Privacy Policy

1. Who We Are

Manticore Paint Studio is a miniature-painting planning workspace that helps users manage painting projects, reference images, paint inventories, color tools, mood boards, STL lighting studies, notes, and related creative planning materials.

For this policy, "Manticore Paint Studio," "we," "us," and "our" refer to the operator of the Manticore Paint Studio website and application. The final legal name, business address, and jurisdiction should be inserted before public launch.

2. Information We Collect

Account information

We may collect usernames, display names, email addresses, password hashes, account role, account tier, account status, storage quota, account creation date, and last login date.

User content

We store content users choose to upload or create in the Studio, including project data, photos, reference images, STL files, renders, mood boards, saved tool sessions, paint selections, palette information, color notes, project notes, action items, tags, labels, and other project metadata.

Technical and usage information

We may collect technical information such as IP address, browser or device information, login time, server logs, admin audit logs, file size, storage use, error logs, and security-related events.

Payment information

Subscriptions and payment processing are not active yet. If payments are added, payment card details should be handled by a third-party payment processor such as Stripe. We should not store full payment card numbers on our servers.

3. How We Use Information

We use information to provide, secure, maintain, and improve Manticore Paint Studio. This includes authenticating accounts, saving user projects, serving user files through authenticated file delivery, enforcing storage limits, troubleshooting bugs, responding to support requests, maintaining backups, preventing abuse, and preparing future subscription features.

4. User Files And Storage

Each account has isolated server storage. Uploaded files are not intended to be public and are served through an authenticated endpoint that checks whether the signed-in account is allowed to access the requested file.

Users are responsible for the images, STL files, references, and other materials they upload. Users should keep their own copies of important files. Backups are maintained for operational recovery, but backups are not a substitute for a user's own archive.

5. Cookies And Sessions

We use session cookies to keep users signed in and to protect private application pages. The application may also use browser storage to support app functionality, preferences, and local working state.

6. How We Share Information

We do not sell user content. We may share limited information with service providers that help operate the site, such as hosting, infrastructure, security, analytics, email, payment processing, backup, or support providers. These providers should only use the information as needed to provide services to us.

We may disclose information if required by law, legal process, security investigation, protection of rights, or to prevent harm, fraud, abuse, or misuse of the service.

7. Admin Access

Administrators can manage users, reset passwords, change tiers, disable accounts, export user data, delete user data, view storage use, and temporarily view the Studio as a user for troubleshooting. Admin view-as-user actions are logged.

Administrative access should be limited to trusted operators and used only for support, security, maintenance, or user-requested account work.

8. Security

We use reasonable technical and organizational safeguards for the private beta, including password hashing, authenticated file delivery, account-level storage separation, admin access controls, and backups. No internet service can guarantee perfect security.

9. Retention

We keep account information and user content while an account is active or as needed to provide the service. We may retain backup copies for a limited period after deletion. We may retain logs, security records, billing records, and admin audit records where reasonably necessary for security, legal, accounting, or operational purposes.

10. User Choices And Requests

Users may request account help, password assistance, data export, correction, or deletion by contacting support. We may need to verify the request before acting on it.

Deletion requests may include projects, project photos, STL files, references, boards, saved tool work, owned paint selections, notes, and account records, subject to backup retention and legal or operational requirements.

11. U.S. State Privacy Rights

Depending on where a user lives and whether the service meets legal thresholds, state privacy laws may provide rights to know, access, correct, delete, opt out of certain sharing or targeted advertising, and avoid discrimination for exercising privacy rights.

We do not currently sell personal information. If advertising, analytics, or payment tools are added later, this section should be reviewed and updated before public launch.

12. Children

Manticore Paint Studio is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will take reasonable steps to delete it.

13. International Users

The service is currently operated from the United States. Users outside the United States should understand that their information may be processed and stored in the United States or other locations where service providers operate.

14. Changes To This Policy

We may update this Privacy Policy as the service changes. The updated version will be posted on this page with a new effective date. Material changes may be announced through the site or account interface when appropriate.

15. Contact

For privacy questions, support requests, data export requests, or deletion requests, contact Support.