Privacy Policy

Tridicon (tridicon.id) is run by MASA LABS (opens in a new tab). We decide what data is collected and what it is used for, so we are responsible for handling it.

Questions about your data can be sent to [email protected].

We only keep the data we need to run Tridicon.

Account

The name, email address and profile photo of your Google account, and your Google account ID. We also keep the sign-in token from Google that is needed to keep your session going. We never see your Google password.

Sessions and devices

Your IP address, browser and device type (user agent), and sign-in times, for security and to prevent abuse.

Your work

Your prompts, the style you chose, any reference image you upload, and the icons and 3D models that are made, with a record of their status and processing time.

Credits and payments

Your credit balance, the history of credits added and spent, and order IDs and payment amounts. Your card, bank or e-wallet details are handled by the payment provider and we do not receive them.

Communication

The emails we send you (for example a welcome email) and the messages you send to support.

In your browser

A sign-in (session) cookie, your light or dark theme choice, a job that is still running so it can continue after a page reload, and a temporary marker while you pay. We do not use advertising cookies or third-party analytics tools.

• Creating and managing your account, and keeping you signed in.
• Making icons and 3D models, keeping their history, and counting your credits.
• Processing payments and adding the credits you buy.
• Keeping the service secure, limiting abuse, and checking prompts that break the rules.
• Answering your questions and sending service emails.
• Understanding overall use (internal statistics) so we can improve the service.
• Meeting legal obligations, such as keeping transaction records.

We process data based on your consent when you sign up, what we need to provide the service you asked for, and legitimate interests such as security, in line with Indonesia’s Personal Data Protection Law (Law No. 27 of 2022).

We do not sell your data. To make Tridicon work, we pass some of it to the service providers below. Some providers are used depending on how we configure the service and can change, and we update this list when they do.

Google

Runs sign-in with your Google account. If Google Gemini is used, it also receives prompts to make images.

AI image model provider

Receives your prompt and any reference image to make the icon. Depending on our configuration, this can be OpenRouter (which passes it on to models such as OpenAI’s), Google Gemini, or BytePlus Seedream.

fal.ai

Receives the generated icon image to remove its background.

Tripo3D

Receives the icon image you choose to turn it into a 3D model.

Cloudflare R2

Stores the images and 3D models you make.

Resend

Sends service emails, and receives your name and email address to do so.

Payment provider

Receives the order ID and amount to create a QRIS payment, and your email address if the provider asks for it (Duitku). The provider in use can be Pakasir or Duitku, depending on our configuration. They handle your own payment details.

Server provider

Where Tridicon and its database run, including regular backups.

Authorities

When the law or a valid order requires it.

Some of the providers above operate outside Indonesia, so your data may be processed or stored there. We try to use providers that keep data secure, and we only send what they need for their task.

• Your account and your work are kept while your account is active.
• When you delete your account (in Settings, or by email), we delete your account, your icons and 3D models, and the files stored for them. Records of your payments are kept without your name, for bookkeeping and for settling disputes.
• Database backups are made regularly and removed on a rolling basis, so deleted data can remain in a backup for a short time.

Connections to Tridicon use HTTPS, the sign-in cookie cannot be read by page scripts, and admin access is limited to specific people. No system is 100% secure, so we cannot promise absolute security. If a data breach affects you, we will tell you as the applicable rules require.

You have the right to:

• know about and ask for a copy of your personal data,
• have wrong data corrected,
• ask for your data and account to be deleted,
• withdraw your consent or object to certain processing.

You can delete your account yourself in Settings, under Danger Zone. For anything else, send your request from your account email to [email protected]. We will check that it really comes from you and then answer as soon as we can, within the time the rules set.

Tridicon is not meant for children under 17. If you are a parent or guardian and know that your child gave us personal data without your consent, contact us so we can delete it.

If we add a feature that collects new data, or change providers in a way that matters, we will update this page and the date at the top. For important changes we will tell you on the site or by email. The rules for using the service are in the Terms of Service.