Draft. Not in force.

Legal

Privacy policy

What data we collect when you upload designs and order boards, what we use it for, who receives it, how long we keep it, and your rights.

Updated 2026-11-11

DRAFT for legal review. Not in force.

This page is a draft written for a lawyer to review before launch. It is not legal advice.

1. Who is responsible for your data

The controller is [[OWNER: seller legal name]], registered in Singapore under number [[OWNER: registration number]], at [[OWNER: registered address]]. Contact for privacy questions: [[OWNER: contact e-mail]].

[[LAWYER: confirm whether an EU and a UK representative (and a named data-protection contact or DPO) are required for our sales pattern, and add their names and addresses here.]]

2. What we collect

  • Account data. Name, e-mail address, sign-in method, language, and how your account relates to an organisation and its roles.
  • Order and address data. Delivery and billing addresses, phone number for the courier, tax identifiers customs needs, quotes, orders, invoices and their history.
  • Design files. The board, parts-list and placement files you upload, and the analysis results we compute from them.
  • Conversation data. Engineering question threads about your orders, and support requests.
  • Payment data. We do not receive your card number: card payments are processed by Stripe. We keep the payment confirmations, references and refund records. Bank transfers appear on our bank statement.
  • Agent and key data. API keys you create (stored as hashes), the AI agents you allowed to act for you, and what they did within their permissions.
  • Technical data. Security and operations logs, and the cookies described on the cookies page.

3. What we use it for

  • To run the service: check your files, price, build, ship and support your orders.
  • To keep the service secure: sign-in, fraud and abuse prevention, and the destination and party screening the export policy describes.
  • To meet legal duties: invoices, tax records, customs papers and lawful requests.
  • To tell you about your orders.

[[DECIDE: marketing e-mail — with your opt-in consent / to existing customers about similar services with an opt-out in every mail; pick per market rules.]]

We do not sell personal data, and we do not use your design files for anything but your orders and the checks described on the site.

4. Your design files

Design files are the most sensitive data we hold.

  • They are stored privately. Staff access is limited by role to the people who need it for your order — for example the engineer who confirms it — and every staff access is logged.
  • Where a partner manufacturer builds part of your order, that partner receives the files needed for its part, under confidentiality obligations. This is disclosed at checkout.
  • They are never published and never used to train a model.

5. Who receives your data

  • The factory in Shenzhen, China that operates the service, whose staff run engineering, production and support. This means your data is accessed from China.

  • DHL Express, which receives the name, address and phone number needed to deliver and clear your parcel.

  • Stripe, which processes card payments.

  • Manufacturing partners, which receive the design files needed for the part of the order they build.

  • Service providers (sub-processors). Companies that run parts of the service for us — hosting, e-mail delivery, error tracking and the like.

    [[DECIDE: publish the sub-processor list, with notice of changes.]]

  • Authorities, where the law requires it.

[[LAWYER: confirm the transfer mechanism needed for storing the data in the United States and for staff access from China for EU/UK customers (standard clauses or equivalent), whether Singapore's PDPA changes anything, and whether China's rules on outbound data touch the factory's access to this service.]]

6. How long we keep it

  • Guests. If you upload and price without an account, the session's data is erased after 30 days.

  • Accounts. While your account exists. When you close it we erase what we no longer need; order, invoice and tax records are kept for the period the applicable law requires.

    [[DECIDE: retention years for order and invoice records, per tax law.]]

  • Design files. Erasure cannot recall copies already given to a manufacturing partner; those are deleted under our agreement with them.

    [[DECIDE: kept until account deletion / fixed period after last order.]]

  • Logs and mail records. [[DECIDE: retention for security logs and for the record of mail sent]].

7. Your rights

You can see the data we hold for you, correct it, and export it. You can ask us to erase it; we then erase what the law allows, keeping what tax and customs duties require us to keep.

[[LAWYER: list the full set of rights for EU/UK customers (access, rectification, erasure, restriction, portability, objection, complaint to a supervisory authority) in the form those laws expect, and any jurisdiction-specific rights worth naming elsewhere.]]

For anything on this page, write to [[OWNER: contact e-mail]]. Sign-in is needed for requests that must be tied to your account.

8. Who this service is for

The service is built for engineers and businesses. It is not directed at children [[DECIDE: minimum age, if the lawyer advises one — e.g. 16]].

9. Changes

We may change this policy; the current version and its date are on this page. Material changes are announced [[DECIDE: by e-mail to account holders / on this page]] before they take effect.