Privacy Policy
Effective date: November 12, 2026
Last updated: November 12, 2026
This policy explains what personal information RCS Viewer collects, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to the RCS Viewer website, web application, any future desktop, mobile or immersive applications, our APIs, demonstration pages, waiting lists and support channels (the "Service").
1. Who we are
1.1. The Service is operated by 1455205 B.C. LTD., doing business as RCS Studios, a company incorporated in British Columbia, Canada (incorporation number BC1455205), based in Vancouver, British Columbia, Canada ("RCS", "we", "us").
1.2. We are responsible for (the "controller" of) the personal information described in this policy.
1.3. Contact, including our privacy officer: support@rcsviewer.com, subject "Privacy".
1.4. Representatives. We will publish here the details of our representatives in the European Union and the United Kingdom once appointed. Until then, people in those regions can reach us at the address above.
2. The short version
- We collect what we need to run your account and your scenes, and little else.
- The content of your scenes stays yours. We do not sell it, we do not share it for others' own purposes, and we do not use it to train artificial intelligence.
- We do not use advertising networks, advertising cookies or cross-site tracking, and we do not sell personal information.
- Your card details are handled by our payment provider and are never stored by us.
- You can access, correct, download and delete your information, and close your account at any time.
3. What we collect
3.1. Information you give us
| Information | When | Why |
|---|---|---|
| Email address and password | When you create an account | To create and secure your account. Your password is stored only as a salted hash by our authentication provider. We never see it |
| Name or display name, company (optional) | When you choose to add them | Shown in your account, to people you share with, and in live sessions |
| Confirmation that you are 16 or older | At sign-up | To apply our minimum age |
| Marketing preference | At sign-up or in your settings | To send product news only if you opted in |
| Your Content: scene files and captures, camera and calibration data, thumbnails, scene names, shots, storyboards, notes, measurements, placements | When you upload or create it | To provide the Service to you |
| Email addresses of people you invite | When you share a scene or a session | To give those people access and to show you who has access |
| Messages to support | When you write to us | To answer you |
| Waiting list details: email; optional name, company or role, and who referred you; your consent, with the date, time and IP address of your sign-up and confirmation | If you join a waiting list | To invite you when access opens and to keep a record of your consent |
Captures can contain personal information. A 3D capture of a real place can show people, vehicles, number plates, documents or private property. We do not analyse the content of your scenes to identify anyone, and we do not perform facial recognition or any biometric processing. You are responsible for having the right to upload what you upload (see our Terms of Service).
3.2. Information collected automatically
| Information | Why |
|---|---|
| IP address and approximate country | Security, abuse prevention, rate limiting, regional availability rules, delivery of content |
| Browser, operating system, language, device type and graphics capabilities | Compatibility, choosing the right quality level, support |
| Technical logs: time, page or file requested, result, amount of data served | Operating, securing and troubleshooting the Service |
| Technical performance data, such as processing times, error rates and frame rates | Operating and improving the Service. It does not include the content of your scenes |
We use Cloudflare's browser analytics to measure website usage and technical performance. The external services used to provide the Service are described in section 6.
We use Mailchimp to manage waiting-list subscriptions and related messages. Subscription records may include the information you submit and technical records created by the email service. Our emails may include open and click tracking so we can understand how our messages are used. You can unsubscribe from any email at any time.
3.3. Information from third parties
- Payments. If you buy a paid feature, our payment provider tells us that the payment succeeded, which plan you have, your billing country and a customer reference. We never receive your full card number.
- People who share with you. If someone invites you to a scene, we receive your email address from them.
- Sign-in with Google or Microsoft. If you choose to sign in with Google or Microsoft, that provider shares your name, email address and, if available, profile picture with us. We use them only to create and secure your account and to show your name in the Service. We never receive your password for those accounts, and we do not access your contacts, files, calendar or any other data in them.
