Who is responsible
The controller is Henri Hanot, a sole trader (entrepreneur individuel, EI), 1, la Barre, 36220 Mérigny, France. Questions about your data go to contact@tesselbee.com.
TesselBee has not appointed a data protection officer; write to that address directly.
What we collect
Your account
Username, email address and whether it's verified, interface language, creation and update dates. We never store your password, only an argon2id hash of it that can't be reversed. When you sign up, we record which version of the terms you accepted, and when.
If you sign in with Google, Google sends us your Google ID, email address, display name and profile picture URL (the openid, email and profile scopes). We don't keep the picture URL, since nothing in the app shows it.
Your work
Projects (graphs, thumbnails, settings, version history), files you upload (content, original name, type, size), and the share links you create. If you publish to the Marketplace: author name, title, description, images, licence, a copy of the graph and the files it uses, and how many times the listing was opened.
Your subscription
Your plan, trial dates, Stripe customer and subscription IDs, subscription status and period, and the notifications Stripe sends us. You type your card number on Stripe's page; it never reaches us. Before payment, we record your acceptance of the terms of sale (version and date) and whether you asked to start straight away; if you withdraw, the date and the amount refunded.
Usage and security
- When your editor sessions start and end. No IP address, no browser details.
- Failed sign-in attempts (username and time), and the IP address they came from, to slow down repeated guessing.
- When your device tokens (desktop app, MCP bridge) and agent tokens were last used.
- Administrator actions on accounts, in an audit log.
- Server logs: request, time, request ID, errors.
Problem reports
When you use "Report a problem": your message, your browser's user agent, OS, screen and GPU, a capture of the 3D view, the display settings, the open graph and the session log. The form lists each item before sending, and you can untick any of them.
Invitations
If someone invites you: your email address, their message, and whether you opened the invitation.
tesselbee.com
The mailing list keeps your email address, the page language, the date, and the IP address and browser used to sign up, as proof of consent.
How we measure the site's audience is explained below, under "Site audience measurement".
Why, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating your account and signing you in | Performance of the contract |
| Saving, displaying, sharing and publishing your work | Performance of the contract |
| Running the trial, the subscription and payments | Performance of the contract |
| Keeping accounting records | Legal obligation |
| Proving acceptance of the terms of sale, handling a withdrawal | Legal obligation |
| Service emails: address verification, password reset, account deletion, invitations | Performance of the contract |
| Protecting accounts, preventing abuse, investigating incidents | Legitimate interest: keeping the service and its users safe |
| Measuring editor usage (session length) | Legitimate interest: improving the product |
| Handling your problem reports | Legitimate interest: fixing what you tell us about |
| Handling illegal content notices, answering authorities | Legal obligation |
| Sending TesselBee news | Consent, which you can withdraw at any time |
| Site audience measurement | Legitimate interest, within the CNIL's consent exemption |
We don't sell your data and we don't run ads. No decision with legal effects on you is made by automated means.
We can't open an account without an email address, or start a subscription without payment. Everything else follows from how you use the service.
Who can see it
TesselBee administrators, each to the extent their work needs. And these providers, only for what they do on our behalf:
| Provider | Role | Location |
|---|---|---|
| IONOS SARL (France) | Hosting of servers, databases and files | France |
| Stripe Payments Europe, Ltd. | Payments, invoices, customer portal | Ireland; transfers to the US under Stripe's safeguards |
| Sweego | Sending service emails | France |
| Brevo (Sendinblue SAS) | Site mailing list | France |
| Google Ireland Limited | "Sign in with Google", if you use it | Ireland, US |
For some purposes, such as fraud prevention, Stripe acts as a separate controller under its own privacy policy.
Problem reports land in our task tracker, also hosted by IONOS SARL.
Whatever you make public is public: a share link opens without an account, and a Marketplace listing is visible to every visitor.
The MCP bridge connects your tab to an AI agent you pick, on your own computer. What that agent reads goes to its provider under the provider's terms. None of it passes through TesselBee.
We disclose data to authorities when the law requires it.
Transfers outside the EU
Stripe and Google may process data in the US, under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
TesselBee sends your projects to no AI provider. The MCP bridge does pass what the agent you connect reads to that agent's own provider, on your instructions (see "Who can see it").
