Data Handling Policy

Last updated: 2026-05-12

Scope

This Policy describes how IncudoCAD stores, processes, secures, and deletes Service Data and the operational data needed to run the Service. Capitalized terms (Service, Customer, Service Data, Output, Standard Tier, Enterprise Tier) have the meanings given in the Terms of Service. Where this Policy and the Privacy Policy address related topics, the Privacy Policy governs personal-data questions and this Policy governs operational handling of Service Data.

Where Service Data lives

  • Object storage and compute: Service Data is uploaded to managed object storage on AWS and GCP, and processed on compute instances on the same providers. Workers pull from a managed queue rather than accept inbound traffic on the public internet.
  • Optional GPU compute: when the Customer opts in to neural processing (use_neural=true), inference runs on managed GPU compute on AWS or GCP. Otherwise no Service Data reaches a GPU.

See 04-subprocessors.md for the canonical list of subprocessors, regions, and roles.

Retention schedule

| Data category | Retention | |---|---| | Service Data: successful processing (original upload) | Deleted within 24 hours of successful Output delivery, except where retained for training under the Standard Tier (see Training data below). | | Service Data: Outputs | Retained until the Customer deletes them or terminates. | | Service Data: failed processing | Retained up to 7 days to support diagnostic work, then deleted. | | Account and billing records | Retained as required by applicable tax and accounting law (typically up to 7 years), then deleted or anonymized. | | Server logs (request metadata, error logs) | Retained up to 90 days, then deleted or aggregated. | | Aggregated / de-identified analytics | Retained indefinitely. | | Training-data derivatives (Standard Tier only) | See Training data below. |

Enterprise Tier Service Data is excluded from training and follows the retention schedule above.

Training data (Standard Tier vs. Enterprise Tier)

  • Standard Tier. Service Data may be retained and processed beyond the 24-hour processing window for the purpose of training, fine-tuning, and evaluating IncudoCAD models. Where feasible, IncudoCAD applies de-identification and aggregation before such use.
  • Enterprise Tier. Service Data is not retained for, used for, or made available for model training, fine-tuning, or evaluation. Enterprise retention follows the schedule above.

This is a contractual commitment under the Enterprise Tier, not a marketing promise.

Encryption

  • In transit: TLS 1.2 or higher on all customer-facing endpoints and on internal connections to subprocessors.
  • At rest: server-side encryption (AES-256) on managed object storage. Database and disk storage on compute instances uses disk-level encryption.

Access controls

  • Production systems are accessible only to authorized engineering personnel.
  • Access is granted on a least-privilege basis. Credentials are rotated periodically.
  • All production access is logged.

Incident response

IncudoCAD maintains an incident-response process for unauthorized access, loss, or disclosure of Service Data. In the event of a confirmed incident materially affecting a Customer's Service Data, IncudoCAD will notify affected Customers without undue delay following confirmation, and where reasonably practicable within 72 hours of confirmation, by the email address on file. The notice will describe what is known, what is being done, and recommended Customer steps.

Customer responsibilities

  • Do not upload export-controlled geometry (ITAR, EAR, or equivalent). See Terms of Service §Acceptable Use.
  • Do not upload personal data of third parties without a lawful basis.
  • Safeguard your authentication credentials, including API keys and account passwords.
  • Verify Outputs are fit for downstream use. IncudoCAD does not warrant downstream manufacturing fitness.

Data export on termination

Customers may export Outputs via the API or in-product controls at any time before account closure. Following termination, exports remain available on request for 30 days, after which Output is deleted per the retention schedule above.

Subprocessors

IncudoCAD relies on the subprocessors listed in 04-subprocessors.md to deliver the Service. Material changes to the subprocessor roster will be communicated. Enterprise Tier Customers will have a reasonable opportunity to object before the change takes effect; Standard Tier Customers will be given advance notice.

Data deletion requests

  • Customers may request deletion of their Service Data at any time by emailing legal@incudocad.com or, when available, via in-product controls.
  • Verified deletion requests are completed within 30 days, extendable by up to 60 additional days where the request is complex or numerous, with notice to Customer. Deletion is subject to legal-hold and tax-record retention obligations.

International transfers

  • Service Data may be processed in any region in which IncudoCAD or its subprocessors operate. See 04-subprocessors.md for current regions.
  • Customers requiring single-region storage should contact legal@incudocad.com. Region commitments on the Standard Tier are best-effort. The Enterprise Tier supports contractual region commitments.

Changes to this Policy

IncudoCAD may update this Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Service after notice constitutes acceptance of the change.

Contact

For data-handling questions, deletion requests, and incident notifications: legal@incudocad.com.

Effective 2026-05-12 · Contact: legal@incudocad.com