4. How and why we use your information
| Purpose | Information used | Legal basis (EEA, UK and similar laws) |
|---|---|---|
| Create, operate and secure your account | Account information, technical data | Performance of our contract with you |
| Store, process, display and deliver your scenes | Your Content, technical data | Contract |
| Sharing and live sessions you start | Your Content, invited emails, display names, presence | Contract, and our legitimate interest in protecting content owners |
| Security, fraud and abuse prevention, rate limits, regional restrictions | IP address, logs, account and device data | Legitimate interests, and legal obligations |
| Operate and improve performance and reliability | Technical performance data, never the content of your scenes | Legitimate interests |
| Customer support | Support messages, account data | Contract and legitimate interests |
| Service messages (confirmations, password resets, security and policy notices, receipts) | Email address | Contract and legal obligations |
| Waiting list: inviting you when access opens | Waiting list details | Your consent, which you can withdraw at any time |
| Product news and marketing | Email address, name | Your consent, which you can withdraw at any time |
| Billing and accounting for paid features | Plan, payment status, billing country, customer reference | Contract and legal obligations |
| Compliance, legal requests, copyright notices, and establishing or defending legal claims | As relevant | Legal obligations and legitimate interests |
We do not use the content of your scenes to train artificial intelligence or machine learning models. If we ever want to use any of your content to improve our tools, we will ask for your explicit consent first, and you will be free to refuse without any effect on your account.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
In Canada, we rely on your consent (express, or implied by your use of the Service for the purposes above) and on the exceptions the law provides, for example for security and fraud prevention. In Brazil, our legal bases are the performance of a contract, legitimate interests, compliance with legal obligations, the exercise of rights in proceedings and, for marketing, consent.
5. Cookies and similar technologies
5.1. We use cookies and browser storage to keep you signed in, control access to scenes, remember preferences and notices, and save work such as shots, notes, measurements and scene setup on your device. Browser storage may also retain website display settings. Some stored information remains until you clear it or your browser removes it.
5.2. We use browser storage for the functions described above and Cloudflare browser analytics for usage and performance measurement. Cloudflare states that its RUM beacon does not store or access cookies, local storage or other browser storage.
5.3. Your browser may keep downloaded files, application resources and locally saved work until you clear them, the application replaces them or the browser removes them. Clearing cookies, browser storage or caches may sign you out, reset preferences and remove locally saved work.
6. Who we share information with
6.1. We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising.
6.2. Service providers. We use trusted providers that process information on our behalf, under contracts that limit them to our instructions and require appropriate security:
| Provider | What it does for us | Main location of processing |
|---|---|---|
| Supabase | Authentication and account database | United States |
| Cloudflare | Website and content delivery, security, storage of scene files, and browser usage and performance measurement | Global network (United States and other countries) |
| RunPod | Temporary processing of scene files on allocated compute instances, with working-file cleanup and instance termination after processing | Varies by the allocated data centre; no fixed processing region is specified |
| OVH | Server hosting for the website and its services | United States |
| Postmark | Account emails (confirmations, password resets, notices) | United States |
| Stripe, including Link | Payments, billing and, where applicable, acting as seller of record | United States and other countries |
| Titan | Hosting of our support mailbox | Not specified by the provider for our support mailbox |
| Mailchimp (Intuit) | Waiting list emails, and product news only if you opt in | United States |
Our website loads fonts from Google Fonts and software libraries from Tailwind's CDN, cdnjs, unpkg and jsDelivr, as applicable. We use Cloudflare for delivery, security and browser performance measurement, and Mailchimp for waiting-list subscriptions. Sign-in uses Supabase and, if you choose an enabled option, Google or Microsoft. Some sign-in flows also load Cloudflare Turnstile. These connections involve technical request information, such as your IP address and browser information.
6.3. People you share with. When you share a scene or invite people to a live session, they see the content you share, your display name, and, in live sessions, your presence and activity. The owner of a scene can see the email addresses invited to it.
6.4. Legal reasons. We may disclose information when we believe in good faith that it is required by law, by a valid court order or by a lawful request from a public authority; to investigate fraud, abuse or a security incident; to enforce our Terms; or to establish, exercise or defend legal claims. Where permitted, we will tell you before disclosing your information.
6.5. Business transfers. If RCS is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to protections no less than those in this policy. We will inform you.
7. International transfers
7.1. RCS is based in Canada. Our service providers may process information in the United States and other countries. The location of temporary computing may vary with the data centre allocated for processing. Your information will therefore be transferred to and processed in countries other than your own, which may have different data protection laws.
7.2. When we transfer personal information from the European Economic Area, the United Kingdom, Switzerland, Brazil or other regions with transfer rules, we rely on the safeguards those laws recognise. These include the European Commission's adequacy decision for Canada for organisations subject to Canadian federal privacy law, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where a provider is certified, and standard contractual clauses approved by the competent authorities. You can request a copy of the relevant safeguards at support@rcsviewer.com.
