NekoCADPrivacy policy
In plain words · not a substitute for the text below
- In Europe analytics is off until you say yes. Everywhere else it is on and the bar turns it off. The footer lets you change your mind at any time.
- Your designs stay on your computer. The app sends no telemetry unless you turn it on.
- The app checks a salted hash of your machine, and never the machine id itself.
- Stripe handles payments. We hold the card brand and the last four digits, and nothing more.
- We sell nothing about you, to anybody, ever. There is no advertising here.
Who is responsible for your data
NekoCAD LLC is the data controller for nekocad.com, for your account, and for the desktop app. The postal address and the support address are on the Contact page, and that is the address for any question in this document. NekoCAD is a small company and has no data protection officer, because the law does not ask a company of this size and this processing for one.
This policy answers Article 13 of the General Data Protection Regulation and section 22575 of the California Business and Professions Code. It covers everybody, wherever you live, because one honest answer is easier to keep true than several.
What we collect, why, and on what legal basis
We collect the least that the job needs. This is the whole list, and it is written from the database itself and not from memory.
- Waitlist
- Your email address, the page where you signed up, and the dates that you signed up, confirmed, and unsubscribed. Basis: your consent, which you give by confirming the link in the email and withdraw with the unsubscribe link.
- Account
- Your name, your email address, a hash of your password, and the second factor, the recovery codes, and the passkeys that you set up. Basis: the contract between us, because an account is how a license reaches you.
- Purchase
- What Stripe tells us about the payment: the amount, the currency, the tax, the status, your Stripe customer id, the card brand, and the last four digits. We never receive or hold the full card number. Basis: the contract, and the tax law that asks us to keep a record.
- Licenses and machines
- Your licenses, and for each activated computer a salted hash of the machine id, the name that you gave the computer, the platform, the app version, and the two letter country. Never the raw machine id, and never the IP address of the app. Basis: the contract, and our legitimate interest in stopping one license from serving a hundred people.
- Browser sessions
- For each signed-in session: the session id, the IP address, the browser user agent, and, when our proxy provides them, the country and the city. The account page shows you this list so that you can end a session that is not yours. Basis: our legitimate interest in the security of your account.
- Connected accounts
- If you sign in with Discord, Google, or GitHub: the account id at that provider, your handle there, your avatar address, and the access tokens, which are encrypted. Basis: your consent, given when you connect the account, and withdrawn when you unlink it.
- Messages to support
- Your name, your email address, the subject that you picked, and what you wrote. Basis: the contract where the message is about an order, and otherwise our legitimate interest in answering you.
- Measurement
- Google Analytics records the pages that you read, roughly where you are, and what kind of device you use. Google truncates the IP address before it stores anything. If you are in the European Economic Area, the United Kingdom, or Switzerland, none of this happens until you say yes to the cookie notice, and the basis is your consent. Everywhere else it starts when you arrive, the notice tells you so and gives you the button to stop it, and the basis is our legitimate interest in knowing which pages people read. Either way the Cookie settings link in the footer turns it off.
- Error reports
- When something breaks: the error, the page, the browser, and what the code was doing. We clear the user and the request headers of every report, so it carries no name, no email address, no IP address, and no cookie. Basis: our legitimate interest in finding out that the site is broken, and you may object to it.
How long we keep it
We delete what we no longer need. Where the law sets the period, the law wins. Where it does not, these are the periods that we hold ourselves to.
- Waitlist
- Until you unsubscribe. After that we keep the address and the unsubscribe date alone, so that the address is never added again. Ask, and we delete that too.
- Account and licenses
- Until you delete your account, or until you ask us to delete it.
- Orders and receipts
- Up to seven years after the order, because tax and accounting law asks for a record. This is the one thing that survives an account deletion, and it is reduced to the order itself.
- Browser sessions
- Until the session expires or you sign out, whichever comes first.
- Activations
- Until you remove the computer, and for 90 days after that.
- Messages to support
- Two years, so that we can read the history of a problem.
- Measurement
- 14 months at Google, which is the shortest period that Google Analytics offers for this data.
- Error reports
- 90 days at Sentry, and then they are deleted.
Who else sees it
We do not sell your data, we do not rent it, and we do not share it for advertising. We have never done so and we do not intend to. These are the companies that handle a part of it so that NekoCAD can work, and each one is bound by a contract to use it only for that job.
- Stripe
- Payments, tax, receipts, and card disputes. Stripe is the merchant of record.
- Resend
- Sends the email: the confirmation, your license, the receipts, and the answers.
- OVHcloud
- The server that runs nekocad.com, in Vint Hill, Virginia, United States.
- Cloudflare
- Sits in front of the site, serves the downloads, and holds the backups.
- Backblaze B2
- Holds the installers, the update manifests, and the source snapshots.
- Discord
- Receives a message that you send through the Contact form, in a channel that only NekoCAD staff can read, and provides the sign-in if you connect a Discord account.
- Google and GitHub
- Provide the sign-in, and only if you connect one of those accounts.
- Google Analytics
- Counts the pages. In Europe nothing of Google loads until you say yes to the cookie notice. Everywhere else it loads when you arrive, and the notice gives you the button that turns it off.
- Sentry
- Receives the errors of the site and of the server, with the person taken out of each one before it is sent.
We give data to nobody else, unless a valid legal order makes us. If that happens we will tell you, unless the order forbids it.
Where your data is
NekoCAD is a United States company and its server is in the United States. If you are in the European Union, the United Kingdom, Switzerland, or another place with rules about sending data abroad, then using NekoCAD sends your data to the United States.
Each company in the list above is bound either by an adequacy decision of the European Commission, for example the EU-US Data Privacy Framework, or by the Standard Contractual Clauses. Ask us and we will tell you which one covers which company.
The desktop app
Your designs stay on your computer. The app does not send a model, a drawing, or a file anywhere, unless you choose to share it.
The app talks to nekocad.com for two things: to check that your license is valid, and to look for an update. A license check sends a salted hash of the machine id, the name that you gave the computer, the platform, and the app version. It does not send the raw machine id, and the server does not record the IP address of the app.
Crash reports are off until you turn them on in the settings. They never include your files. Telemetry of any other kind does not exist in the app.
Your rights, and how to use them
You can ask for a copy of your data, a correction, a deletion, a restriction of what we do with it, or a copy in a portable format. Where we rely on your consent you can withdraw it at any time, and where we rely on a legitimate interest you can object to it. In California you may ask what we collect and ask us to delete it, and we will not treat you differently for asking.
Write through the Contact page or to the support address. We answer within two business days, and we complete the request within 30 days. We do not charge for this and we do not ask you to fill in a form. The unsubscribe link in each waitlist email takes you off the list at once, with no message to us.
If you think that we have your data wrong, tell us first, because it is usually faster. You also have the right to complain to your data protection authority: in the European Union that is the authority of the country where you live, and in the United Kingdom it is the Information Commissioner's Office.
Children
NekoCAD is not for children. You must be 16 or older to make an account or to buy a license, and we do not knowingly collect data from a child under 16. If you believe that a child has made an account, tell us and we will delete it.
How we look after it
Every connection to nekocad.com is encrypted. Passwords are hashed and never stored in a form that we can read. The tokens of a connected account are encrypted in the database. The private key that signs a license lives only in the environment of the server, and never in the database or the source.
No system is perfect. If a breach ever touches your data, we will tell you and the authority that the law names, inside the period that the law sets.
Changes to this policy
When this policy changes, the date at the top of the page changes with it, and each version stays online. A change that makes a real difference to you gets an email 30 days before it takes effect, to everybody who has an account or a license.