Legal
Privacy Policy
Last updated: April 2026
1. Who We Are
Spatiq is operated by Humziq. When this policy says "we", "us", or "our", it refers to Humziq. If you have any questions, email us at info@spatiq.app.
2. What Data We Collect
Account data — when you register, we collect:
- Your name and email address
- Your business name and industry
- A bcrypt-hashed password (we never store your plain-text password)
Product & catalog data — content you upload:
- Product names, descriptions, prices, and metadata
- Product images and videos (stored in Cloudflare R2)
- AI-generated 3D model files (.glb / .usdz)
Usage & analytics data — automatically collected when customers scan your QR codes:
- Scan timestamp and product viewed
- Whether the user launched the AR experience
- Device platform (iOS / Android / Other) derived from User-Agent
- Approximate country derived from IP address (country-level only, IP is not stored)
- Dwell time in AR (seconds)
Billing data — payments are processed by SafePay. We do not store your payment card details. We receive from SafePay:
- A transaction reference and order confirmation
- Payment status (completed, pending, or failed)
- The credit pack purchased and amount paid
3. How We Use Your Data
- To create and manage your account and subscription
- To generate 3D models from your product images via our AI pipeline
- To serve your AR catalog to your customers
- To provide scan analytics in your dashboard
- To send transactional emails (account verification, credit order confirmations)
- To improve the Service and diagnose technical issues
We do not sell your data to third parties. We do not use your data for advertising.
4. Third-Party Services
SafePay
Payment processing for credit pack purchases. SafePay is a PCI-certified payment gateway operating in Pakistan. Your card details are handled directly by SafePay and are never stored on our servers. SafePay has its own Privacy Policy.
Cloudflare R2
Object storage for product images, videos, and 3D model files.
Vercel
Web application hosting. Vercel may process request logs. See Vercel's Privacy Policy.
Railway
API and worker infrastructure hosting.
Meshy.ai
AI 3D model generation. Product images are sent to Meshy to generate 3D models.
Resend
Transactional email delivery (OTP codes, notifications).
5. Data Retention
We retain your account and product data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, unless we are required to retain it for legal or compliance reasons.
Scan event data (anonymous usage analytics) may be retained in aggregated form beyond this period.
6. Security
We use industry-standard measures to protect your data, including encrypted connections (TLS), bcrypt password hashing, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to certain processing activities
- Data portability
To exercise any of these rights, email us at info@spatiq.app. We will respond within 30 days.
8. Cookies
Spatiq uses a single httpOnly session cookie to keep you signed in to the dashboard. We do not use advertising cookies or third-party tracking cookies. Vercel Analytics (used on this site) collects anonymous page-view data and does not use cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice in the dashboard. The "last updated" date at the top of this page reflects the most recent revision.
10. Contact
Questions about this policy? Email us at info@spatiq.app.