Privacy Policy
Last updated October 29, 2026
This policy tells you what data STUDIO D8 collects when you use tabletop, how we use it, and the choices that you have. It covers the app at app.tt3d.ai, the website at tt3d.ai and the docs at docs.tt3d.ai. Our Terms of Service and Cookie Policy also apply.
1. Who we are
STUDIO D8 ("we", "us") runs tabletop and controls the data in this policy. Contact us at legal@studiod8.com.
2. The data that we collect
When you use the app:
- Account data. Your email address, your name and your avatar.
- Sign-in data. The codes that we send you, and your sessions: the user agent of your browser or tool, when the session started and when it was last used. We do not store your IP address in our database. We use it for a short time in memory to limit requests and to check for bots. Our hosting and security providers can log IP addresses.
- Google and GitHub sign-in. When you sign in with Google or GitHub, we receive your email address, your name and the ID of your Google or GitHub account from that provider. We keep the account ID and the email with your account, so that we find your account at your next sign-in. We use the access token of the provider one time to read this data, and we do not store it. We do not receive your password, and we get no access to your other data at the provider.
- Sign-up source. Where your sign-up came from (the website, an invite, the CLI or an agent tool) and the campaign values of the link that brought you, if any.
- Your content. Your uploads, your workflows with their edits and versions, your templates, the prompts and parameters of your node runs, the outputs and each version of each output, run logs and screenshots of your workflows.
- Provider keys. The API keys of AI providers that you add. We store them encrypted.
- Billing and usage data. Your plan and purchases, your token balance and its history, the use of each node run, and the AI usage of each node run. Our payment providers handle your card. We do not see or store your card number.
- Audit log. A record of security and account events: sign-ins, invites, role changes, keys, tokens, billing and admin actions.
- Product events. Records of how the app is used, such as a sign-up, a new org or workflow, nodes that are added or removed, templates and features that are used, onboarding steps and plans that are viewed. These events hold no free text.
When you use the website:
- Newsletter. Your email address, when you subscribe.
- Analytics. Only after you give consent: the pages that you visit, your browser and device type and your approximate location, through Google Analytics. See the Cookie Policy.
When you use the docs or the app: the same analytics as on the website, only after you give consent. One choice applies to the website, the docs and the app.
3. How we use your data
- To run the service: your account, your orgs, your workflows and your node runs.
- To bill you and to keep your token balance.
- To keep the service and its users safe: sign-in, rate limits, bot checks, the audit log and the prevention of abuse and fraud.
- To support you when you contact us.
- To send you the emails of the service, such as sign-in codes, invites and billing messages.
- To learn how the app is used and make it better, with product events.
- To send you the newsletter, if you subscribe.
- To obey the law.
4. We do not sell your data
We do not sell your data, and we do not share it for advertising.
5. Who receives your data
- The people in your org. The people in an org see its content, as their role and the workflow settings allow. Nobody outside your org sees your content unless an owner or an admin invites them.
- Service providers. These providers process data for us to run the service. An AI provider gets only the inputs of the nodes that use it. If you add your own provider key, the node runs on your account with that provider, under its terms.
| Provider | Purpose |
|---|---|
| Anthropic | AI text and agents for nodes |
| OpenAI | AI text, images and agents for nodes |
| Gemini AI for nodes; Google Analytics and Google Tag Manager on the website, the docs and the app, only after consent | |
| Tripo | 3D models for nodes |
| Leonardo | Images for nodes |
| Runware | Videos for nodes |
| Render | Hosting, database and worker jobs |
| Cloudflare | File storage, DNS and bot checks |
| An email delivery service | Sign-in codes and the emails of the service |
| RevenueCat | Subscriptions and purchases |
| Stripe | Card payments |
| Loops | The newsletter of the website |
- The law. We share data when the law requires it, or when we must do so to protect the rights, property or safety of our users, of the public or of us.
- A sale or transfer. If the service or the business is sold, merged or transferred, your data moves with it. The new owner must respect this policy for the data that it gets.
6. How long we keep your data
| Data | How long we keep it |
|---|---|
| Your account | Until you ask us to delete it for good. When you delete it in the app, we close it and keep it |
| A deleted org | 7 days, so that an owner can restore it. Then we delete it with its files |
| Workflows in the trash | 30 days |
| Files in the library trash | Until the org is deleted |
| Runs and node runs | Until the org is deleted |
| Expired sign-in codes and ended sessions | 7 days |
| Audit log | 1 year. The records of admin actions on billing stay as long as the billing records |
| Product events | 13 months |
| Billing and usage records | As long as we need them for the books and the law |
| Backups | Up to 7 days |
When you delete your account, we close it. You are signed out, and your sessions, sign-in codes and API tokens stop. You leave the orgs that have other members, and those orgs keep their content. We delete each org, other than your personal org, that only you use. We keep your account and its personal org, so a sign-in with the same email opens your account again.
To delete your data for good, email legal@studiod8.com. We then delete your account data, your personal org, your memberships and your terms acceptance records. In the records that we must keep, such as the audit log and the billing records, we remove your user ID or keep it with no link to your email.
7. Security
- We use reasonable measures to protect your data.
- Data is encrypted in transit with TLS.
- Our file storage encrypts all files at rest. Your provider keys are encrypted before we store them.
- Access to the content of an org is limited to the people in that org, by their roles.
- No system is 100% secure. If a breach affects your data, we tell you as the law requires.
8. Your rights
- Access and correction. You can see and change your name and email in the account settings of the app.
- Deletion. You can delete your account in the app. This closes it. To delete your data for good, email legal@studiod8.com. Section 6 tells you what happens in each case.
- Export. An owner of an org can export its workflows and files from the app.
- Objection. You can unsubscribe from the newsletter with the link in each email, and you can change your cookie choice at any time with "Cookie settings" at the bottom of each page of the website.
- For any other request, email legal@studiod8.com. We may need to confirm your identity before we act. We answer within the time that the law gives.
Users in the European Union and the United Kingdom
- Legal bases. We process your data to perform our contract with you (the service and billing); for our legitimate interests (security, abuse prevention and product analytics); with your consent (website analytics and the newsletter); and to obey the law (financial records).
- Your rights. You can ask to access, correct, delete or export your data, to restrict its processing, or to object to it. When we rely on your consent, you can withdraw it at any time.
- Complaints. You can complain to the data protection authority of the place where you live or work.
Users in California
- You can ask to know the data that we collect about you, and to delete or correct it.
- We do not sell your personal information or share it for cross-context behavioral advertising.
- You can use an authorized agent to make a request. We may ask the agent for proof of your permission.
- We do not treat you differently because you use these rights.
Global Privacy Control and Do Not Track
- We honor the Global Privacy Control signal of your browser as an opt-out of analytics.
- Browsers have no common standard for "Do Not Track" signals, so we do not change our behavior when we receive one. We do not track you across other websites, and analytics runs only after you give consent.
- The docs and the app use the same analytics as the website, with the same consent rules.
9. Age
The service is for people who are 18 or older. We do not knowingly collect data from children. If you think that a child gave us data, contact us and we will delete it.
10. Processing in the United States
We and our providers process data in the United States and in other countries where our providers work. When we transfer data from the European Union or the United Kingdom, we use the safeguards that the law requires.
11. Changes to this policy
When we make a material change, we publish the new policy with a new "Last updated" date, and the app asks you to accept it at your next visit. Other changes take effect when we publish them.
12. Contact
Send questions and requests about your privacy to legal@studiod8.com.