How long we keep it
| Data | Kept for |
|---|---|
| Account, projects, files | As long as the account exists. When it is deleted, they are erased straight away and any running subscription is cancelled |
| Marketplace listings | Until you withdraw them or delete your account |
| Invoices and accounting records | 10 years (French Commercial Code, Art. L123-22) |
| Acceptance of the terms of sale, withdrawals | 5 years (limitation period, French Civil Code art. 2224) |
| Failed sign-in attempts | 24 hours |
| Log of administrator actions | 1 year |
| Notifications from Stripe | 90 days |
| Editor sessions | 400 days |
| Agent and device tokens | Their lifetime (90 and 180 days), then 30 days |
| Verification and reset links | 24 hours and 1 hour |
| Invitations | Until they expire (14 days by default, 90 at most), then 90 days |
| Server logs | A few weeks: they rotate by size (five 20 MB files per service), one year at most |
| Problem reports | 2 years |
| Mailing list | Until you unsubscribe; proof of consent 3 more years |
| Backups | 3 months at most: the last 7 days, one a week for 4 weeks, one a month for 3 months |
| Record of a deleted account (its technical id, no name or address) | 25 months, so that restoring a backup never brings an erased account back |
| Site audience data | 25 months |
Site audience measurement
We count visits to tesselbee.com ourselves, with no measurement cookie and nothing stored in your browser. For each page view we record the page, the referring site and campaign parameters (utm), the country derived from your IP address, browser, OS and device type (desktop, mobile, tablet), screen and window size, pointer type, whether you asked for reduced motion, whether WebGPU is available, load times, time on page, scroll depth, sections seen and some clicks.
Your IP address isn't kept. Visitors are counted with a hash of IP address and browser, salted with a random value that is replaced and deleted every day, so you can't be recognised from one day to the next. We don't read your GPU's name, your CPU, memory, time zone or languages. The data only feeds visit statistics. It isn't combined with anything else or shared with anyone, and it's deleted after 25 months.
This fits the consent exemption the CNIL grants to audience measurement. You can still opt out: we then set a tb_notrack cookie, valid for 13 months, that stops all measurement in this browser. Browsers that send Global Privacy Control or Do Not Track aren't measured either.
Your browser is currently counted. Stop counting me
How we protect it
- Every connection uses HTTPS.
- Passwords are stored as argon2id hashes.
- The session cookie is HttpOnly and Secure. Access tokens are signed and expire after 10 minutes.
- Links we email are stored as hashes and expire.
- You pay on a Stripe page, so card data never touches our servers.
- Stripe notifications are rejected unless their signature checks out.
- Sign-in attempts are rate-limited, and administrator actions are logged.
- Projects are private by default. They only become visible through a share link or a listing you create.
- A nightly backup of the databases and files, encrypted (AES-256-GCM) before it is written and kept on IONOS servers in France. We keep the copies of the last 7 days, one a week for 4 weeks and one a month for 3 months, so erased data leaves the backups within 3 months.
If a data breach puts you at risk, we notify the CNIL (the French data protection authority) within 72 hours, and tell you directly when the risk is high (GDPR Articles 33 and 34).
How we contact you
By email, at your account address, from no-reply@tesselbee.com: address verification, password resets, the deletion link for an account without a password, deletion confirmation, invitations. The receipt for a withdrawal goes to the address you gave at checkout. Receipts and invoices come from Stripe.
TesselBee news only goes to people who joined the list on the site, with an unsubscribe link in every email.
We will never ask for your password or card number, by email or any other way.
Your rights
You can access your data, have it corrected or erased, restrict its use, get a machine-readable copy, object to processing based on our legitimate interest, and withdraw consent at any time. Under French law you can also leave instructions on what happens to your data after your death.
Email contact@tesselbee.com from your account address. We answer within a month; a request from another address may need proof of identity.
You can delete your account from the "Danger zone" on account.tesselbee.com: with your password, or through a link we email you if you sign in with Google. You can export your models from the editor at any time as glTF, GLB or USD.
If you think your rights aren't being respected, you can complain to the CNIL at cnil.fr/fr/plaintes, or to the data protection authority where you live.
Children
TesselBee isn't meant for anyone under 15. Minors need a parent's or guardian's consent to buy a subscription.
Changes
The date at the top changes with every version. Before a significant change, we email everyone who has an account.