Privacy Policy
Privacy Policy
Last updated: October 4, 2026
1. Controller
The controller of your personal data is Kohls RCM Paweł Kohls, ul. Lechicka 59, 61-695 Poznań, Poland, VAT ID PL5542524133, operator of moxie3d.com. Contact for any privacy matter: [email protected].
2. What we process and why
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Account, generating and storing your Files, credits, purchases and the Commercial License | email, username, name (optional), password hash or Google account ID, generation parameters, credit and purchase history | Art. 6(1)(b) - contract |
| Payments, invoices, tax and accounting records | name, billing address, country, tax ID (if given), amounts | Art. 6(1)(c) - legal obligation |
| Security: sign-in protection, bot protection (Cloudflare Turnstile), abuse and fraud prevention, service alerts | IP address, browser data, account ID and username, timestamps | Art. 6(1)(f) - legitimate interest |
| Complaints, support, establishing and defending claims | correspondence, order details | Art. 6(1)(f) - legitimate interest |
| Transactional emails (verification, file ready, receipts, license notices) | email address | Art. 6(1)(b) - contract |
| Newsletter | email address | Art. 6(1)(a) - consent, withdrawable at any time |
| Audience statistics without cookies (Umami, self-hosted) | aggregated page views, referrer, country, device type | Art. 6(1)(f) - legitimate interest |
| Google Analytics | online identifiers, usage data | Art. 6(1)(a) - consent given in the cookie banner |
Giving data is voluntary, but without an email address we cannot create an account, and without billing data we cannot accept a payment. We do not make decisions with legal effects based solely on automated processing.
3. Recipients
We share data only as needed to run the service, with providers acting as processors or, where the law requires, as independent controllers:
- Stripe Payments Europe Ltd (Ireland) - payments; card data goes directly to Stripe, we never see it;
- Contabo GmbH (Germany) - servers located in the EU;
- Cloudflare, Inc. - content delivery, security and Turnstile bot protection;
- Brevo SAS (France) - transactional email and newsletter;
- Google Ireland Ltd - sign-in with Google (if you use it) and Google Analytics (only with consent);
- Discord Inc. - internal service alerts that may contain your username and account number;
- tax and accounting authorities where the law requires it.
4. Transfers outside the EEA
Cloudflare, Google, Discord and, for some operations, Stripe may process data in the USA. Such transfers rely on the EU-US Data Privacy Framework adequacy decision or the European Commission's Standard Contractual Clauses. You may ask us for information about these safeguards.
5. Retention
- Account data: until you delete the account; generated Files and parameters are removed with it.
- Payment and accounting records: 5 years from the end of the calendar year in which the tax obligation arose (Polish tax law).
- Security logs: up to 12 months.
- Data processed on consent: until consent is withdrawn.
- Data needed for claims: until the claims are time-barred.
6. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time without affecting earlier processing. Write to [email protected]. You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
7. Cookies
See the Cookie Policy.
8. Changes
We will publish any change here and, if it is significant, notify account holders by email.