Privacy Policy
Last Updated: June 2026
LetMeFigure ("we," "our," or "us") is fully committed to safeguarding your privacy and protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. This Privacy Policy outlines how we collect, process, share, and retain your data when you interact with our platform.
1. Who is the Data Controller?
The legal entity responsible for your personal data on this platform is:
Data Controller: Oleksii Koniuchenko, trading as LetMeFigure.
Address: 56 Greenville Place, Dublin, Co. Dublin, Ireland.
Contact Email: stnew13.ak@gmail.com
2. What Personal Data We Collect
We collect and process data required to host our platform, generate your previews, and fulfill physical orders:
- Identity & Contact Information: Your name, email address, physical delivery address, and billing address.
- Generation & Model Data: The text prompts or baseline images you submit, along with the resulting custom 3D model meshes generated during your preview sessions.
- Technical & Session Log Data: Your IP address, browser type, device information, and interaction data collected during your session to ensure site stability.
3. Our Legal Bases for Processing Data
Under European data protection laws, we rely on the following legal bases:
- Performance of a Contract: To process your transaction, generate your requested 3D model, manufacture your physical figurine, and deliver it to your address.
- Legitimate Interests: To maintain website security, prevent fraudulent transactions, and optimize our generation interface.
- Legal Compliance: To satisfy statutory accounting and tax record obligations in Ireland.
4. Third-Party Service Providers & Data Sharing
We do not sell or trade your personal data. To run our digital platform and physical fulfillment pipeline, we partner with specialized, secure third-party processors:
- Platform & Core Infrastructure: Our application environment and secure database hosting are powered by Lovable.
- 3D Model Generation: Your interactive generative prompts are securely processed via API by Meshy.ai to build your custom character mesh.
- Payment Processing: All transactions are handled directly by Stripe. LetMeFigure never handles, views, or stores your credit card details.
- Manufacturing & Shipping: The final approved 3D model and your shipping address are shared exclusively with our verified 3D printing and courier fulfillment vendors located within Ireland and the European Union.
5. International Data Transfers
While our core application infrastructure and physical manufacturing partners are strictly based within Ireland and the European Union, our generative AI provider (Meshy.ai) operates secure processing clusters hosted within the United States. To guarantee that your data receives an equivalent level of protection as it does within the EEA, these transfers are strictly governed by appropriate legal safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and rigorous SOC 2/GDPR-aligned data security protocols.
6. How Long We Retain Your Data
We enforce strict data minimization standards, particularly regarding custom-generated 3D files:
- Generation Inputs & Outputs (Audit Log): We retain the text prompts you submit, any reference images you upload, the AI-generated preview images, and the resulting 3D model files for internal auditing, quality assurance, abuse prevention, and continuous improvement of our generation pipeline. Access to this audit data is strictly limited to authorized LetMeFigure personnel.
- Unpurchased 3D Models: If you generate an interactive 3D character preview but do not complete the checkout process, the model mesh shown in your personal history is automatically removed from your account view after 48 hours (2 days). A copy of the prompt, input image and output may be retained in the internal audit log described above.
- Purchased 3D Models: If you purchase a physical figurine, your custom 3D model mesh is retained indefinitely within our secure storage architecture. This allows you to safely log back in, view your collection, or order exact duplicate reprints or different sizes of your character in the future.
- Transactional Records: Basic business records, invoices, and customer contact data linked to purchases are retained for 6 years to comply with Irish Revenue tax laws.
7. Your Statutory GDPR Rights
As an individual within the EU, you hold extensive rights regarding how your data is treated. You can contact us at any time to exercise your right to:
- Request access to a portable copy of the personal data we hold about you.
- Request the correction of inaccurate or outdated information.
- Request the erasure of your personal data (where it does not conflict with our legal tax preservation requirements).
- Object to or restrict specific data processing behaviors.
To initiate any data right request, please email stnew13.ak@gmail.com. If you believe your data privacy rights have been breached, you have the right to lodge a formal complaint with the Irish Data Protection Commission (DPC).
8. Cookies and Tracking
We use essential functional cookies to keep track of your active character generation sessions, maintain your shopping cart contents, and protect checkout security. You can adjust your browser rules to reject cookies, though doing so may prevent the 3D configuration tools from rendering properly.