Privacy Policy

Untether AI operates the AI wood visualization platform available at this website, registered as Untether AI Corp., 20 Toronto Street, Suite 600, Toronto, Ontario M5C 2B8, Canada. We act as the data controller for account and billing data, and as processor for the product imagery you upload.

For any privacy question, or to exercise the rights described below, write to [email protected]. We answer within 30 days.

Account data: first name, last name, email address and a hashed password created during checkout. We never store your password in readable form.

Order data: the number of credits purchased (minimum 50 credits), the currency you selected, the promo code applied, the chosen payment method and the resulting invoice records.

Content data: the product photographs, renders and supplier textures you upload, together with the generated visualizations.

Technical data: IP address, browser type, device type and pages viewed, collected through essential and — with your consent — analytics cookies.

To create and secure your account, to process credit purchases and issue invoices, to deliver the services you spend credits on, to provide support, to prevent fraud and abuse, and to comply with accounting obligations.

Our legal bases are performance of a contract (account, credits, services), legitimate interest (security, fraud prevention, service improvement), consent (analytics cookies, marketing email) and legal obligation (tax and accounting records).

Your uploads and the resulting visualizations belong to you. We use them only to deliver the service you requested and to troubleshoot a failed job at your request.

We do not use customer imagery to train public models. Private texture calibrations are stored in your account library and are not visible to other customers.

Bank transfer is currently the only active payment method. We receive your name, the transfer reference and the amount from our bank. Card, PayPal and Stripe payments will be processed by the respective provider once available; in that case the provider is an independent controller for the card data and we never see full card numbers.

We share data only with processors that help us run the platform: cloud hosting and storage, transactional email delivery, GPU inference infrastructure, accounting and — once activated — payment providers. All processors are bound by data processing agreements.

Where a processor is located outside the EEA, transfers are covered by the EU Standard Contractual Clauses.

Account and credit-balance data are kept for as long as your account exists. Invoices and payment records are kept for ten years to satisfy Belgian accounting law. Uploaded imagery and generated results are kept for 24 months unless you delete them earlier. Server logs are kept for 90 days.

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. You may withdraw cookie or marketing consent at any time.

You also have the right to lodge a complaint with the Belgian Data Protection Authority or your local supervisory authority.

Data is encrypted in transit and at rest, access to production systems is limited to named staff with multi-factor authentication, and passwords require at least eight characters. We review access rights quarterly.

We update this policy when our processing changes. Material changes are announced by email to account holders at least 14 days before they take effect.