What we collect
- Account: your email address, name, shop name, and a hashed password (scrypt — we cannot read it).
- Work: the panels and jobs you save are stored as parameters — size, return, thickness, finish, extrusion, mount pattern. We do not store the DXF, OBJ, PDF or XLSX files we generate; they are built when you ask and sent to you.
- Usage: an event log of logins, exports, plan changes and admin actions, with the IP address the request came from. This is what lets us answer "did we export that file?"
- Payments: handled by Stripe (card) or PayPal. We receive the outcome, the amount and a customer reference — never a card number. Those processors have their own privacy terms.
Cookies
One cookie: a signed session token that keeps you signed in. No advertising cookies, no third-party analytics, no tracking pixels, no fonts fetched from anyone else.
Where it lives
Accounts and saved work are in a SQLite database on a Railway volume; the application runs in Railway's US region. Transactional email, once configured, is sent through Resend. We take a database backup you can download from the admin page.
What we don't do
We don't sell data, share it with advertisers, or use your drawings to train anything. Exports carry your shop name for traceability, which protects you as much as us — a drawing that turns up on another bench points at the account that produced it.
Deleting your data
Ask and we delete the account and its saved work; the event log keeps the record of the deletion (with your email) because audit history has to survive. Exported files are already in your possession and outside our control.
Contact
[email protected] for anything in this document.