Privacy Policy

Laser Creations Shop LLC (“we”) runs Mandala Layers Studio. This policy covers the website and the studio application, and describes what actually happens to your data rather than the widest thing we could reserve the right to do.

What we collect

Your account

Your email address, a display name if you give one, and either a password we store only as a one-way hash or an identifier from Google if you sign in that way. We never receive your Google password. If you sign the Windows app in to your account to make pictures on your credits, we also keep the PC’s name, the app’s version and when it was last used, so your account page can list it and you can sign it out.

If you buy the Windows app, or are given a key for it, we keep the licence key, encrypted, so your account page can show it to you again. For each PC you activate it on we keep an identifier the app makes from Windows’ own (scrambled one way, so it cannot be turned back into it), the PC’s Windows name, the app’s version, and when the PC was first and last seen. That is how one key is held to the number of PCs it allows, and how your account page lists those PCs by name so you can free one. A PC you free keeps its row, marked freed.

Payment details

Handled entirely by our payment processor. We store their customer and subscription identifiers, your plan, and your billing status. We never see or store your card number.

What you make

The prompts you write, artwork you upload or generate, your project settings, and the files the studio produces. This is stored so you can come back to a project, and it is yours. Our support can open your account to see what you see, these included - to look into a problem you have written to us about, for instance - and each time is recorded. Looking at your account that way cannot change your plan, open your billing details or change your OpenAI key. The people who run the service can also open one of your Landscape scenes or photos directly, for the same reason.

The assistant

If you use the assistant on the website, your conversations with it - your questions, its answers, and any thumbs up or down with the reason you gave - are kept with your account so you can carry on where you left off. We read them to find the questions our documentation should have answered. A screenshot you paste in is looked at for that answer and not kept. If the assistant decides the software has done something wrong, it files a bug report: an email to us with its description of the problem, the conversation, any screenshot you pasted and your project’s files, of which we keep a record. The Windows app has no assistant.

Anything you send us

If you write in through the contact form, we get your message, the address you gave, and any files you attached. Those files are passed to our email provider and not kept on our servers: a large one sits in a temporary file only while your message is being sent, and is deleted as soon as it has gone. What happens to them afterwards is what happens to any email: they sit in the support mailbox until the question is answered and the thread is cleared out.

Usage

A record of every generation you run and every credit spent or granted, including which model and quality were used. This is what your balance is calculated from, so it has to be complete and it is kept as an audit trail rather than overwritten.

Technical

Ordinary server logs: IP address, browser, pages requested, timestamps, errors. Used to keep the service running and to investigate abuse.

How far you got

On the pricing and sign-up pages we record that a step was reached - the prices were looked at, a plan was pressed, a plan was started - so we can see where people give up. If you are signed in, that record is attached to your account; if you are not, it is attached to a random number your browser makes for that page and forgets when you reload. Nothing is stored on your device to do it, no other company is involved, and it cannot follow you to another website.

Who we send it to

We do not sell your data and we do not share it for advertising. We pass it to these services only so far as they need it to do their job:

• OpenAI - when you generate a picture, the prompt is sent to their image API. When you ask Vectorize a Photo for an AI redraw, the photo is sent to OpenAI too, with the drawing instruction - to their image API, or for Pen & ink to a language model that reads it and has the image model draw it, with the request marked not to be stored: a copy no larger than 2048 pixels, with its EXIF data (such as a phone’s location) removed. OpenAI does not use data sent to its API to train its models by default, and may keep it for up to 30 days to monitor for abuse. When you ask the assistant a question, the text of the question is also sent to OpenAI, to turn it into the numbers the assistant uses to find the matching pages of our documentation. Everything else you upload - artwork, depth maps, and photos you dither - is processed on our servers and is not sent to OpenAI; the one other way any of it leaves is the assistant, below. In the Windows app, a picture made on your credits goes the same way through our server: the app sends us what you asked for - and, to redraw a photo, the photo - and we send it on to OpenAI. The photo is not kept; the drawing that comes back is kept for a day so the app can collect it, then deleted. With your own OpenAI key in the app, nothing passes through us.
• Anthropic - when you use the assistant on the website, your question, the conversation so far, the passages of our documentation that match it, and what the assistant reads from the project you have open (its settings and measurements, and sometimes a preview picture of its layers) are sent to Anthropic, whose Claude models write the answer, along with any screenshot you paste in. Your password, your card details and your email address are not part of it.
• Our payment processor - your email and payment details, to take payment and manage your subscription.
• Google - only if you choose to sign in with Google, and only to confirm who you are.
• Our hosting and email providers - to run the service and to send you account and billing email.

We may also disclose information where the law requires it, or to protect the service and its users from abuse.

Cookies

We set one cookie, to keep you signed in. It is strictly necessary - the service cannot work without it - and we set no others. There is no advertising cookie, no analytics cookie and no third-party script on any page here.

The step-counting described above works without storing anything on your device at all, which is why it needs no banner. If we ever want to measure something that does need storage, or bring in a company that would, we will ask you first and this page will say so before it happens.

How long we keep it

• Projects and artwork: until you delete them or close your account.
• Assistant conversations, with any thumbs up or down and the reasons given in them: until you delete them or close your account. A bug report the assistant files is kept as a record of the problem, like any email to us.
• A picture made for the Windows app on your credits: a day, for the app to collect.
• Billing and credit records: kept after account closure for as long as tax and accounting rules require, because they are financial records.
• A Windows app licence key and the PCs it was activated on: kept after account closure, so that closing an account does not stop the key activating. They stay for as long as the licence does.
• Server logs: a rolling window, then discarded.
• The step records above: kept as counts. Closing your account unpicks the link between those rows and you, and leaves the count behind.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything in it. Deleting an account ends any plan on it that day - the card is not charged again, and no refund is given for the rest of the period - and deletes its projects, scenes, photos, 3D projects and assistant conversations. Its billing and credit records, and a Windows app licence, are kept as described above. Depending on where you live you may also have the right to object to or restrict some processing, and to complain to your data protection authority. Write to hello@mandalalayers.com and we will act within 30 days.

Children

The service is not for under-16s and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.

Changes

If we change this policy we will update the date above, and for anything material we will email you before it takes effect.

Contact

hello@mandalalayers.com
Laser Creations Shop LLC, 4209 E Bonanza Rd, Gilbert, AZ 85297