3D AI Studio – Privacy Notice, Update

Since 23 October 2026, the 3D AI Studio platform, website (3daistudio.com), API and MCP server are operated by SaaS.group Review Management Holding GmbH, Rathausgasse 1, 12529 Schönefeld, Germany (commercial register: Amtsgericht Cottbus, HRB 17602 CB) ("we", "us"). We acquired the 3D AI Studio business from Mr Jan Hammer, trading as Hammer Creations, Lärchenstraße 17, 74389 Cleebronn, Germany ("Hammer Creations").

Customers whose contract has moved to us: as we acquired the 3D AI Studio business, we asked you at login whether you agree to the transfer of your contract with Hammer Creations to us. Your contract moved to us when you accepted that request. From that day, we are your contracting party and the controller of your personal data.

Customers whose contract has not yet moved to us (for example because you have not yet answered, or declined, the transfer request shown at login): Hammer Creations stays your contracting party and the controller of your personal data. We run the service and process your data on behalf of Hammer Creations under a data processing agreement (Article 28 GDPR). Questions about this data can go to Hammer Creations at jan@avool.com or to us; we pass them on to Hammer Creations. For further information on Hammer Creations privacy notice, click here.

API customers: if you use our public API to process other people's personal data (for example, photos of your own users), you decide how that data is used and we only process it on your behalf, under our Data Processing Agreement (Article 28 GDPR). Questions or requests from those people should go to you; we will help you respond. For your own API account data, such as your login, billing, usage logs and security records, this privacy notice applies.

Contact for data protection: privacy@saas.group.

Data protection officer: intersoft consulting services AG.

Your account, credits, subscriptions and generated content stay as they are. Payments continue through Lemon Squeezy (our merchant of record) and Stripe.

We use your data for the same purposes and with the same privacy settings as before (Section 4). We do not use your prompts, uploads or outputs to train AI models.

When you next log in, we ask whether you agree to the transfer of your contract and data to us. You can accept, decline or decide later. If you decline, your contract stays with Hammer Creations and your access to the service continues unchanged until at least 31 December 2027; after that date, contracts that have not moved to us may be terminated in accordance with their terms.

If your contract moved to us from Hammer Creations, we received the data listed above from Hammer Creations, which collected it from you while you used 3D AI Studio.

Payment data is held by Lemon Squeezy as merchant of record and was not transferred by Hammer Creations.

Required data: you need to provide an email address to create an account and use the service. Without it, we cannot conclude or perform the contract with you. Providing any other data is voluntary.

Automated decisions: we do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

We use service providers who process data on our behalf, as well as affiliated companies within the saas.group group to the extent they provide internal services (hosting, finance, support). AI engine providers receive your prompts, uploaded images and 3D models, but no account identifiers such as your user ID or email address.

Where data goes to a country outside the EU/EEA without an adequacy decision, we use the EU Standard Contractual Clauses or rely on the provider's certification under the EU-U.S. Data Privacy Framework. You can ask us for a copy of the safeguards at privacy@saas.group.

Our cookie banner lets you accept or decline optional cookies. No optional browser tag loads before you consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Without your consent, we only use technologies needed to run the service: login and session cookies, PostHog feature flags without behavioural tracking, Sentry error reporting and Google reCAPTCHA, based on our legitimate interest in a stable and secure platform (Art. 6(1)(f) GDPR). Your choice is stored in the cookie "cc_cookie". You can change it at any time.

You have the right to access, rectification, erasure, restriction, data portability and objection (Articles 15 to 21 GDPR), and to withdraw consent at any time with effect for the future. You can complain to a data protection supervisory authority, in particular in your country of residence or at our seat (Brandenburg, Germany): Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

Your right to object (Article 21 GDPR): Where we process your data on the basis of legitimate interests (Article 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. To object, write to privacy@saas.group.

Version 1, dated 27 October 2026. This version applies to customers whose contract has moved to us.

For customers whose contract remains with Hammer Creations, the privacy notice of 8 October 2026 published by Hammer Creations continues to apply.