Last updated: 02.11.2026 · עברית
1. In short
- We keep only what we need to build a visualization, share it and bill for it: your workshop's details, the order files, and the Client details you enter (name and phone number).
- We do not sell data, show ads, or use tracking cookies or analytics tools.
- We never contact your Clients and never use their phone numbers for marketing.
- Sketches are read by AI (Anthropic's Claude) only to extract dimensions. The provider does not use this data to train models.
- A project is active for 60 days and is then archived. You can delete a project or your whole account at any time.
2. Who is responsible for your data
LYNDEN 3D is operated by LYNDEN STUDIO, an Israeli licensed business no. 040142887 ("we", "us"). We play two different roles:
- Workshop and account data (email, business name, purchases, usage): we are the controller.
- Data about the workshop's Clients (name, phone, dates, requests, views and approvals): the workshop collects it and decides what to enter and whom to send it to. The workshop is the controller, and we hold and process this data on its behalf and on its instructions, to provide the Service — we are its processor. The processing terms are in section 5 of the Terms of Use.
This policy is written to meet the Israeli Privacy Protection Law 1981, including Amendment 13 (in force since August 2025), the Privacy Protection (Data Security) Regulations 2017, and, for users in the European Union and the European Economic Area (EEA), the EU General Data Protection Regulation (GDPR).
3. What data we keep
| About | What | Source |
|---|---|---|
| The workshop | Email address; with Google sign-in, also the name and profile picture Google provides; business name, page address, tagline, logo, phone; invited team members and their roles. No passwords. | The Carpenter; Google, for Google sign-in |
| The order | Sketches, photos, PDF files and samples (colour, door, handle); notes; the visualization's dimension spec; WhatsApp preview image; measuring and installation dates; upgrade offers; generated mood images | The Carpenter; mood images also the Client |
| The workshop's Client | Name and phone number entered by the Carpenter (the phone is required for paid projects); upgrade and dimension requests sent by the Client (with a note, if written); "I want this" clicks | The Carpenter; the Client |
| Link views | When the link was opened and the device type (phone/computer); AR view opened and for how long — no IP address and no cookies. Shown to the Carpenter only | Automatic, when the link is opened |
| Approval | The name the Client typed, date and time, the visualization as approved, IP address and browser type | The Client, on approval |
| Room photo (optional) | A photo of the room, if uploaded for a mood image (downscaled, with location data removed) | The Carpenter or the Client |
| Cutting and stock | The workshop's materials and prices, boards and offcuts in stock, approved cutting plans | The Carpenter |
| Purchases and balance | Pack, amount, payment method (card / Bit), status, PayPlus transaction reference, project balance and projects used. Card details never reach us | The Carpenter; PayPlus; morning |
| Free trial | Your email address in normalized form, so the trial is given once per address | The system |
| Usage | When a visualization or image was created, success or error, and processing cost | The system |
| Testimonial (optional) | The quote, your name or username, and your workshop and city, if you agreed that we show them on the site; and the date you agreed. You can ask us to remove it at any time | The person giving it, with their consent |
| Technical | IP address, browser type and time — in the server logs of our infrastructure providers, for security and troubleshooting | Automatic |
4. Why we use data, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account and signing you in; reading sketches, building and editing visualizations; showing the Client the visualization, dates and upgrades through the link; passing requests and approvals to you | Performance of our contract with you (Art. 6(1)(b)); for Client data, on the instructions of the workshop as controller |
| Billing, balances, invoices and bookkeeping | Contract; legal obligation (Art. 6(1)(c)) for records we must keep |
| Tying a project to one Client (masked phone, up to 2 projects per number in 45 days), preventing free-trial abuse, spending caps and security | Legitimate interests (Art. 6(1)(f)): preventing misuse and protecting the Service |
| Service messages to the Carpenter: sign-in codes, Client opened the link, requests, purchases, changes to the terms | Contract |
| Operation, troubleshooting and improving sketch-reading accuracy (see section 5) | Legitimate interests |
We do not send marketing email without consent. We make no automated decisions with legal or similarly significant effects on anyone; AI only reads sketches and creates mood images.
5. Artificial intelligence
Sketch reading. Order files and notes are sent to Anthropic's Claude service only to read dimensions and structure from them. The Client's name and phone number are not sent. The 3D visualization is then built by geometric calculation from the dimensions, without image generation. Under Anthropic's commercial terms, data sent this way is not used to train models and is kept by Anthropic only for a limited period under its own policy.
Improving the reader. When a sketch reading fails or is wrong, Service administrators may flag it and use it to test and improve the accuracy of our own sketch reading. This happens on our side only and is not used to train any provider's models.
Mood images ("realistic render", optional). Creating a mood image sends Google's Gemini service a capture of the visualization and, if chosen, a photo of the room. Google creates a mood image from them, labelled as a mood illustration; the binding dimensions are those in the 3D model. Room photos are downscaled on the device and stripped of location data before sending. We keep room photos for up to 90 days, after which they are deleted; the project's Carpenter can see them. We use Google's paid service, whose terms say it does not train models on this data.
