Privacy Policy.

Last updated: 4 August 2026

Alpha Numeric Multi-Media Ltd, trading as Made By Monolith, is the data controller for the personal data described here. This notice explains what we collect, why, and what you can do about it. It is written to meet the UK GDPR, the Data Protection Act 2018 and, where you are in the EEA, the EU GDPR.

If you only want the short version: we collect the minimum needed to run your account, take payment and make the things you ask us to make. We do not sell your data, and we do not use it to train AI models.

Who we are

Alpha Numeric Multi-Media Ltd, a company registered in England and Wales, trading as Made By Monolith. You can reach us about anything on this page at hello@madebymonolith.com.

What we collect

When you create an account: your email address, a password (stored only as a salted hash — we never see it), and optionally a display name.

If you sign in with Google: your email address, your Google account identifier and your name, as supplied by Google. We do not receive your Google password.

When you buy something: your billing details, delivery address for physical items, and a record of what you bought. Card details are handled entirely by Stripe and never reach our servers.

When you use the maker tools: the images you upload, the models generated from them, any names you give your figures, and a record of what each action cost.

Automatically: your IP address and basic technical information in our server logs, kept for security and troubleshooting.

Why we use it, and our lawful basis

• Running your account and delivering what you bought — performance of a contract
• Taking payment and preventing fraud — contract, and legal obligation
• Keeping records for tax and accounting — legal obligation
• Sending you order and build updates — contract
• Keeping the service secure and working — legitimate interests
• Optional analytics and marketing — consent, which you can withdraw at any time

We do not use automated decision-making that produces legal or similarly significant effects about you.

Your uploads and generated models

Images you upload and the models produced from them are stored so you can return to your work. We do not use your images or models to train AI models — not ours, and not anyone else's.

To produce a model, your images are sent to specialist third-party processing services. They act as our processors, are contractually barred from using your content for their own purposes, and are listed in the "Who we share with" section below.

If you share a figure using a share link, whatever that link allows becomes visible to anyone who has it. Share links are unguessable, and you can turn one off at any time — which takes effect immediately.

Who we share it with

We use a small number of providers, each acting on our instructions:

• Stripe — payments. Stripe is a controller in its own right for fraud prevention; see stripe.com/privacy.
• Cloudflare R2 — file storage.
• Netlify — website hosting.
• Supabase — database hosting.
• Resend — transactional email.
• Specialist 3D and image generation providers — processing your uploads into models.

Some of these process data outside the UK and EEA. Where they do, transfers are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

We do not sell your personal data, and we do not share it for anyone else's marketing.

How long we keep it

• Account details: while your account is open, and 30 days after you close it.
• Orders and invoices: six years after the end of the relevant tax year, because HMRC requires it.
• Uploads and generated models: while your account is open. You can delete individual figures at any time.
• Server logs: 90 days.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to how we use it, ask for it in a portable format, and withdraw consent where consent is what we rely on.

To exercise any of these, email hello@madebymonolith.com. We will respond within one month.

If you are not happy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority if you are in the EEA. We would rather you told us first so we can put it right.

Cookies

See our Cookie Policy for what we set and how to change your choices.

Changes

If we change this notice materially we will tell account holders by email before it takes effect. The date at the top always reflects the current version.