Privacy Policy

Version 2026-10-01 · effective from 1 October 2026

This policy explains what personal data we process when you buy and use Easy Form Studio (the Blender add-on and the EasyFormStudio app for macOS and Windows), when you visit easyformstudio.com or a published project, and when you contact us.

1. Controller and contact

The controller is CODEVO, obrt za računalne i druge usluge, vl. Ivan Babić, Krotovica 16, 10040 Zagreb, Croatia, OIB 00448210519 (“we”). Easy Form Studio is the name of the product; it is sold by CODEVO, which also operates the website easyformstudio.com.

For any privacy question, write to easyformstudio@gmail.com or call +385 95 353 9388. We have not appointed a data protection officer because we are not required to.

2. What data we process, where it comes from and why

We receive data from you (when you buy, use the add-on or write to us), from Stripe (payment data) and from your browser or the add-on (technical data). Each activity is described separately below. The legal bases are summarised in section 3.

Buying and your licence

Buying has three steps: the order page on our server, payment with Stripe and a confirmation e-mail. We process:

On the order page: the plan you choose; whether you buy as a private person or as a company or sole trader, and for a company or sole trader its name, country, address and OIB (Croatia) or VAT number or tax number (other countries, if you enter it); the versions of the Terms and the Privacy Policy you accepted; your statement on the start of delivery if you buy as a private person (for the lifetime licence, your request that delivery starts immediately and your acknowledgement that you thereby lose the right of withdrawal; for a subscription without a free trial, your request that it starts immediately); the time of the order, your IP address and your browser identifier (user agent).
From Stripe after payment: your e-mail address, the name you entered, your billing address and country, the plan, the amount and status of the payment and Stripe’s identifiers for the customer, subscription and payment. We keep a copy of this record. You enter your card details directly with Stripe; we never see or store them. If you pay with Apple Pay or Google Pay, those services process your data under their own policies.
Your account and licence: a user account with your e-mail address as the user name, the licence key (API key), the plan, the subscription status, the end of the trial and of the paid period, a scheduled cancellation or plan change, your language and a list of payments. For accounts opened through the earlier registration form we also keep the data entered at registration and the browser identifier recorded when the e-mail address was confirmed.

Purpose: concluding and performing the contract (delivering the key, billing, renewal, cancellation and plan changes). The order record with the IP address and browser identifier is our proof of what you ordered and accepted and helps prevent fraud. The country is also our proof of the place of supply for tax purposes.

Invoices and fiscalisation

We issue an invoice for every charge; there is no invoice for the free trial. For the invoice we use the name and e-mail address you entered at payment and your country, and for a company or sole trader the details from the order page: its name, country, address and OIB (Croatia) or VAT number or tax number (other countries, if you entered it). The invoice also shows the plan, amount, date and time, payment method (card) and the fiscalisation codes.

We issue invoices in our own invoicing system, Codevo Fiskal, which runs on our servers in the EU, and send them by e-mail; you can also open them in the Account panel.

Invoices to private persons are fiscalised: we send the Croatian Tax Administration (Porezna uprava) the invoice data (number, date and time, amount, payment method and the seller’s OIB), without your name or e-mail address. For invoices to companies and sole traders we also send the buyer’s OIB where the law requires it.

Purpose: issuing and fiscalising invoices and keeping accounting records, as required by the Croatian Fiscalisation Act and tax and accounting rules.

Licence and update checks in the add-on

The add-on connects to our server only for the following:

Licence check at start-up, periodically while it runs (about every 6 hours) and before exports. The add-on sends the licence key and the server returns the licence status (type, status, until when exports are allowed). The add-on stores the last answer on your computer, so a subscription keeps working offline until the date the server last confirmed.
Updates at start-up and when you check for updates yourself. The add-on sends the key and the installed version number and downloads only the files that changed. We record which key checked for updates, with which version and when.
Account panel: when you open it, the add-on fetches your e-mail, plan, status and list of invoices. Cancelling, resuming, changing plan, adding a new card and sending the key by e-mail go through our server to Stripe.
Lost key: if you enter an e-mail address in the add-on and ask for your key, we send it only to that address and only if a licence exists for it.

With every connection our server sees the IP address and the time of the request and records them in the server logs. The add-on does not send us your projects, drawings, exports, file paths or information about your computer. Exports (PDF, Excel, DXF, MPR, CIX, labels, renders) are created on your computer. The exceptions are web publishing and the AI assistant, described below, and only when you start them yourself.

Purpose: performing the contract (licence and updates). The update-check records and server logs also serve security, preventing misuse of keys and troubleshooting.

Publishing projects on the web

When you publish a project on the web, the add-on sends our server the project name you enter, the 3D model of the scene (the furniture and, if it is in the scene, the room, with materials and textures), the list of parts (names, sizes, materials and hardware) and the viewer settings. We store the project on the server projects.easyformstudio.com in the EU and keep a record of it (name and time of publishing).

