Back to Home
Data Protection & Privacy Notice

Privacy Policy

Effective Date: September 6, 2026 • Version 2.4-GDPR/CPRA

Our Privacy Commitment

Oi-RAC Studio prioritizes local, edge-first computing. We process 3D meshes and video landmark kinematics directly in your browser using client-side WebAssembly. We never sell your personal data or train public foundation models on your proprietary 2D character artwork.

1. Information We Collect

We collect minimal personal and technical information necessary to deliver our browser-based 3D modeling and export services:

  • Account & Creator Identity: Optional email address, Roblox username, or public Roblox User ID provided for asset publishing and project collaboration.
  • Client-Side Media & Concepts: 2D concept sketches and video clips uploaded into the Video Animation Importer are processed in volatile memory and cached transiently in your browser session.
  • Technical & Telemetry Data: Browser WebGL capabilities, frame rate metrics (60 FPS vs 30 FPS), error logs, and operating environment parameters used strictly for performance optimization.
  • Payment & Transaction Data: When you purchase a subscription, all financial details (credit card numbers, billing addresses, tax identifiers) are collected and processed directly by our Merchant of Record, Paddle.com. We do not store full credit card numbers on Oi-RAC servers.

2. How We Use Your Information

We use collected data solely for the following purposes:

  • To synthesize and render 3D R15 avatar geometry, UV textures, and Layered Clothing cages.
  • To synchronize multi-user collaborative editing sessions across active room instances.
  • To deliver Roblox Open Cloud asset uploads to your designated Roblox inventory.
  • To verify subscription status and provide customer service assistance.
  • To prevent fraudulent mesh scraping and enforce our anti-counterfeiting protections.

3. Cookies & Local Browser Storage

Oi-RAC Studio utilizes modern browser local storage (localStorage and sessionStorage) to maintain creator UI preferences (such as panel collapse states, active PBR presets, and dynamic cloth parameters).

We do not employ third-party behavioral advertising trackers. Essential functional cookies are used strictly to maintain secure user sessions and manage checkout workflows through Paddle.

4. Global Privacy Rights (GDPR & CPRA)

Regardless of your geographical location, we respect comprehensive data privacy rights in compliance with the European General Data Protection Regulation (GDPR) and the California Privacy Rights Act (CPRA):

  • Right of Access: You may request a copy of all personal data held about you.
  • Right to Rectification: You may update or correct inaccurate profile details.
  • Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your account and associated project telemetry.
  • Right to Data Portability: You may export all generated 3D models, textures, and Luau code packages at any time.

To exercise any of these rights, email privacy@oirac.studio with your creator identifier.

5. Data Security & Cloud Infrastructure

Generated UGC export bundles and mesh files are delivered through enterprise-grade Cloudflare R2 object storage with end-to-end TLS 1.3 encryption. Internal communications use Level-3 HMAC authentication tokens to safeguard asset pipelines from unauthorized tampering.

6. Third-Party Service Providers

We collaborate with trusted infrastructure partners to operate our platform:

  • Paddle.com Market Limited: Reseller and Merchant of Record managing global checkout, VAT calculation, and payments.
  • Roblox Corporation: Destination platform for Open Cloud UGC uploads (subject to Roblox Privacy Policy).
  • Cloudflare Inc.: Global CDN and edge security network.