Legal
Privacy notice
Last updated 26 October 2026
This notice explains what personal data RUMBUG collects when you ask for support at support.rumbug.studio or use the online features of our MODO kits (Blend Bridge for MODO and Cycles for MODO), why, and what your rights are.
Who we are
RUMBUG, the trading name of Alex Hindle (a sole trader in the UK), is the controller of your personal data. Contact: support@rumbug.studio.
What we collect, and why
| What | When | Why | Lawful basis |
|---|---|---|---|
| Your email address and what you write to us | When you open a support request or email us | To answer you and keep a record of the conversation | Contract: providing the support that comes with your purchase |
| Your licence key or purchase email, and what Gumroad tells us about that purchase (purchase ID, email, date, whether it was refunded or charged back) | When you open a support request | To check you bought the product | Legitimate interest in giving support only to customers |
| Support report: the kit's and MODO's versions, Windows version, graphics card and driver (Cycles), recent Event Log lines, the last save report (Blend Bridge) and the render server's log (Cycles) | When you choose to attach it | To find and fix the problem | Contract; legitimate interest in fixing faults in our products |
| Screenshots | When you choose to attach them | As above | As above |
| Scene files | Only if you tick the separate upload box | To reproduce and fix your problem | Your consent, which you can withdraw at any time (we then delete the file) |
| IP address and the time of each request | When you use the support site, and when a kit checks for updates (at most once a day; you can turn it off) | To run the site and serve the update file | Legitimate interest in running the site and telling customers about updates |
| Licence key and the product's identifier | When a kit checks your licence with Gumroad (if that feature is in your version) | To confirm the licence | Contract |
How we keep this to a minimum:
- Licence keys are stored only as a one-way hash, used to link your later requests.
- Support reports never contain scene data. Before you send it, the kit replaces your Windows user name, computer name, email addresses and licence keys, and shortens folder paths to file names. Object, mesh, material and file names stay in by default because they help us find the problem; the report says how to hide them (
hideNames). Please read the report before sending. - The update check sends nothing about you: it is a plain download of a small file.
- The support site sets no cookies (other than for our own admin login) and uses no analytics or advertising trackers.
Scene files can contain anything you put in them, including people's names or images. Only send scenes you have the right to share. Please don't send special category data (such as health information).
We don't sell your data, use it for advertising, or send you marketing emails.
How we use AI to help with support
We use Claude, an AI model made by Anthropic, to sort requests by product and urgency, match them to known issues, and draft replies. We read and approve every reply before it is sent. No decision with legal or similarly significant effects on you is made by automated means alone.
- Scene files are never sent to Claude or any other AI service. Screenshots only when we decide, case by case, that it helps.
- We never use your files, reports or messages to train or fine-tune any AI model, and Anthropic's commercial terms don't allow it to train on the content we send through its API.
Who handles it for us
These service providers ("processors") handle data only on our instructions:
| Provider | What it does | Where the data is |
|---|---|---|
| Supabase | Stores support requests, reports, screenshots and scene files | Ireland (EU); Supabase is a US company |
| Vercel | Runs the support site and the update file | Functions in London; Vercel is a US company |
| Resend | Sends support email from support@rumbug.studio | Sends from Ireland (EU); Resend is a US company and keeps account data in the USA |
| Fasthosts (Livemail) | The support@rumbug.studio mailbox | UK |
| Cloudflare | Runs the domain's DNS; no support data passes through it | Global |
| Anthropic | AI triage and reply drafts (Claude API) | USA |
Gumroad sells our products and is the merchant of record. Gumroad is a separate controller for your purchase data, under its own privacy policy (https://gumroad.com/privacy). We ask Gumroad to confirm a purchase when you give us a licence key or purchase email, and (if your kit version has it) when the kit checks your licence.
We may also disclose data if the law requires it, or to establish or defend legal claims.
Transfers outside the UK
Support requests and files are stored in Ireland, in the EU. UK data protection law treats the EU and the wider European Economic Area as giving adequate protection, so no extra safeguards are needed for that.
Some providers are based in, or can reach data from, the United States (Vercel, Resend, Anthropic and Supabase). Each is covered either by the UK's "data bridge" (certification under the UK Extension to the EU-US Data Privacy Framework) or by the standard contractual clauses with the UK International Data Transfer Addendum in its data processing terms. You can ask us for details.
How long we keep it
| Data | Kept for |
|---|---|
| Uploaded scene files | Deleted 30 days after your request is closed, and never kept more than 90 days after upload; sooner if you ask. Any copy we make to reproduce the problem is deleted at the same time. |
| Support reports and screenshots | 12 months after the request is closed |
| Support requests and messages | 2 years after the request is closed |
| Purchase link (purchase ID, email, licence key hash) | As long as your support requests are kept |
| Site logs (IP addresses) | Vercel's log retention on our plan, up to 30 days; we don't copy or analyse them |
| AI triage data at Anthropic | Deleted by Anthropic within 30 days under its API terms |
Bug records we keep to fix our products contain no personal data.
Your rights
You have the right to:
- ask for a copy of your personal data;
- ask us to correct it;
- ask us to delete it;
- ask us to restrict how we use it, or object to our using it on the basis of legitimate interests;
- ask for data you gave us in a portable format;
- withdraw your consent to a scene upload at any time (we then delete the file); this doesn't affect what we did before.
Email support@rumbug.studio. We'll reply within one month. There's normally no charge.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
Security
Data travels over HTTPS and is stored in private storage that only the support site's server can reach. Files are downloaded only through links that expire after 10 minutes. The admin login uses two-factor authentication. If a breach puts your rights at risk, we'll report it to the ICO within 72 hours and tell you if the law requires.
Children
Our products and support are for adults. We don't knowingly collect data from children.
Changes
We'll update this notice when our services change, and change the date at the top.