. Daily per-style rollups of slider values from completed jobs, used to tune default settings. These are aggregate figures, not tied to your identity. • Session information. When you log in we create a session and store a hashed session token; a corresponding cookie is set in your browser (Section 8). • Error records. If something goes wrong, we record a structured error entry to diagnose it. These are deliberately minimal: they contain at most a numeric user ID (never your email), a request identifier, a coarse category, a status, and a curated message. Messages and details are scrubbed of email addresses and long tokens before storage, and we never record request bodies, uploaded file contents, passwords, or tokens. 2.3 Information collected automatically • Server and proxy logs. The Service and the reverse proxy in front of it record technical information such as IP address, user agent, requested paths, and timestamps. Your IP address is also used to enforce rate limits that protect the Service from abuse. • Analytics and advertising data. Subject to your consent where required, our analytics and advertising providers collect information about your visit — such as pages viewed, referring site, approximate location derived from IP address, device and browser characteristics, and interactions like sign-ups or conversions. This is described in detail in Section 6. We do not intentionally collect special categories of sensitive personal information, and you should not upload such information. 3. HOW WE USE YOUR INFORMATION We use the information above to: • create and manage your account and authenticate you, including two-factor authentication; • provide the core Service — decoding, cropping, resizing, background removal, conversion, preview generation, and export — and let you save and reopen projects; • apply the correct printer, nozzle, slicer, and print-quality presets to your exports; • operate the free monthly credit system, including refunds for failed or cancelled conversions, and (in future) any paid-credit purchases; • gate registration by invite code where enabled, and understand where sign-ups originate; • send you transactional email, such as password resets and notifications that a queued conversion is ready; • send you marketing email only if you have opted in (Section 5); • measure how the Service is used, and measure and target advertising (Section 6); • show relevant filament "Buy" links for your region; • maintain the security and integrity of the Service, enforce rate limits, prevent abuse, enforce our Terms, and diagnose errors; • improve the Service using aggregate usage patterns; • comply with legal obligations. We do not use your uploaded images or models to train machine-learning models, and we never share the contents of your uploads or your saved projects with analytics or advertising providers. 4. LEGAL BASES AND CONSENT Under PIPEDA we collect, use, and disclose personal information with your knowledge and consent, except where the law permits otherwise. By creating an account you consent to the processing described here. Much of it is necessary to provide a service you requested — we cannot convert an image without processing it. For users in the EEA or UK, our legal bases under the GDPR are: • Performance of a contract — operating your account, running conversions, storing your projects, and providing support; • Legitimate interests — securing the Service, preventing abuse, rate limiting, diagnosing errors, and improving the product using aggregate data; • Consent — marketing email, and analytics and advertising cookies and similar technologies. You may withdraw consent at any time; • Legal obligation — where we must retain or disclose information by law. You may withdraw consent to optional processing at any time (Sections 5, 6, and 8), and you may withdraw consent more broadly by deleting your account. 5. MARKETING EMAIL (OPT-IN ONLY) Marketing email is entirely optional and separate from account creation. You are never subscribed by default, and consent to marketing is never bundled with acceptance of the Terms. • You may opt in during registration, or later in Settings → Account, using a distinct, unticked control. • When you opt in, we record the date and time of your consent, as required by CASL and the GDPR. • You may withdraw consent at any time in Settings, or by using the unsubscribe link in any marketing message. • When you withdraw consent, we clear your opt-in and instruct our marketing-email provider to suppress your address, so a later re-import cannot silently resubscribe you. If marketing is enabled, we share your email address, your consent timestamp, and your country with our marketing-email provider (Section 7) for that purpose only. Withdrawing marketing consent does not affect transactional email — password resets and job notifications are part of the Service. Marketing email consent is separate from advertising (Section 6). Opting in to email does not authorize us to include you in advertising audiences, and opting out of advertising does not unsubscribe you from email. Each is controlled independently. 6. ANALYTICS AND ADVERTISING We use two categories of third-party technology to understand and grow the Service. Google Analytics helps us understand how visitors find and use Filafy in aggregate — which pages are visited, how people navigate, roughly where visitors are located, and which sources bring sign-ups. Google Analytics sets cookies or similar identifiers and receives your IP address, device and browser information, and details of your activity on the site. Meta (Facebook) advertising tools let us measure and target advertising. A measurement tag on the site reports events such as page views and sign-ups back to Meta, so we can see which ads work and show ads to people who have visited Filafy or who resemble our existing users. Meta receives your IP address, device and browser information, and the events you triggered, and may match this to a Meta account if you have one. Custom Audiences. We may also upload a hashed (irreversibly scrambled) version of your email address to Meta so it can be matched against Meta accounts. This lets us show Filafy ads to existing users, exclude existing users from sign-up ads, and build "lookalike" audiences of people with similar characteristics. Hashing means we do not hand Meta your email address in readable form, but a match still links you to a Meta profile, so we treat this as a disclosure of your personal information for advertising. This is a separate purpose from marketing email. Consenting to marketing email does not authorize audience matching, and audience matching does not subscribe you to email. You can opt