Privacy Policy
Last updated: October 31, 2026 · Version 1.0
- We only collect what is needed for your account, downloads, payments and website security.
- We do not sell your data and do not use advertising or analytics cookies.
- Payments are handled by Stripe, emails are sent by Brevo and the website is hosted by Hostinger.
- You can access, correct, export or delete your data by writing to guto@stlzilla.com.
This is a translation of the Portuguese version. If there is any conflict, the Portuguese version prevails, except where the mandatory law of your country requires otherwise.
1. Controller and data protection officer
The controller of personal data processed on STLzilla is Gustavo Zenedin Cruz, a Brazilian sole proprietorship registered under CNPJ 41.116.858/0001-01, based in R. Pres. Carlos Cavalcanti, 970 – São Francisco, Curitiba, PR 80510-040, Brazil. The data protection officer is Gustavo Zenedin Cruz, contact: guto@stlzilla.com.
This policy follows Brazil’s General Data Protection Law (Law 13,709/2018 – LGPD), the Brazilian Internet Civil Framework (Law 12,965/2014) and, for users in the European Economic Area and the United Kingdom, the General Data Protection Regulation (GDPR).
2. Data we process
| Category | Data | Purpose | Legal basis |
|---|---|---|---|
| Account | Name, email, password (stored only as an irreversible hash), email confirmation | Create and maintain your account | Performance of contract |
| Sign in with Google | Google account identifier, name and email | Let you sign in without a password | Performance of contract |
| Identification (Brazil) | Country and, when requested, CPF | Prevent duplicate accounts and fraud, issue tax documents | Legal obligation and legitimate interest |
| Purchases | Plan, pack, amount, currency, payment status, Stripe identifiers. Card details stay with Stripe. | Billing, credits, invoices and support | Performance of contract and legal obligation |
| Service use | Customized models, chosen parameters, downloads, file version, license type, credit history | Deliver files, allow re-downloads, prove your license | Performance of contract |
| Uploaded content | Text and images uploaded to customize models | Generate the requested file | Performance of contract |
| Support | Messages, contact email, error reports | Answer and fix issues | Performance of contract and legitimate interest |
| Security | IP address (stored in reduced form for abuse limits), access date and time, browser, login records | Protect accounts, prevent fraud, comply with Brazilian law | Legal obligation and legitimate interest |
We do not process sensitive data and do not make automated decisions with legal effects on you.
3. Who we share data with
We do not sell or rent personal data. We only share it with providers that help us run the service, under contract and as needed:
- Hostinger – website hosting, database and email;
- Brevo – transactional emails (confirmation, password reset, receipts);
- Google – Sign in with Google, only if you choose it;
- Stripe – payment and subscription processing;
- a cloud storage provider for files, when adopted;
- public authorities, when required by law or court order.
4. International transfers
Some providers may process data outside Brazil (for example, in the European Union or the United States). These transfers follow article 33 of the LGPD and, where applicable, the GDPR, using contractual clauses and safeguards offered by those providers.
5. Retention
- Account data: while the account is active.
- Access logs: 6 months, as required by Brazilian law.
- Purchase and tax records: 5 years, or the period required by tax law.
- License history: as long as needed to prove the license of parts you sold.
After these periods, data is deleted or anonymized.
6. Your rights
You may ask us to confirm whether we process your data, access it, correct it, delete or anonymize it, receive a portable copy, learn who we share it with, object to processing based on legitimate interest, withdraw consent where consent is the basis, and close your account.
Send your request to guto@stlzilla.com from your account email. We reply within 15 days. You may also complain to Brazil’s data protection authority (ANPD) or, in the EEA/UK, to your local supervisory authority. California residents: we do not sell or share personal information for cross-context behavioral advertising.
7. Security
We use encrypted connections (HTTPS), irreversibly hashed passwords, two-factor authentication for staff, rate limits against abuse and private storage for files. No system is completely secure; if an incident may create relevant risk, we will notify those affected and the authorities as required by law.
8. Cookies and local storage
We only use cookies and local storage needed for the website to work. See the Cookie Policy.
9. Children
STLzilla is not intended for anyone under 18 and does not knowingly collect data from minors. Accounts identified as belonging to minors will be closed.
10. Changes
We may update this policy. The version and date are shown at the top of the page, and material changes will be announced by email or on the website.