"See it in your home" (AR, optional). The piece is shown in the room through the camera. The camera feed stays on the phone: no photo or video is sent to us. On iPhone the view is built on the device. On Android it opens inside the browser first; if Google's Scene Viewer is used as the alternative, we store a 3D file of the furniture only (no Client details) so that Scene Viewer can open it. That file is deleted automatically after at most 60 days, or when the order is deleted.
6. Providers that process data for us (sub-processors)
| Provider | What it receives and why | Location |
|---|---|---|
| Supabase | All Service data: database, files and account sign-in | Ireland (EU) |
| Cloudflare | Serving the site and links; visitors' IP address and browser type in server logs | Global network |
| Anthropic | Order files and notes, to read sketches (Claude) | United States |
| Visualization capture and room photo, to create mood images (Gemini); and account verification for Google sign-in | United States | |
| Resend | The Carpenter's email address and message content: sign-in codes and service messages | United States |
| PayPlus | Purchase details; card details are entered by the Carpenter directly with PayPlus | Israel |
| morning (Green Invoice) | Workshop name, email, pack and amount, to issue the tax invoice/receipt and email it | Israel |
We do not disclose data to anyone else unless the law requires it, or to protect our rights and the Service's users.
7. International transfers
Some providers are outside Israel. Transfers to them follow the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations 2001, under agreements that require them to protect the data and use it only to provide their service to us.
For users in the EU/EEA: Israel benefits from a European Commission adequacy decision, and our database is hosted in the EU. Transfers to providers in the United States rely on the EU-US Data Privacy Framework for providers certified under it, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
8. Security
- Traffic is encrypted (HTTPS). Each workshop sees only its own orders — this is enforced in the database itself.
- Original files (sketches, samples) are not accessible to Clients; the Client sees only the visualization and what the Carpenter chose to show. The Client's phone number appears on the visualization masked only (last 4 digits).
- The Client link contains a random identifier. Anyone who has the link can view the order, so send it only to the Client.
- There are no passwords to steal: sign-in is with Google or a one-time email code, and is remembered on a device for 7 days only.
- Service administrators (2 people) can access data only for operation, support and security.
- We follow the Israeli Privacy Protection (Data Security) Regulations 2017. If a serious security incident occurs, we will report it to the Privacy Protection Authority as the law requires and notify workshops whose data, or whose Clients' data, was affected.
9. Retention and deletion
- Active project: 60 days from activation. It is then archived: the Client link stops working and the Carpenter sees only a summary.
- Archived project: kept (not shown) until the Carpenter deletes it, the account is closed, or on request — so it can be restored if the Client comes back.
- Deleting a project deletes the order, its files, the Client details and the link. Copies in automatic backups are deleted within 7 days.
- Approval records are kept while the order exists (even if the visualization was reopened) and are deleted with it.
- Room photos are deleted after at most 90 days; Android AR files after at most 60 days.
- Usage and purchase records (when a visualization was created, at what cost, what was bought) are kept after an order is deleted, without files or Client details, for accounting and for the period required for tax records.
- The normalized address that prevents repeat free trials is kept after an account is closed, for that purpose only.
- Deletion on request: you can ask us to delete a project, your account or all its data by emailing us from your account address. We will verify that the request comes from the account owner, delete within 30 days except where the law requires us to keep data, and confirm by email when it is done.
10. Your rights
Under Israeli law you may ask to see the data we hold about you, and ask us to correct or delete data that is inaccurate, incomplete, unclear or out of date.
Under the GDPR (if you are in the EU/EEA) you also have the right to: access a copy of your data; rectify it; erase it; restrict processing; receive the data you provided in a common format and transfer it (portability); object to processing based on legitimate interests; and withdraw any consent you gave, without affecting earlier processing.
Carpenters can do most of this themselves in the Service, or contact us. We reply within 30 days (one month under the GDPR). A workshop's Client should first contact the workshop, which controls their data; if a Client contacts us, we will forward the request to the workshop and help it respond.
Complaints: you can complain to the Israeli Privacy Protection Authority (Ministry of Justice, gov.il). If you are in the EU/EEA you can also complain to the data protection supervisory authority in the country where you live or work. We would appreciate the chance to resolve the matter with you first.
11. Cookies and browser storage
The Service uses no tracking cookies, analytics or advertising. Only what the Service needs to work is stored in your browser (in localStorage, on your device only):
- For the Carpenter: the sign-in (7 days) and the selected workshop.
- For anyone: the language and colour theme (light/dark), if chosen.
- For the Client: notes started for an upgrade request, so they are not lost.
This data is not sent to third parties, and you can clear it in your browser settings.
12. Children
The Service is for businesses and people aged 18 or over.
13. Changes to this policy
We will update this policy when the Service changes, and notify Carpenters of material changes by email or when they sign in. The date at the top shows the latest update.
14. Privacy contact
LYNDEN STUDIO · Licensed business no. 040142887 · Israel · 3d@lynden.studio · +972-50-456-3200
For privacy requests, please write "Privacy" in the subject line and send from your account email address.
If the Hebrew and English versions of this policy conflict, the Hebrew version prevails.
Terms of Use · Accessibility Statement · מדיניות פרטיות (עברית)