out of Custom Audience matching at any time — see "Your choices" below — and doing so does not affect your use of the Service. What we never share. We do not send your uploaded images, 3D models, saved projects, conversion settings, filament library, or password to any analytics or advertising provider. Your choices. You can: • decline or withdraw consent for analytics and advertising cookies where a consent control is shown (Section 8); • opt out of Custom Audience matching, which stops us including your email in advertising audiences and removes you from existing ones; • use your browser's cookie controls, or a tracking-blocking extension; • install Google's browser opt-out add-on for Google Analytics; • adjust your Meta ad preferences within your Facebook or Instagram account settings, including the "Off-Facebook activity" and advertiser-audience controls; • use the industry opt-out tools at youradchoices.ca (Canada), youradchoices.com (U.S.), or youronlinechoices.eu (Europe); • send a Global Privacy Control (GPC) signal, which we honor as an opt-out request where required by law. A note on "sale" and "sharing." We do not sell your personal information for money. However, some U.S. state privacy laws — including California's — define "sale" and "sharing for cross-context behavioral advertising" broadly enough that our use of advertising technology may qualify. If you are covered by such a law, you may opt out using the controls above, and we will not discriminate against you for doing so. Advertising and children. We do not knowingly target advertising to anyone below the age requirement in our Terms of Service. 7. THIRD PARTIES AND SERVICE PROVIDERS We share personal information only as needed to run the Service, and only with the categories of providers below. • Vultr Holdings — hosting (virtual server, Toronto, Canada) and object storage for database backups (New York, United States). May receive: all Service data, as the hosting environment. • Apple (iCloud+) — transactional email delivery (password resets, job-ready notices). May receive: your email address and message contents. • Brevo — optional marketing-email list, only if you opt in. May receive: your email address, consent timestamp, country. • Google — website analytics. May receive: iP address, device/browser data, pages viewed, on-site activity. • Meta Platforms — advertising measurement, targeting, and audience matching. May receive: iP address, device/browser data, events such as page views and sign-ups, and a hashed version of your email address. • Cloudflare — dNS, and — where enabled — reverse proxy, TLS termination, and content delivery. May receive: domain lookup data; where proxying is enabled, also your IP address, request metadata, and traffic in transit. • Buy Me a Coffee — voluntary donations, if you choose to donate. May receive: whatever you provide to that platform directly. • Discord — community and support channel, if you choose to join. May receive: whatever you provide to that platform directly. • Amazon and other retailers — affiliate "Buy" links, if you click one. May receive: referral/tracking identifier and their own cookies once you land on their site. • Payment processor (future) — paid credits, if introduced. May receive: payment details, handled by them — we will not store full card numbers. A note on Cloudflare. Cloudflare provides DNS for filafy.app, and we may also route traffic through Cloudflare's network as a reverse proxy and content-delivery layer to improve performance and protect against attacks. When proxying is enabled, your requests pass through Cloudflare's servers before reaching ours, so Cloudflare processes your IP address, request metadata, and the traffic itself in transit, and may terminate the encrypted connection at its edge. Cloudflare operates a global network, so this processing may occur outside Canada (Section 11). Cloudflare acts as our service provider for this purpose and does not use your data for its own advertising. We may also disclose information if required by law, or where we reasonably believe disclosure is necessary to comply with legal process, enforce our Terms, or protect the rights, safety, or property of the developer, our users, or the public. 8. COOKIES AND SIMILAR TECHNOLOGIES The Service uses three categories of cookies and similar technologies: • Essential cookies. Set when you log in so the Service can keep you authenticated, and marked Secure in production. The Service cannot function without them; they are not used for advertising or cross-site tracking, and they do not require consent. • Analytics cookies. Set by Google Analytics to measure how the Service is used (Section 6). • Advertising cookies and pixels. Set by Meta advertising tools to measure and target ads (Section 6). Consent. Where the law requires it — including in the EEA, the UK, and Quebec — we ask for your consent before loading analytics or advertising technology, through a consent control shown on your first visit. You can accept or decline each optional category, we record your choice, and you can change it at any time using the same control. Declining optional cookies does not affect your ability to use the Service. Note that the cookie control governs technology running in your browser. Custom Audience matching (Section 6) happens on our side rather than in your browser, so it is controlled separately, through the opt-out described in that section. Third-party cookies on other sites. If you follow an affiliate "Buy" link, the destination retailer may set its own cookies under its own policy. That happens on their site, not ours. Most browsers let you block or delete cookies, but blocking the essential session cookie will prevent you from logging in. 9. DATA RETENTION We keep personal information only as long as needed, unless a longer period is required by law. Current periods: • Conversion previews (unsaved results) — about 1 hour. • Session uploads — about 6 hours. • Per-job upload/model copies for jobs never saved — about 1 day. • Saved projects (result, original upload, attached model, settings) — 30 days, then automatically deleted. • Job records (operational) — 7 days. • Credit ledger — consumption and refunds — 62 days. • Credit ledger — purchases and grants, if introduced — retained, as a financial record. • Aggregate per-style statistics — about 35 days (aggregate, not identifying). • Error records — 14 days. • Account information — until you delete your account. • Database backups (New York, U.S.) — rolling backup window of about 30 days. • Server whole-disk backups — per the hosting provider's rotation. • Analytics and advertising data — held by those providers under their own retention settings and policies. Retention periods are configurable and may change. Because much of the Service is transient by design, keep your own copies of any outputs you want to preserve — Filafy is not a backup service. 