Anyone who has the link can open a published project. So do not put anything you do not want to share into the name or the project, such as your client’s name and address. When someone opens a published project, our server records their IP address in the server logs. The project viewer also loads some software libraries from the public content delivery networks jsDelivr and unpkg, which see the visitor’s IP address.

Purpose: the service you request by publishing (performance of a contract).

AI assistant

This section applies only to the AI assistant in the Easy Form Studio add-on. No other feature of the add-on sends this data. Using the assistant is optional, and the add-on works the same without it.

When you send the assistant a message, the add-on sends our server (api.easyformstudio.com):

the text of the message;
images you attach (sketch, photo, floor plan);
a summary of the current scene: the sizes of the room and its openings, and a list of the elements with their sizes, templates, names and notes.

Project files, paths on your computer and your API key are not sent to the model.

Our server passes this data to Anthropic PBC (USA), which provides the Claude model, only to produce the answer. Under Anthropic’s commercial terms, data sent through the API is not used to train models.

We keep conversations (messages, answers and the results of the changes) on our server for 30 days for troubleshooting, after which they are deleted automatically. We record the number of messages and the cost of each one for the monthly quota.

The legal basis is the performance of a contract, the service you request by sending a message.

Support and complaints

When you write to us, we process your e-mail address, your name if you give it, the content of your message and any attachments, and the licence details we need to help you. We receive and keep messages in the mailbox easyformstudio@gmail.com, provided by Google (Gmail).

A complaint sent by post or e-mail or handed in at our registered office is entered in our record of complaints: who made it and when, its content, our confirmation of receipt and our reply.

Purpose: answering your request (contract or legitimate interest) and handling complaints, as required by the Croatian Consumer Protection Act.

Withdrawal requests

When you withdraw from the contract with the withdrawal function, we record your name, the e-mail address used for the purchase, the contract details (plan and order date; the licence key if you enter it) and the date and time of receipt. We record the same when you send your withdrawal statement by e-mail or post. We send a confirmation of receipt with these details to your e-mail address without delay, and then record the refund and the revocation of the licence.

Purpose: carrying out the withdrawal and proving that we received and carried it out, as required by the Croatian Consumer Protection Act.

Website and cookies

The website easyformstudio.com runs on WordPress on our server in the EU.

Server logs: for every visit the server records the IP address, time, page address and browser identifier. We use them for security and troubleshooting.
Necessary cookies are always on and need no consent, for example the cookie that remembers your choice in the cookie banner (CookieYes) and the language of the site.
Google Analytics (through the Site Kit plugin) loads only if you accept analytics cookies in the banner. Google then records which pages you visit, which page you came from, your device and browser type and your approximate location based on your IP address, and sets its own cookies. We also set marketing cookies only with your consent.
YouTube: when you open or play a video embedded on the site, YouTube (Google) receives your IP address and browser details and may set its own cookies.
Downloads: installers and textures are downloaded through Cloudflare R2, which sees your IP address.

You give or refuse consent in the banner, and you can change your choice or withdraw consent at any time with the cookie settings button on the site. Withdrawal does not affect the lawfulness of processing before it. You can also delete cookies in your browser.

The buy buttons lead to the order page described under “Buying and your licence”.

E-mails we send

We only send messages about your order, licence and contract:

the order confirmation with your licence key and attachments (the Terms and the withdrawal instructions and form);
invoices;
confirmation of a plan change;
notice of a failed payment, confirmation of cancellation and notice that a subscription has ended;
your licence key when you ask for it;
confirmation of receipt of a withdrawal;
a request for correct invoice details (such as an OIB), when needed;
notices of changes to the price, the content of the service, the Terms or this policy.

We send e-mails from noreply@easyformstudio.com through the Resend service, and your replies reach easyformstudio@gmail.com. For each message we record its type, recipient, time and whether delivery succeeded, as proof that we sent it. We do not send newsletters or marketing e-mails.

Purpose: performing the contract and our duties to inform consumers.

3. Legal bases

Contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR): buying and the licence, delivering the key, billing, licence and update checks, the Account panel, web publishing, the AI assistant when you send it a message, support and e-mails about the contract.
Legal obligation (Article 6(1)(c)): invoices and fiscalisation, accounting records, consumer complaints, receiving and carrying out withdrawals and the confirmations we must give you on a durable medium.
Legitimate interest (Article 6(1)(f)): proof of orders and accepted terms (the order record with the IP address and browser identifier, records of sent e-mails), preventing fraud and misuse of keys, security and troubleshooting (server logs and update-check records), and establishing and defending legal claims. Our interest is being able to prove what was agreed and to protect the service. You can object to this processing (section 7).
Consent (Article 6(1)(a)): analytics and marketing cookies on the website. You can withdraw consent at any time.

The order and invoice details are needed to conclude the contract and issue invoices; without them we cannot sell you a licence. The add-on has to send the licence key for the licence to work. Web publishing, the AI assistant and analytics cookies are optional.

