Privacy Policy
Effective October 28, 2026
The privacy policy from October 20, 2026 applies before that date.
This policy explains what The Voxel Machine collects, why, who else sees it, and how long we keep it. "We" means Lily Living LLC, 1721 N 1200 E, Lehi, UT 84043, USA. Questions go to [email protected].
The short version
- We collect your email address, what you make, and a few technical details we need to run the service and stop abuse.
- We don't sell your information and we don't show ads.
- Your prompts, and any pictures you upload, go to the company that runs our image and 3D models, so it can make your model.
- We only use your work to train our models if you turn on "Help improve the model." It's off unless you turn it on.
- You can download a copy of your data or delete your account at any time from the Account page.
What we collect
Your account. Your email address, when you made the account, and when you last signed in.
What you make. Your prompts and settings, pictures you upload, the concept images, the 3D models and files we make for you, your projects, and the history of your generations.
Pictures you upload. Picture uploads aren't open yet. When they are, we make a clean copy of each picture with its hidden details removed, like the camera, the time, and the place it was taken. Only the clean copy is stored or sent anywhere.
API keys. Each key's name, mode, the first few characters, and when it was last used. We never store the key itself, only a one-way hash of it.
Early access answers. If you join the early access list: what you want (paid plans, the API), your role, your engine, and anything you tell us about how you'd use it.
Blocked prompts. If our filter blocks a prompt, we keep the prompt and the rule it hit, so we can check the filter and spot abuse.
Suspensions. If we suspend an account for breaking our terms, we keep the reason and a one-way hash of its email address, so the address can't start a new account.
Content we remove. If we remove a generation after a report, we keep its id, the reason, and a hash of the picture it was made from, if any, so the picture can't be uploaded again. We email you when we remove something of yours.
Training data, only if you opt in. If you turn on "Help improve the model" for a project, we save what you do with its generations (downloads, which concept you pick, and size or color changes). We may also use that project's prompts and models to train future versions. See "Training" below.
Usage counts. When each generation's first model file is downloaded, with no prompt or file attached. We use this to measure whether the product is useful. It's never training data.
Cards for free Drafts. Free Drafts need a card. We don't charge it. Stripe handles the card, and we never see or store the card number. We get a fingerprint (an id Stripe gives that card), whether it's credit, debit, or prepaid, and how many free Drafts it used. Stripe's card form also collects details about your device and browser, to spot fraud. It only loads on the page where you add a card.
Payments. When you buy credits, Stripe takes the payment on its own page. We get which pack you bought, the price, the tax, the total, Stripe's ids for the payment, and any refund or dispute later. We never see your card number. We keep a history of the credits you buy and use.
Technical details.
- Your IP address. For rate limits and sign-up limits we store only a keyed hash of it, not the address itself. Our server logs do keep the plain address for a short time.
- Cloudflare's bot check looks at your IP address and some details about your browser.
Cookies. We use two, and both are needed to sign in:
tvm_sessionkeeps you signed in, for up to 30 days.tvm_csrfprotects your account from forged requests, for up to 30 days.
We don't use advertising or analytics cookies.
How we use it
- To run the service: sign you in, make your models, and show you your history.
- To send you email: sign-in links and notices about your account. We don't send marketing email.
- To prevent abuse and fraud: limits on free Drafts, sign-ups, and card attempts, and the content filter.
- To keep costs in check, so free Drafts stay possible.
- To understand how the product is used, from counts and totals.
- To train our models, only for projects where you turned that on.
Training
"Help improve the model" is off for every project unless you turn it on. When it's on, we may use that project's prompts, models, and what you do with them (downloads, picks, size and color changes) to train future versions of our models. Pictures you upload are never used for training, even when it's on.
You can turn it off at any time. When you do, we delete the saved downloads, picks, and changes for that project, and we leave the project out of future training data. Models that were already trained aren't changed.