10. DELETING YOUR ACCOUNT You can permanently delete your account yourself, at any time, from Settings. You do not need to contact us or give a reason. What deletion does. Your account record, email address, password hash, two-factor secret, saved projects, uploaded source files and models, filament and printer library, preferences, and active sessions are removed from the live Service. Any unused credits are forfeited. Where you had opted in to marketing email, we also instruct our marketing provider to suppress your address, and we remove your email from any advertising audiences we maintain. What may briefly remain. • Backups. Deleted data may persist in database and server backups until they age out of the normal backup rotation (about 30 days), after which it is gone. We do not restore backups to recover deleted accounts. • Minimal records. We may retain limited records we are required to keep for legal, security, or accounting reasons — for example, records of any payments, or a suppression entry that prevents marketing email from being sent to you again. • Third-party data. Information already collected by analytics or advertising providers is held under their own policies; use the controls in Section 6 to manage it. Deletion is irreversible. We cannot restore a deleted account or its projects, so download anything you want to keep first. 11. WHERE YOUR INFORMATION IS STORED Primary storage — Canada. The Service runs on a virtual server located in Toronto, Canada. Your account, your saved projects, and your uploaded images and models are served from there. Database backups — United States. The Filafy database is backed up continuously to object storage located in New York, United States. These backups contain the contents of the database — including account records, email addresses, hashed passwords, two-factor secrets, preferences, consent records, and project metadata. Because these backups are stored in the United States, they are subject to U.S. law, and U.S. authorities may be able to compel access to them through U.S. legal process, regardless of where you are located. Your uploaded images and 3D models are stored as files on the server and are not part of this continuous database backup. Server backups. Our hosting provider also takes periodic whole-disk backups of the server, which do include uploaded files. These are managed by the provider as part of the hosting environment. Developer-held copies. A copy of backups may also be pulled to separate storage controlled by the developer in Canada, so that a compromise of one provider account cannot destroy every copy. Several third parties in Section 7 operate globally and process data outside Canada, including in the United States and the European Union. In particular, Google and Meta process analytics and advertising data on infrastructure in the United States and elsewhere, and — where Cloudflare proxying is enabled — your requests are routed through whichever Cloudflare edge location is nearest to you, which may be in any country where Cloudflare operates. Information processed in another country may be subject to that country's laws, including lawful access by its authorities. We rely on our providers' contractual and technical safeguards, including standard contractual clauses where applicable. By using the Service, you acknowledge this cross-border storage and processing. 12. SECURITY We take reasonable technical and organizational measures to protect your information, including: • storing passwords only as salted hashes, never in plain text; • storing session and administrative tokens in hashed form, with Secure cookies in production; • offering optional two-factor authentication; • keeping the administrative interface off the public internet entirely — it is reachable only from the server itself over an authenticated tunnel; • rate-limiting authentication and other sensitive endpoints; • restricting network access at the firewall to only the ports needed to serve the site; • applying automatic security updates to the host, and scrubbing error logs of emails and tokens; • maintaining continuous, tested database backups. No method of transmission or storage is completely secure and we cannot guarantee absolute security. You are responsible for keeping your password and two-factor credentials confidential. 13. YOUR RIGHTS AND CHOICES Subject to applicable law, you have the right to: • Access the personal information we hold about you, and ask how it is used and disclosed; • Correct inaccurate or incomplete information — much of it is editable directly in Settings; • Delete your account and associated personal information, yourself, from Settings (Section 10); • Withdraw marketing consent at any time, in Settings or via any unsubscribe link; • Opt out of analytics and advertising, using the controls in Sections 6 and 8; • Port your data — you can download your projects at any time while they are retained. If the GDPR applies to you, you also have rights to restrict or object to certain processing, to data portability in a machine-readable format, and to lodge a complaint with your local supervisory authority. If a U.S. state privacy law applies to you, you may have rights to know, delete, correct, and opt out of targeted advertising or "sale"/"sharing," and to be free from discrimination for exercising them. To exercise any right that is not self-serve, contact us through the support channel linked in the Service. We may need to verify your identity — usually by confirming control of your account email — before acting. We will respond within the time required by applicable law. If you have a concern we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or your applicable provincial or national privacy regulator. 14. CHILDREN'S PRIVACY The Service is not directed to children. You must meet the age requirement in the Terms of Service to use the Service. We do not knowingly collect personal information from children below that age, and we do not knowingly target advertising to them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it. 15. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date, and we may notify you in the Service and ask you to acknowledge the revised version. Your continued use after the changes take effect means you accept the updated Policy. 16. CONTACT If you have questions about this Privacy Policy or how your information is handled, contact the developer through the support channel linked within the Service.