1. Who controls your data
e57.gs is operated by L2 Labs. For questions, privacy requests or complaints, contact alexsoroka@l2labs.dev.
2. Data we collect
- Account data: name, email address, user ID, account role, credits and settings.
- Project content: uploaded scans, files, filenames, project names, processing inputs, intermediate data, outputs and share settings.
- Processing data: job identifiers, status, progress, errors, logs, output paths and technical metadata.
- Payment data: product, transaction and billing identifiers. Our payment provider handles full payment-card details.
- Communications: conversion requests, support messages and email delivery records.
- Technical data: IP address, browser or device information, security events, cookies and usage analytics.
3. How and why we use data
We use personal data to create and secure accounts; receive files and run conversions; display progress and deliver outputs; administer projects, credits, payments, uploads and share links; reply to requests; detect abuse and diagnose failures; measure usage; and comply with legal obligations.
Depending on the context, our legal bases include performing a contract, taking steps at your request, complying with legal obligations, protecting legitimate interests in operating and securing the Service, and consent where required.
4. Service providers and recipients
We disclose data only as reasonably necessary to operate the Service, complete a transaction, comply with law or protect rights and security. Providers may include Google Firebase and Google Cloud for authentication and infrastructure; Google Drive and S3-compatible infrastructure for storage and delivery; Hugging Face and processing workers for compute; Lemon Squeezy for checkout and billing; Resend for email; and Google reCAPTCHA and Google Analytics for abuse prevention and measurement.
We may also disclose information to professional advisers, authorities when legally required, or a successor in connection with a merger, financing, reorganization or sale. We do not sell personal data for money.
5. International transfers
Our providers and processing systems may operate outside your country or the European Economic Area. Where required, we rely on recognized safeguards such as adequacy decisions, standard contractual clauses or another lawful transfer mechanism.
Guest upload browser session
When you start an upload on /li, the necessary __Secure-e57_guest cookie securely associates this browser with that upload for up to 48 hours. It is not an analytics cookie and does not require analytics consent. It allows completion and account linking during the first 24 hours, and explicit removal afterwards while the cookie remains available. It is inaccessible to page scripts and is not used to identify other users or browse their files.
6. Data retention
We keep account and project records while your account is active and as needed to provide the Service. Uploaded files, intermediate processing data and outputs are retained according to the limits shown in the Service, operational requirements and your deletion choices. They are not intended to be permanent archival storage.
On /li you can upload an E57 before signing in. This creates a private temporary upload, not an account or a project. Its upload and account-linking permission expires after 24 hours; expiration does not itself delete the stored file. You can explicitly remove your temporary upload while its browser session remains available, or contact us to request removal. After you sign in and continue, it becomes part of your account’s project under the usual retention rules.
Security logs, communications and billing records may be retained longer where reasonably necessary for fraud prevention, dispute resolution, accounting, tax or legal compliance. Backups may persist for a limited period after deletion.
8. Security
We use technical and organizational measures designed to protect data, including access controls, authenticated routes and restricted server-side credentials. No storage or transmission method is completely secure, so we cannot guarantee absolute security.
9. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or receive a copy of your personal data, object to certain processing, withdraw consent, and complain to a data-protection authority.
Use our Privacy requests form without signing in, or email alexsoroka@l2labs.dev. We record your request, contact details and the actions taken to handle it; this information is not used for marketing. We will respond within one month or notify you within that month if an extension is necessary. We may need proportionate information to verify your identity. Submitting a request does not automatically delete or disclose data. Some data may be retained where required by law or needed to establish, exercise or defend legal claims.
10. Automated processing
Conversion and abuse-prevention systems operate automatically, but we do not use your personal data to make solely automated decisions that produce legal or similarly significant effects about you.
11. Children
The Service is not directed to children who cannot lawfully consent to data processing in their jurisdiction. If you believe a child provided personal data without appropriate authorization, contact us.
12. Changes and contact
We may update this Policy to reflect changes in the Service, providers, law or data practices. Material changes will be communicated by reasonable means.
Privacy questions and requests: alexsoroka@l2labs.dev.