Privacy Policy for Tanarus

Last Updated: July 6, 2025

Tanarus ("we," "us," or "our") operates a website (the "Service") that provides access to free and paid 3D models. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service.

"Tanarus" is a trademark of Fermi Paradox Systems SRL, based in Barbaresco, Str. Terzolo 7, 12050 -- Italy.

1. Information We Collect

We collect the following types of information from users:

a. Information You Provide

Registration Data: When you create an account, we collect your username, email address, and password. Your email address must be verified to activate your account. Providing your real name is optional and can be added later.
User-Uploaded Content: If you upload 3D models as a creator, we store these models along with associated metadata (e.g., file name, size, file type) and link them to your user ID and email address.
Payment Information: For paid models, we collect your Pi Network wallet address and transaction details (e.g., transaction ID, amount) to process payments. We do not store sensitive financial details, such as your wallet balance.

b. Automatically Collected Information

Technical Data: We collect your IP address and browser type to validate user logins and ensure the security of the Service. IP addresses are stored temporarily for the duration of your session or as required for security purposes.
Usage Data: We track the number of downloads for each model and maintain a record of transactions (e.g., transaction ID and amount) to manage purchases and user libraries.
Not logged data: currently we DO NOT track information of logged-out users.

c. Information from Third Parties

Currently, we do not offer login through third-party services (e.g., Google). In the future, we plan to implement Google login, which may involve collecting data such as your email address or user ID from those services, subject to your consent.

2. How We Use Your Information

We use your information for the following purposes, based on legal grounds such as your consent or the necessity to perform a contract:

To Provide the Service: To create and manage your account, provide access to free and paid 3D models, and add purchased models to your library.
To Process Payments: To facilitate transactions via Pi Network, including verifying successful transactions and associating them with your user ID.
To Improve the Service: To analyze usage data (e.g., download counts) to enhance the functionality and user experience of the Service.
To Communicate with You: To send account-related notifications, such as email verification or updates to this Privacy Policy.

We do not use your data for marketing purposes. If we introduce marketing activities in the future, we will obtain your explicit consent and provide an option to opt out.

3. Payment Processing with Pi Network

Payments for 3D models are processed using Pi Network. We collect and store your Pi Network wallet address and transaction details (e.g., transaction ID, amount, and transaction hash) to verify and record purchases. We do not store or access your wallet balance or other sensitive financial information. Transactions are validated through Pi Network’s services, and we rely on their confirmation to complete purchases.

Currently, all purchases are final, and we do not offer refunds, except in cases of technical failures (e.g., if a purchased model cannot be downloaded due to a system error). We are developing a refund policy for exceptional circumstances (e.g., fraudulent transactions or undelivered content). Once finalized, the terms will be published in this Privacy Policy or a separate Refund Policy, and users will be notified via email or a site announcement. If you encounter issues with a purchase, contact us at mail@example.com for assistance.

Transaction data is retained only as long as necessary to fulfill the transaction or meet legal requirements and is deleted upon account deletion, as described in Section 4.

4. Storage and Security of Your Data

Storage: All user data, including registration details, uploaded 3D models, metadata, and transaction records, are stored on our secure servers.
Security Measures: We use encryption to protect your password (stored in hashed format) and implement access controls to safeguard your data. We take reasonable steps to protect your information from unauthorized access, loss, or misuse.
Data Retention: Upon your request to delete your account, all personal data, including your user ID, email, uploaded content, and transaction records, will be permanently deleted after a 90-day grace period, unless retention is required for legal purposes (e.g., financial reporting). During this period, you may request restoration of your account.

5. Sharing Your Information

We do not share your personal information with third parties, including for payment processing, analytics, or marketing purposes. Your data remains within our control and is used solely to operate the Service. If we engage third-party service providers in the future, we will use Data Processing Agreements (DPAs) to ensure compliance with applicable data protection laws.

6. Your Rights

As a user, you have the following rights regarding your personal data, in accordance with applicable laws such as GDPR:

Access and Update: You can view and update your username, email address, and password in your account settings. Changing your username is allowed only once. Changing your email address requires verification (e.g., access to the original email or, in the future, additional methods like a phone number).
Account Deletion: You may request to delete your account by contacting us. After a 90-day grace period, all associated data, including transaction records, will be permanently deleted, unless required for legal purposes.
Data Portability: You may request a copy of your personal data in a structured, machine-readable format (e.g., JSON or CSV). This includes:
- Your profile information (username, email).
- Metadata of uploaded 3D models (file names, sizes, creation dates).
- Transaction history (transaction IDs, amounts, timestamps).
Data portability applies only to personal data provided by you (e.g., profile info, uploaded files) and does not include derived or aggregated data (e.g., download statistics). We will provide the data within 30 days of your request.
Objection or Restriction: You may object to or restrict the processing of your data in certain circumstances.
Contact Us: For any questions or requests regarding your data, please contact us at mail@example.com.

7. Cookies and Tracking Technologies

We currently do not use cookies or similar tracking technologies. If we implement them in the future, we will update this Privacy Policy and provide you with the option to manage or disable non-essential cookies.

8. International Users and Legal Compliance

Tanarus is hosted in Italy and operates under applicable laws. We process your data based on legal grounds such as your consent (e.g., for account creation) or the necessity to perform a contract (e.g., to provide access to purchased models). For users in the European Union, we comply with the General Data Protection Regulation (GDPR) and use Standard Contractual Clauses (SCCs) for any data transfers outside the EU, if applicable. We also aim to comply with the Law of Ukraine "On Personal Data Protection" and other relevant regulations, such as the California Consumer Privacy Act (CCPA) for users in California. If you are located in a jurisdiction with specific data protection laws, please contact us to discuss your rights.

If we process significant amounts of personal data in the future, we will conduct a Privacy Impact Assessment (PIA) to ensure compliance with data protection regulations.

9. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. For significant changes, we will notify you:

By email (sent to the address linked to your account) at least 30 days in advance.
Via a visible notice on our website (e.g., pop-up or banner) upon your next login.

Minor changes (e.g., grammatical corrections) will not trigger individual notifications. Your continued use of the Service after the notice period constitutes acceptance of the updated policy.

10. Contact Information

For any questions or concerns about this Privacy Policy or your data, please contact us at mail@example.com.

Physical Address: [Under registration, will be updated before launch]