Privacy and data
A plain summary of how AI Render Studio handles your data, in the studio, in ChatGPT and Claude, and through the API. The legal texts are the privacy policy and the terms of service; if they differ from this summary, they apply.
What is stored
- Your account: your email address, your plan and your credit balance with its history.
- Your pictures: the screenshot you upload and the renders, fixes, changes, relights and videos made from it, with the settings used (look, quality) and any note or instruction you typed.
- Review links: the renders on the link, and the names and comments clients write on it.
- API keys and connector tokens: only in hashed form, see below.
The studio does not ask for payment card details. Payments are handled by Stripe.
Where it is processed and stored
- Rendering: to make a render, the picture and the instructions are sent to fal.ai, which runs the image and video models. How long fal.ai keeps files it receives is set by fal.ai.
- Storage: finished renders and uploaded pictures are copied into a private Supabase Storage bucket. They are served to you through the app, not from a public folder.
- Database: accounts, credits and render records are in Supabase.
- Payments: Stripe.
- Email: sign-in links and notifications are sent through Resend.
- Optional help chat: Crisp loads only when you open it.
ChatGPT, Claude and the API
When you use the connector, the assistant sends the picture or a link to it, the look and your instruction to 3Dstudio.co. The assistant receives back the finished image link, the render id and your credit balance. What ChatGPT or Claude keep of your conversation is covered by their own terms.
When Claude asks you for an upload, the link you get is single use and valid for 15 minutes. The picture is stored privately under your account and can be used for one render within 2 hours. Image links you give the assistant must be public https links; the server only fetches them to read the picture.
OAuth tokens and API keys
- Connector access tokens last 1 hour and refresh tokens last 30 days. They are stored as hashes, so a leaked database does not contain working tokens.
- API keys are shown once. Only a hash of the key is stored.
- Revoked tokens and keys stop working. Paid status is checked on every API call.
Cookies and tracking
- The app sets a cookie for your language, a sign-in session, and an anonymous device id that helps limit abuse of the free renders.
- Analytics and advertising tags (Google Analytics, Google Ads, Meta Pixel) load only after you accept in the cookie banner in countries that require a yes. A browser Global Privacy Control signal is treated as a no until you accept.
- Client review pages and shared render pages are not indexed by search engines.
How long things are kept
Renders stay in your account until you delete them. The app has no automatic expiry for finished renders. Upload links last 15 minutes, connector access tokens 1 hour, refresh tokens 30 days, and review links the time you chose (7, 30 or 90 days, or never).
Deleting your data
- A render: choose Delete on the render in My renders. It disappears from your lists at once and its share link stops working. The stored file is removed by a separate clean-up, not at the click.
- A project or folder: deleting it keeps its renders.
- A connection: remove the connector in ChatGPT or Claude, or revoke an API key at app.3dstudio.co/account/api.
- Your account and everything stored with it: write to hello@3dstudio.co.
Who runs it
AI Render Studio is a product of 3Dstudio.co (3DST OÜ, Estonia). Questions about your data: hello@3dstudio.co.