Privacy policy

Draft for review. This text is a working draft, not yet approved and not legal advice. Items in [brackets] still need the seller's details. Last updated 2026-11-07.

This policy explains what personal data R2M and this website (getr2m.vercel.app) collect, why, and what you can do about it. The controller is [legal entity name], [registered address]. Contact: [contact email, to be added].

What we collect

Account

Your email address, and if you give them, your name and company. Used to sign you in (by email link or code), to link your licences to you and to send service emails about your account. We do not send marketing emails without your consent.

Licences and machines

When R2M activates or checks a licence it sends: your account, a machine identifier (a one-way hash, not your hardware serial numbers), the machine name, the 3ds Max and R2M versions and the time of the check. Used to enforce seats, to show you and us which machines use a licence and to provide support.

Payments

Paddle.com processes payments as merchant of record and is the controller for payment data (card details, billing address, tax data). We receive from Paddle what we need to issue the licence: your email, country, the plan, amounts, invoice and subscription identifiers. See Paddle's privacy policy.

Your files

R2M reads and converts your .3dm files on your own computer. Your files are never uploaded to us.

This website

  • No analytics or advertising cookies. The account page keeps your sign-in session in your browser's local storage.
  • Hosting by Vercel, which processes your IP address and request data in server logs for security and delivery.
  • Fonts are loaded from Google Fonts, and the latest version number is read from GitHub. Your browser sends your IP address to these services when it loads them.
  • Paddle's checkout runs only when you open it.

Processors

  • Supabase (database, sign-in, licence service), hosted in the EU (Frankfurt, Germany).
  • Vercel (website hosting).
  • Paddle.com (payments, as merchant of record).
  • [Email delivery provider] (sign-in emails).
  • GitHub (download of the installer and updates).

Legal bases

Performance of our contract with you (account, licences, sign-in emails), our legitimate interest in preventing licence abuse and keeping the service secure (machine data, logs), and legal obligations (tax records held by Paddle and us).

How long we keep data

Account and licence data: as long as you have an account, then up to 12 months. Payment and tax records: as long as the law requires (typically up to 10 years). Server logs: a few weeks.

Your rights

You can ask for a copy of your data, its correction, deletion, restriction or export, and object to processing based on legitimate interest. Write to [contact email, to be added]. You can also complain to your data protection authority.

Changes

We will post changes here and, if they are significant, tell account holders by email.