Controlled-beta draft · owner and legal review required before public launch
Privacy Policy
Crown Studio is a photogrammetry service operated through crowninspect.ca. This policy explains what information we handle, why we handle it, and the choices available to you. It is written for the current controlled beta and must be updated when billing, analytics, cloud storage, or new service providers are added.
Information we handle
- Account information: email address, password hash, verification and recovery status, account role, session records, and project names.
- Processing content: photographs you explicitly upload, technical image metadata contained in them, job settings, generated 3D models and orthophotos, and processing errors.
- Operational and security data: request time, network address available to our server, browser or protocol metadata, security and audit events, and limited service logs. We do not use third-party advertising trackers in the controlled beta.
- Support information: messages and files you choose to send when requesting help.
Why we use it
We use this information to create and secure accounts, perform the job you request, return and let you download results, prevent abuse, diagnose failures, provide support, meet legal obligations, and improve reliability. We do not sell personal information or use customer photographs to train an artificial-intelligence model.
Your photographs and sensitive locations
Photographs can reveal people, homes, vehicles, location metadata, and security-sensitive infrastructure. Upload only content you own or are authorized to process. Remove unnecessary personal or location data before upload where practical. Crown Studio processing is automated, but authorized operators may access a job when reasonably necessary to investigate a support, safety, abuse, or security issue.
Consent and choices
Selecting files does not upload them. Upload begins only after your explicit action. You may decline optional processing, download your available account data, delete your account through the application, or withdraw consent by contacting us. Withdrawal does not affect work already lawfully completed and may prevent us from providing the service.
Service providers and location
The controlled beta uses hosting and email-delivery providers to run the service and deliver account messages. The primary application host is in Canada. A provider or its support systems may process limited information in another country, where local law may permit lawful access. Providers receive only the access reasonably needed for their role and are not authorized by us to use your content for their own advertising.
Retention and deletion
Source uploads are removed from active processing storage when a job reaches a terminal state. Generated results and cloud-session data expire after the period shown in the application—currently one hour in the controlled-beta profile. Account and project records remain until account deletion or until no longer needed. Operational records and encrypted backups follow the periods in our Retention Policy. Deletion from a backup occurs when that backup expires, unless preservation is required for a security incident, dispute, or legal obligation.
Safeguards and residual risk
We use encrypted transport, access controls, password hashing, short-lived processing grants, service isolation, restricted logs, security updates, integrity-checked backups, and monitoring. No system is risk-free. A breach could expose account information, photographs, location information, or derived models. Do not upload content whose compromise would create an unacceptable safety or privacy risk.
Access, correction, questions, and complaints
You may request access to or correction of personal information, ask how it was used or disclosed, or raise a privacy complaint through the Support page. Use the subject “Privacy” and do not send passwords or sensitive photographs by email. We may need to verify your identity before fulfilling a request.
Children
Crown Studio is intended for business users who are legally able to enter a contract. It is not directed to children under 13. Do not create an account for a child or upload a child’s information without appropriate authority and consent.
Changes
We will post a revised date and provide appropriate notice before a material change takes effect. We will seek new consent when required for a new use or disclosure.
Canadian privacy context
This draft is designed around Canada’s Personal Information Protection and Electronic Documents Act and the federal Privacy Commissioner’s guidance on meaningful consent and retention and disposal. These links are context, not a statement that the draft has received legal approval.