We do not use profiling or automated decision-making. The only automatic consequence is the one in the contract: when a subscription or trial ends, exports are locked until you renew.

4. Recipients and processors

We share data only with service providers that help us provide the service, and only as far as their task requires. Processors process data on our instructions.

Stripe (Stripe Payments Europe, Ltd., Ireland, and affiliates in the USA): card payments, subscriptions and refunds. For card data Stripe is an independent controller under its own privacy policy (stripe.com/privacy).
Hetzner Online GmbH (Germany): servers in the EU for the website, the order page, the database, published projects, the AI assistant and the invoicing system.
Resend (USA): sending e-mails; transfer based on standard contractual clauses and the EU–US Data Privacy Framework.
Cloudflare, Inc. (USA): file downloads through Cloudflare R2.
Google (Google Ireland Limited, Ireland, and Google LLC, USA): the support mailbox (Gmail), Google Analytics only with consent, and YouTube for embedded videos (policies.google.com/privacy).
Anthropic PBC (USA): the AI assistant, only when you use it (see “AI assistant”).
jsDelivr and unpkg (global content delivery networks): software libraries for the published project viewer; they see the visitor’s IP address.
Croatian Tax Administration (Porezna uprava, Croatia): fiscalisation of invoices, a legal obligation.

Codevo Fiskal is our own invoicing system, so it is not a processor. We give data to other authorities only when the law requires it. We do not sell data.

5. Transfers outside the European Economic Area

Stripe, Resend, Cloudflare, Google and Anthropic may process data outside the European Economic Area, mainly in the USA; jsDelivr and unpkg operate worldwide. Transfers are based on the European Commission’s adequacy decision (EU–US Data Privacy Framework) for recipients certified under it, and otherwise on the European Commission’s standard contractual clauses. You can ask for a copy of these safeguards at easyformstudio@gmail.com.

6. How long we keep data

User account and licence (e-mail, key, plan, status, dates): while the licence exists. When the contract ends (for example, a subscription ends and you do not renew it), we keep them for 5 more years and then delete them.
Order record and accepted terms, the copy of the Stripe payment record and records of sent e-mails: for the duration of the contract and 5 years after it ends.
Invoices and payment records: until 10 years after the end of the year they relate to (up to about 11 years).
Complaints: one year from receipt, or, if a dispute arises from the complaint, until it is resolved.
Withdrawal requests: 5 years from the withdrawal; refunds and related invoices are kept like other invoices.
Other support correspondence: for the duration of the contract and 5 years after it ends; if you are not a customer, one year from your last message.
Published projects: until you ask us to delete them.
AI assistant conversations: 30 days (see “AI assistant”).
Server logs and update-check records: up to 12 months.
Google Analytics: according to the Google Analytics setting, up to 14 months.

Data we must keep by law is not deleted before the legal period ends, even at your request; until then we only store it and do not use it for other purposes.

7. Your rights and how to use them

You have the right:

to access your data and receive a copy;
to have inaccurate data corrected;
to erasure, when the data is no longer needed or the processing is unlawful;
to restriction of processing;
to data portability for the data you gave us, in a common machine-readable format;
to object to processing based on legitimate interest;
to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to easyformstudio@gmail.com, if possible from the e-mail address you used to buy the licence. If we cannot confirm that the request is yours, we will ask for further confirmation. We reply without undue delay and at the latest within one month; for complex requests we may extend this by two more months and will tell you so. Exercising your rights is free of charge.

Deleting your licence data means the key stops working, so cancel your subscription first. Data we must keep by law (such as invoices) cannot be deleted before the legal period ends.

8. Complaint to the supervisory authority

If you believe we process your data in breach of the law, you can lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the supervisory authority of the EU member state where you live or work. You can contact us first and we will try to solve the problem, but you do not have to.

9. Security

We protect data with technical and organisational measures: encrypted connections (HTTPS) for the website, the order page, the add-on and published projects; servers in the EU behind a firewall; access to data only for the owner of the business; two-factor login for the website administration; and backups. We never see or store card details.

Keep your licence key like a password: anyone who has it can use your licence and open your Account panel. If you think someone else has learned it, contact us.

Children’s Privacy

Easy Form Studio is meant for adults and professionals, not for children. We do not knowingly collect personal data of children under 16. If you are a parent or guardian and believe a child has sent us personal data, contact us and we will delete it.

10. Changes to this policy

The version and the date from which it applies are shown at the top of this page, and earlier versions remain available on the website. We will inform customers of material changes by e-mail before they take effect.

11. Contact

CODEVO, obrt za računalne i druge usluge, vl. Ivan Babić
Krotovica 16, 10040 Zagreb, Croatia
E-mail: easyformstudio@gmail.com
Phone: +385 95 353 9388

More seller details, complaints and out-of-court dispute resolution: Contact.