Who else sees your information
We share information only with companies that help us run the service, and only what each one needs:
| Company | What it does | What it gets |
|---|---|---|
| fal.ai | Runs the models that make concept images and 3D shapes | Your prompt and the concept image the 3D shape is made from, or the picture you upload |
| Cloudflare | Protects the site and runs the bot check | All traffic to the site, including your IP address and browser details |
| Resend | Sends our emails | Your email address and the email we send |
| Contabo | Hosts our server, database, and files in the central USA | Everything stored on our server |
| Cloudflare (R2) | Stores our backups in western North America | Copies of our database and files, encrypted before they leave our server |
| Stripe | Checks cards for free Drafts, and takes payments for credits | Your card details, which we never see, details about your device and browser from its forms, your account's id, and when you buy credits, your email address and the billing address it needs for sales tax |
| Google (the Gemini API) | Checks prompts, uploaded pictures, and concept images against our content rules | Your prompt or picture. We use Google's paid service, and its terms say Google doesn't use these to improve its products. It keeps them for a limited time to catch abuse. |
We don't sell your information or share it for advertising.
We may also share information if the law requires it, to protect people's safety, or to protect our rights. If the company is sold or merged, your information would go to the new owner under this policy.
How long we keep it
| What | How long |
|---|---|
| Your account, projects, generations, files, API keys, early access answers, and blocked prompts | Until you delete your account |
| Pictures you upload | A day, unless you make a generation from one. That generation keeps its own copy until you delete your account |
| Saved downloads, picks, and changes for training | Until you turn off "Help improve the model" or delete your account |
| Sign-in links | 30 days |
| Sessions | One day after they end or you sign out |
| Copies of API responses, so a retried request isn't run twice | 24 hours |
| Rate limit counters | About a day after last use |
| Sign-up and card attempt counters (hashed IP addresses) | 7 days |
| A suspended address (a one-way hash) and the reason | Until the suspension ends, even after the account is deleted |
| A record of content we removed (its ids, a hash of the picture it came from, and the reason) | Kept, so the same picture can't be uploaded again |
| Card fingerprint and free Draft usage | After you delete your account too, so a new account can't reset free Drafts |
| Credit history and payment records | After you delete your account too, as long as tax and accounting rules need them |
| Backups (encrypted copies of the database and files) | 14 days |
| Server logs with IP addresses | Until newer logs replace them. We keep a fixed amount for each part of our system, so how long depends on traffic |
Deleting your account
Go to the Account page, type your email address, and press "Delete my account." This deletes your account, generations and their files, uploaded pictures, projects, API keys, sessions, early access answers, blocked prompts, and training data, and we email you to confirm. You can also email [email protected] to ask us to do it.
A few things stay after a deletion, as the table above says: the card fingerprint and its free Draft usage, your credit history and payment records, a suspension if the account had one, short-lived counters, backups until they rotate out, and server logs until they're overwritten.
Unused credits are lost when you delete your account.
Your rights
You can:
- see your generations and download your files in the app
- download a copy of the information we have about you, from the Account page
- ask us to fix information that's wrong
- delete your account
- turn training on or off for each project
Depending on where you live, you may have more rights, like objecting to how we use your information or complaining to a data protection authority. To use any of these rights, email [email protected]. We'll answer within 30 days.
Where your information is stored
Our server is in the central USA, and our backups are in western North America. Some of the companies above are in the United States and may process your information there.
Security
We store API keys, sign-in links, and sessions only as one-way hashes. All traffic uses HTTPS. Each part of our system gets only the secrets it needs. No system is perfectly secure, so we can't promise nothing will ever go wrong. If a breach affects you, we'll tell you as the law requires.
Children
The Voxel Machine isn't for children under 13. We don't knowingly collect information from them. If you think a child has made an account, email [email protected] and we'll delete it.
Changes
If we change this policy in a way that matters, we'll email you or show a notice in the app before the change takes effect. The date at the top shows the latest version.
Contact
Write to Lily Living LLC, 1721 N 1200 E, Lehi, UT 84043, USA, or email [email protected].