FacetCAM

Privacy Policy

Effective date: 21 April 2026

1. Introduction

This Privacy Policy describes how smartquark (“we”, “us”) collects, uses, and protects your personal data when you use FacetCAM (“the Service”). We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR), EU GDPR, and the California Consumer Privacy Act (CCPA), as applicable.

If you have any questions or wish to exercise your rights described below, contact us at [email protected].

2. Data We Collect

2.1 Account information

When you create an account, we collect your name and email address. If you sign in via a third-party provider (Google, GitHub), we also receive basic profile information from that provider.

2.2 Billing information

Payments are processed by Paddle.com Market Limited, which acts as our Merchant of Record. We do not store your payment card details. Paddle provides us with transaction confirmation data, including billing email, country, transaction ID, and amount.

2.3 Usage data

To operate and improve the Service, we record:

  • User events: actions you take in the app (design loads, job submissions, feature interactions). These are used for analytics and bug diagnosis.
  • Device information: browser type, operating system, screen resolution, GPU capabilities (for optimising the 3D renderer). This is inferred from the request, not from cookies or trackers.
  • Your content: faceting designs, scripts, G-code outputs, job history, and starred designs. These are stored on our servers so you can access them from any device.

2.4 Technical logs

Our servers automatically log IP addresses, request timestamps, and error traces for security, debugging, and abuse prevention purposes. These logs are retained for up to 90 days.

3. How We Use Your Data

We process your personal data for the following purposes:

  • Providing the Service (legal basis: contract — to deliver what you paid for or signed up to trial)
  • Processing payments (legal basis: contract — to collect payment and honour refunds)
  • Improving the Service (legal basis: legitimate interest — analytics help us understand which features matter and where bugs occur)
  • Communicating with you (legal basis: contract — for account notifications, receipts, password resets; legitimate interest — for important product updates)
  • Complying with legal obligations (legal basis: legal obligation — tax records, abuse investigation, law-enforcement requests)

4. Third Parties We Share Data With

We share data only with service providers who help us operate FacetCAM. Each is bound by a data processing agreement and is permitted to process your data only as instructed by us.

  • Neon, Inc. — PostgreSQL database hosting. Stores your account, content, and usage events.
  • Paddle.com Market Limited — billing and Merchant of Record. Processes payments and tax compliance.
  • Amazon Web Services (AWS) — hosts the application servers (EC2).

We do not sell your personal data to third parties. We do not share your data with advertisers.

5. Cookies

FacetCAM uses a small number of first-party cookies to keep you signed in and remember your preferences:

  • Session cookie (set by our authentication system): required to keep you signed in across page loads. Expires when you sign out or after 7 days of inactivity.
  • Preference cookies: remember your chosen theme, rendering quality, and library filters. Not shared with anyone.

We do not use third-party tracking, advertising, or social-media cookies. If we introduce analytics cookies in the future (for example, PostHog), we will ask for your consent first where required by law.

6. Data Retention

We retain your personal data only for as long as necessary:

  • Account and content data: retained for as long as your account is active, plus 30 days after account closure to allow recovery of accidental deletions.
  • Billing records: retained for 7 years (or as required by applicable tax law).
  • Technical logs: retained for up to 90 days, then automatically deleted.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure (“right to be forgotten”): request deletion of your data, subject to legal retention requirements.
  • Portability: export your designs and account data in a machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, email [email protected]. We respond within 30 days.

If you are in the EU or UK and believe we have mishandled your data, you have the right to lodge a complaint with your national supervisory authority (for the UK: the Information Commissioner's Office, ico.org.uk).

8. International Data Transfers

Our service providers may process your data outside your country of residence (for example, in the United States or European Union). Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to protect your data.

9. Security

We implement reasonable technical and organisational measures to protect your data, including:

  • HTTPS encryption for all data in transit
  • Encrypted database storage at the infrastructure level
  • Access controls limiting who on our team can view your data
  • Regular security reviews of our codebase and dependencies

No system is 100% secure. If we become aware of a security incident affecting your personal data, we will notify you as required by applicable law.

10. Children's Privacy

FacetCAM is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The “Effective date” at the top reflects the most recent update.

12. Contact

For any privacy-related questions or requests: