What DevXR protects, and what you choose
Models are private on upload. Management access is checked on the server against your account and organization permissions. Files undergo separate validation and processing before delivery; you decide whether a ready version becomes public.
Who can access my models?
Studio checks the account and organization permissions for management actions. Private models are limited to authorized people. Publishing creates a presentation available through its public link: check visibility before sending the URL.
What happens after an upload?
The file is isolated before validation. Processing checks the GLB structure and complexity limits, then prepares a viewable version. Supported FBX files are converted before GLB validation. The viewer does not serve an unvalidated original.
Technical validation does not establish your rights to an asset or whether it is confidential. Remove sensitive data from names, textures and metadata before upload.
Can someone forward a public link?
Yes. Anyone receiving a public link may forward it. Lack of indexing is not access control. Protected links and expiry depend on activation in your workspace; confirm these options with DevXR for confidential delivery.
Limiting the domains allowed to embed a viewer restricts host sites; it does not authenticate each visitor or prevent copying displayed content.
Can I withdraw a publication?
Unpublishing removes access through the service. It cannot recall copies or screenshots already made by recipients. Deleting a model is a separate action; keep your original. Confirm purge and backup timelines if your contract depends on them.
Where are models and other data hosted?
The API, 3D models, server logs and server backups are hosted by OVHcloud in Gravelines, France. Vercel serves the web pages. Firebase provides authentication and Firestore; the default database is configured in Paris.
This does not mean all data stays in France: some Google services, Vercel, Formspree and email have separate processing scopes. Contact DevXR about your project requirements.
What about a sensitive project?
HTTPS protects data in transit; it is not end-to-end encryption. DevXR claims no certification or absolute security here. Availability, retention and recovery commitments should be explicitly agreed before a project requiring them.
Contact DevXR or report an issue
Email devxr.fr@gmail.com with steps, the affected public URL and observed impact. Do not send passwords, private tokens or confidential client files. We use this information to review your request.
Frequently asked questions
Does an uploaded model become public?
No. Publishing a ready version is an explicit action in Studio.
Does a public link prevent copying?
No. Viewing requires sending data to the browser, so this cannot imply absolute copy protection.
Is all data hosted in France?
No. Models and the API are hosted in France, while web pages, Google services, forms and email have separate scopes.