Privacy Policy

Last updated: 2026-05-12

What this policy covers

This Privacy Policy explains what data IncudoCAD collects when you use the Service at incudocad.com, how we use it, and the choices you have. Capitalized terms (Service, Customer, Service Data, Output, Standard Tier, Enterprise Tier) are defined in our Terms of Service.

What we collect

  • Service Data: the files, parameters, and metadata you submit to the Service (for example, an STL upload plus the request parameters that go with it).
  • Account information: name, email, and billing contact for the person or organization holding the account.
  • Authentication credentials: API keys and account passwords. We store and access these as described in the Data Handling Policy.
  • Usage logs: request metadata, IP address, timestamps, and conversion outcomes (success, confidence score, error states).
  • Cookies and similar technologies: on the web app, we use essential and functional cookies only. No third-party advertising trackers in v1.

How we use your data

We use the data above to:

  • Provide the Service: run conversions, return Output, and keep your account working.
  • Train and improve our models on Standard Tier. We may use Service Data submitted under the Standard Tier to improve, train, and evaluate the IncudoCAD models and Service. Customers on the Enterprise Tier receive a no-training commitment: Service Data submitted under Enterprise is not used for model training, fine-tuning, or evaluation. Aggregated and de-identified data may be used regardless of tier.
  • Bill you: calculate usage, issue invoices, and process payments through our third-party payment processor.
  • Keep the Service secure: detect abuse, fraud, and attacks; protect Customer data and the integrity of the Service.
  • Support you: respond to questions, investigate issues, and help with integration.
  • Understand product use in aggregate: measure performance, reliability, and feature adoption using aggregated metrics.
  • Meet legal obligations: respond to lawful requests and comply with applicable law.

How we share your data

  • With our subprocessors: infrastructure, storage, compute, and payment providers that operate the Service on our behalf. See the Subprocessor List for the current set.
  • With your authorized users: people you give access to under your Customer account.
  • For legal and safety reasons: to comply with law, enforce our Terms, protect the Service, or respond to lawful requests.
  • In a corporate transaction: if IncudoCAD is involved in a merger, acquisition, reorganization, or sale of assets, data may transfer as part of that transaction, subject to this Policy.

We do not sell Service Data, and we do not share Service Data for cross-context behavioral advertising.

California (CCPA)

If you are a California resident, you have rights to know what personal information we hold about you, to request deletion, and to opt out of "sales" of personal information. We do not sell Service Data. To exercise any of these rights, email legal@incudocad.com.

EU and UK (GDPR-flavored)

If you are in the EU or UK, our lawful basis for processing Service Data is performance of our contract with you and our legitimate interest in improving the Service (which covers Standard Tier model training and evaluation). You have rights to access, correct, delete, restrict, and port your personal data, and to withdraw consent where processing relies on it. You may also lodge a complaint with your local supervisory authority. Customers requiring a Data Processing Agreement may contact us.

How long we keep your data

Retention windows for Service Data, Output, and logs are specified in the Data Handling Policy. We don't restate them here so there is one source of truth.

Security

We apply technical and organizational measures described in the Data Handling Policy.

International transfers

Service Data may be processed in the regions where our subprocessors operate. See the Subprocessor List for current locations. Where applicable, we use standard contractual safeguards to support cross-border transfers.

Children

The Service is not directed at, and is not intended for use by, individuals under 16. We do not knowingly collect data from them. If you believe a child has provided data to us, contact legal@incudocad.com and we will delete it.

Changes to this Policy

We may update this Policy. For material changes, we will give reasonable notice (for example, by email to the account contact or a notice in the Service). Continued use of the Service after the effective date of an update means you accept the updated Policy.

Contact

For privacy questions or to exercise any rights described here, including access and deletion requests, email legal@incudocad.com. We aim to respond within a reasonable timeframe.

Effective 2026-05-12 · Contact: legal@incudocad.com