7.3. For residents of Quebec: before communicating personal information outside Quebec, we assess whether it will receive adequate protection, as Quebec law requires.
8. How long we keep information
| Information | How long |
|---|---|
| Account information | While your account is open. Deleted when you close your account |
| Your Content (scenes and the files we generate from them) | Until you delete it or close your account. When you delete a scene, the Service attempts to remove its source and generated files from active scene storage and delete its database record as part of the deletion request. Copies may remain in backups, caches, downloaded files and separately published storyboards |
| Backups | Backup copies, where maintained, may retain deleted information until they are overwritten or deleted under the backup schedule applicable to that system |
| Temporary processing copies | Temporary working copies are removed through job cleanup and compute-instance termination. Removal may be delayed by processing failures, retries or cleanup failures |
| Technical and security logs, including IP addresses | We retain technical and security logs for operational, security and troubleshooting purposes. Retention periods vary by service and by the logging settings applicable to each system |
| Support messages | 12 months after the conversation ends |
| Billing records | As long as tax and accounting laws require, typically up to 7 years. Held mainly by our payment provider |
| Marketing preference | Until you change it or close your account |
| Waiting list entries | Until you unsubscribe or ask us to remove you, or 12 months after you joined, whichever comes first. Email-service technical records follow the retention settings applicable to that service |
| Copies in browser caches and content delivery networks | Cached copies may remain until the applicable cache expires or is cleared. Downloaded files and separately shared exports are not automatically removed from recipients' devices when you delete a scene |
We may keep minimal information for longer where needed to comply with the law, resolve disputes, prevent abuse, or enforce our Terms, for example a record that an account was closed for a violation.
9. How we protect information
We use administrative, technical and physical measures appropriate to the risk, including:
- encryption in transit (HTTPS) and at rest at our providers;
- access controls that let each user see only their own data, tested regularly;
- separate access keys for each internal service, with least privilege;
- two-factor authentication on our administrative accounts;
- limited internal access on a need-to-know basis; and
- prompt deletion of temporary processing copies.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at support@rcsviewer.com.
Security incidents. If a breach of security affects your personal information and creates a real risk of significant harm, we will notify you and the competent authorities as the law requires. Under the GDPR this means within 72 hours of becoming aware of it, where required.
10. Your rights and choices
10.1. Depending on where you live, you may have the right to:
- access the personal information we hold about you, and receive a copy;
- correct inaccurate information;
- delete your information;
- download information you provided, in a portable format (portability);
- object to or restrict certain processing, including processing based on legitimate interests;
- withdraw consent at any time, for example to marketing, without affecting earlier processing;
- opt out of the sale or sharing of personal information. We do not sell or share it in that sense; and
- complain to a data protection authority.
10.2. How to exercise them. You can update most information and delete scenes in the Service. You can close your account in your account settings, where available, or by writing to support@rcsviewer.com. For any other request, write to support@rcsviewer.com with the subject "Privacy request". We may need to verify your identity. We respond within the time the law requires, usually 30 days. We do not discriminate against you for exercising your rights.
10.3. Marketing. You can unsubscribe at any time using the link in each message or in your settings.
10.4. Complaints. Please contact us first so we can try to help. You may also complain to the Office of the Privacy Commissioner of Canada or the data protection authority where you live or work.
11. Minimum age
The Service is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has given us personal information, contact us and we will delete it. Users aged 16 and 17 must have the agreement of a parent or guardian. For users under 18, features that make content visible to others are off until the user chooses to use them.
12. Regional information
European Economic Area, United Kingdom and Switzerland. RCS is the controller. The legal bases are listed in section 4. Representatives: see section 1.4. You may lodge a complaint with your local supervisory authority.
Brazil (LGPD). You have the rights in Article 18 of the LGPD, including confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about sharing, and revocation of consent. Contact our privacy officer at support@rcsviewer.com.
Canada and Quebec. Our privacy officer can be reached at support@rcsviewer.com. Quebec residents may also contact the Commission d'accès à l'information du Québec.
United States. We do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes that require a right to limit. Residents of certain states may exercise the rights in section 10.
13. Changes to this policy
We may update this policy. We will publish the current version with its date. For material changes, we will notify you by email or in the Service before they take effect.
14. Contact
1455205 B.C. LTD. (RCS Studios), Vancouver, British Columbia, Canada support@rcsviewer.com, subject "Privacy"