Privacy Policy | Aladdin Model

Last Updated: October 23, 2026

Aladdin Model ("we," "us," or "our") operates aladdinmodel.com (the "Service"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, use our marketplace, or interact with our secure cloud-based remote desktop slicing infrastructure.

To ensure compliance with global data standards, this policy is designed to satisfy the General Data Protection Regulation (GDPR) for European users, the California Consumer Privacy Act (CCPA/CPRA) for United States users, and the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong.

1. INFORMATION WE COLLECT

We collect data to provide a seamless marketplace experience and to safeguard the intellectual property of our designers.

A. Information You Voluntarily Provide:

Account Credentials: Name, username, email address, password, and profile preferences when you register as a Buyer or Seller.
Seller Verification Data: For 3D Designers wishing to sell assets (particularly those subject to the EU Digital Services Act), we collect verified identity details, payout details (such as PayPal or bank accounts), and business registration numbers.
Customer Support: Any information or screenshots you send us when contacting contact@aladdinmodel.com.

B. Infrastructure & Security Data (Targeted Remote Session Monitoring):

Targeted Remote Slicer Recordings: Our platform utilizes a secure remote desktop architecture. We do not engage in mass recording. However, we reserve the right to selectively log, screenshot, or record video feeds of specific remote slicing desktop sessions.
Security Triggers: These session recordings are triggered selectively by automated fraud-detection systems, high-risk account behaviors, or anti-piracy protection audits.
Collected Session Data: This include mouse movements, key inputs within the remote environment, and software interaction logs to identify unauthorized attempts to extract raw 3D mesh files (STLs).

C. Automatically Collected Technical Data:

Log Files & Device Info: IP addresses, browser types, internet service providers (ISPs), operating systems, device types, and timestamps.
Cookies and Tracking: We use standard tracking cookies to manage user login states, store active marketplace sessions, and analyze platform performance.

2. HOW WE USE YOUR INFORMATION

We use the collected information for the following primary purposes:

Fulfilling Service Delivery: Granting you access to your remote desktop slicing interface and delivering your compiled sliced files (G-code, CTB, etc.).
Intellectual Property Protection: Utilizing targeted session logs and recordings to detect, audit, and legally document any prohibited attempts to extract raw STL files.
Marketplace Operations: Processing seller payouts, calculating our 10% take rate, and handling customer support claims.
Legal and Regulatory Compliance: Calculating regional VAT at checkout for EU consumers, verifying commercial "Traders" under the EU Digital Services Act (DSA), and fulfilling reporting mandates in Hong Kong.

3. LEGAL BASIS FOR PROCESSING (FOR EU/UK USERS)

Under the GDPR, we process your personal data under the following lawful bases:

Performance of a Contract: Processing is necessary to deliver the marketplace transaction and remote slicing functionality you purchased.
Legitimate Interests: Processing targeted session recordings is necessary to protect our proprietary infrastructure and our designers’ intellectual property from digital piracy and theft.
Legal Obligation: Processing tax data, verifying traders, and complying with anti-money laundering frameworks.

4. DATA RETENTION & SECURITY

Session Recording Retention: To maintain a minimal data footprint, any video or graphic logs generated during a targeted remote slicing audit are automatically deleted within ninety (90) days, unless they are flagged as forensic evidence of a Terms of Service violation. Flagged records are preserved as long as necessary for active legal proceedings or enforcement actions.
Account Data Retention: We retain standard account profile metadata for as long as your account remains active.
Security Practices: We employ transport layer security (TLS) encryption, isolated cloud multi-tenancy for our remote desktops, and restrictive database controls to secure your raw profile data and machine codes.

5. SHARING AND DISCLOSURE OF DATA

We do not sell, rent, or trade your personal data. Your information is shared only under the following specific frameworks:

Third-Party Service Providers: We share necessary data with hosting environments, payment processors (e.g., Stripe, PayPal), and core infrastructure tools strictly to execute the Service.
Legal Requirements: We may disclose your information to law enforcement or judicial bodies if required by a subpoena, court order, or statutory audit under Hong Kong, US, or EU jurisdictions.
Protection of Rights: If forensic logs confirm a user attempted to extract or steal raw STL files, we reserve the right to share the user’s account metadata and forensic recordings with the affected 3D designer and legal counsel for intellectual property enforcement.

6. YOUR GLOBAL PRIVACY RIGHTS

If you reside in the European Union (GDPR) or United States (CCPA/State Laws):

Depending on your jurisdiction, you hold specific statutory rights regarding your personal information, subject to local exceptions:

Right to Access / Know: You may request a breakdown of the personal data we store about you.
Right to Rectification: You can modify inaccurate or incomplete registration info directly from your profile.
Right to Erasure / Deletion: You may request that we delete your personal data. Please note that data required for ongoing security audits, anti-piracy enforcement, or historical legal transactions cannot be immediately deleted.
Right to Object / Restrict Processing: You have the right to object to specific processing frameworks based on legitimate interests.

To exercise any of these rights, contact our privacy coordinator at contact@aladdinmodel.com. We will evaluate and respond to your request within the legally mandated time frames.

7. CHILDREN'S PRIVACY

Aladdin Model does not knowingly collect or maintain personal data from individuals under the age of 13. If we discover that an account has been created by a child under 13, it will be deleted immediately in accordance with COPPA guidelines.

8. AMENDMENTS TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy at any time. When modifications are published, the "Last Updated" timestamp at the top of this document will be adjusted. Your continued use of the platform after updates indicates your acknowledgment of the amended policy.

9. CONTACT INFORMATION

For questions regarding data processing, targeted session monitoring, or to exercise your privacy rights, please contact us at:
Email: contact@aladdinmodel.com