Assistant for Blender Privacy Policy
For the Assistant for Blender plugin in ChatGPT and Codex.
Last updated October 2, 2026
The short version
- Assistant for Blender connects ChatGPT and Codex to the Blender on your computer.
- We keep your email address (and a password hash, if you set one) and a list of the Blenders you've connected. That's all.
- Your prompts, scenes, scripts and screenshots pass through our relay on their way to and from your Blender. They are never stored or logged.
- No analytics or telemetry. Nothing is sold, and nothing is used for advertising or training.
- The plugin has no paid features and doesn't sell or offer subscriptions.
About this policy
This policy covers only the Assistant for Blender plugin for ChatGPT and Codex and the relay behind it (relay.mcp-for-blender.com), run by Siddharth Ahuja ("we", "us"). Our other products, the open-source MCP for Blender addon and server used on its own, and MCP for Blender Premium, are covered by the main Privacy Policy.
Categories of personal data we collect
- Account: your email address, a password if you choose to set one (stored only as a hash by Supabase), and when you signed in. You sign in with an email link or that password.
- Connected Blenders: for each Blender you connect, a description (for example "Blender 5.2 (macOS)"), when it was connected and last seen, and a hash of its access token. We never keep the token itself.
- Connection codes: the short code Blender shows while you connect it, until it expires (about ten minutes).
What we don't collect
Your prompts, the commands sent to Blender, the Python scripts run there, scene data and screenshots travel through the relay's memory between ChatGPT or Codex and your Blender. They are not written to disk, stored in a database or logged. The relay's logs contain only operational events, with no IP addresses and no content. The relay holds your IP address in memory for a few minutes only to limit how many requests one address can make; it is never stored or logged. The plugin sends no usage analytics or telemetry. We don't collect payment details: the plugin has no paid features.
Purposes of use
Only to run the plugin: to sign you in, to connect ChatGPT or Codex to your own Blender and no one else's, and to let you disconnect it. We don't use your data for advertising, profiling or training AI models, and we don't sell it.
Categories of recipients
- Supabase: sign-in and the database holding your account and connected Blenders.
- Fly.io: hosting for the relay.
- OpenAI: what you type in ChatGPT or Codex, and what the plugin returns to it (scene descriptions, screenshots), is handled by OpenAI under its own privacy policy.
- Services you turn on in the addon (asset libraries such as Poly Haven, or 3D generators): the addon contacts them directly from your computer when you ask, not through us.
We may disclose data if required by law. Data may be processed outside your country, including in the United States.
Data retention
- Account and connected Blenders: until you ask us to delete your account. Blenders you sign out stay listed as revoked.
- Connection codes: deleted shortly after they expire, about ten minutes after they are created.
- IP addresses used for rate limiting: kept in memory for a few minutes, never stored.
- Prompts, scenes, scripts and screenshots: not retained.
Your controls over your data
- Disconnect Blender at any time with Disconnect in the addon's ChatGPT section, or remove it from your account with Sign out.
- Remove the plugin's access from ChatGPT or Codex in that app's settings.
- Ask to see, export, correct or delete your data by emailing ahujasid@gmail.com. We'll delete your account and connected Blenders.
- In the EU, UK and other regions with data protection laws, you can also complain to your local regulator.
Safety
Scripts the plugin runs in Blender are checked in safe mode on our server: they can't access your file system, the network or other programs on your computer.
Children
Assistant for Blender is suitable for general audiences, including teenagers aged 13 to 17. It isn't directed at children under 13, and we don't knowingly collect personal data from children under 13. If you believe a child under 13 has given us their data, email us and we'll delete it.
Changes
If we change this policy we'll update the date above, and tell you about significant changes on this site or by email.
Contact
Siddharth Ahuja, ahujasid@gmail.com