Spatial Studio for macOS Privacy Policy

1. Scope of this policy

This policy applies specifically to the Spatial Studio application for macOS, its anonymous diagnostic features, related download measurement, and connected Real Horizons services that reference this policy. The general Real Horizons Privacy Policy continues to apply to account, billing, cloud upload, and other service activity.

2. Who we are

Spatial Studio is provided by Real Horizons, a product of GastroSpectra Private Limited. In this policy, “Real Horizons,” “we,” “us,” and “our” refer to the operator of the application and associated services.

3. Anonymous diagnostics and your choice

Spatial Studio asks you to make a one-time choice before it sends anonymous product diagnostics or Sentry crash reports. Reporting remains off unless you explicitly select “Share diagnostics.” Choosing not to share does not prevent or limit your use of the application.

Your choice is saved on your Mac. You can change it at any time in Spatial Studio under Settings using “Share anonymous diagnostics.” The application should not repeatedly ask after you have made a choice.

Turning this setting off stops future anonymous product events and Sentry crash reporting from the app and clears diagnostic events that are still waiting locally to be sent. It does not automatically delete records that were already received by our service providers.

4. Download-link measurement

When someone selects a Spatial Studio download link on the Real Horizons website, we may record a best-effort click signal. A click signal does not prove that the download completed or that the application was installed.

• The operating-system platform requested, currently macOS.
• The page placement or source of the download link.
• Limited campaign information when it is present in the link.
• The referring website hostname, without storing the full referring page URL in the download-event table.

5. Anonymous product telemetry

When anonymous diagnostics are enabled, Spatial Studio may send limited product events needed to measure adoption and reliability.

• A randomly generated installation identifier that is not an account ID.
• A new random session identifier for an application session.
• Application version and build number.
• macOS version and processor architecture.
• Event names such as first launch, session start, sign-in completed, media imported, reconstruction or training started, completed, or failed, upload completed, publish opened, and a previous-run crash signal.
• Small allowlisted properties such as media category, processing outcome, or failure stage.
• Server receipt timestamps and basic delivery status needed to accept the event.

6. Crash reporting through Sentry

When anonymous diagnostics are enabled, Spatial Studio uses Sentry to receive technical crash reports. A crash report may include the crash signal or exception, stack trace, threads, loaded application modules, app version and build, macOS version, processor architecture, timestamps, and other technical context needed to identify the fault.

The app is configured not to send default personally identifiable information to Sentry. It removes Sentry user and request fields before sending events, does not enable performance tracing for this integration, and the Real Horizons Sentry project is configured to prevent storage of IP addresses.

7. Information excluded from anonymous diagnostics

The custom Spatial Studio telemetry payload is deliberately restricted. It is not designed to collect the following information:

• Your name, email address, account ID, organization ID, or billing information.
• Project names, filenames, local file paths, prompts, notes, or support messages.
• Photos, videos, 3D scenes, Gaussian splats, reconstruction inputs, generated outputs, or other project content.
• Precise location, contacts, advertising identifiers, or cross-app advertising activity.
• A full browsing history or the full referring page URL for a download click.

8. Network metadata

Internet and cloud providers necessarily process network information, including an IP address, while routing a request. Our custom desktop telemetry tables do not include an IP-address column, and the application does not place an IP address in its telemetry payload. Provider security and operational logs may process limited request metadata under the provider’s terms and retention controls.

9. How we use diagnostic information

We use this information to measure download demand and first launches, understand version adoption and feature usage, assess reconstruction and training reliability, diagnose crashes and regressions, protect the telemetry service from abuse, plan compatibility work, and improve Spatial Studio.

We do not use anonymous desktop diagnostics for behavioral advertising, selling personal information, making credit or eligibility decisions, or training generative AI models on customer project content.

10. Service providers

We use service providers to operate these workflows. Supabase receives and stores the restricted product and download events. Sentry receives crash diagnostics. Cloudflare infrastructure delivers the downloadable application. These providers may process information on our behalf under their applicable agreements, security measures, and privacy terms.

11. Legal bases

Depending on your jurisdiction, we may process diagnostic information based on our legitimate interests in maintaining, securing, and improving Spatial Studio; performance of our agreement with you; consent where consent is legally required; or compliance with legal obligations. You may object to or restrict certain processing where applicable law provides that right.

12. Retention

We retain anonymous product telemetry and crash diagnostics only for as long as reasonably necessary for reliability analysis, security, support, audit, and product improvement. Retention can vary based on the type of record, operational need, provider account settings, backups, and legal requirements. We may delete raw records, aggregate them into statistics, or retain de-identified aggregates for longer-term trend analysis.

Because installation and session identifiers are intentionally not linked to an account, we may not be able to identify a particular anonymous event as belonging to you without additional information from your installation.

13. Security

We use technical and organizational safeguards intended to limit access to diagnostic information. Raw product events are not publicly readable, and access to desktop reporting is restricted to authorized Real Horizons administrators. No internet transmission or storage system can be guaranteed to be completely secure.

14. Your rights and requests

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, or to withdraw consent where processing relies on consent. To make a privacy request, contact us at [email protected]. We may need information from you to verify and locate records, and anonymous records that cannot reasonably be linked to you may not be identifiable for an individual request.

15. Children’s privacy

Spatial Studio is not directed to children under the age at which digital consent is required in the relevant jurisdiction. If you believe a child has provided personal information in violation of applicable law, contact us so we can review the matter.

16. International processing

Diagnostic information may be processed in countries other than the country where you live. Where required, we take steps intended to support lawful transfers and appropriate protection consistent with applicable law.

17. Changes and contact

We may update this policy to reflect changes to Spatial Studio, our diagnostic practices, service providers, or legal requirements. We will update the date shown on this page and provide additional notice when appropriate. For questions or privacy requests, contact [email protected].