Privacy notice
Your data, kept small.
Version 3 · updated 2026-10-14
Who we are
The data controller is 3Dio ApS, Denmark. Write to [email protected].
What we collect, and why
When you sign up on sweepcad.com we store:
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Your name or nickname and your email address | To give you access to SweepCAD and send you mails about your sign-up and access | Art. 6(1)(b) — needed for the service you asked for |
| Whether you want the newsletter, and when you said so | To send SweepCAD news, at most once a month — only if you ticked the box | Art. 6(1)(a) — your consent, which you can withdraw at any time |
| Which version of the disclaimer and this notice you accepted, and when | To document that you accepted the terms of use | Art. 6(1)(c) and (f) — record keeping |
We do not store your IP address, your browser details or any tracking data. The site sets no cookies for visitors and uses no analytics or advertising tools. Fonts and scripts come from our own server, not from third-party sites.
Testing period
SweepCAD is in its testing period. While it is, this is how the app itself handles your data:
- Your voice is never stored. Speech is turned into text by open models — Parakeet for English, our own model for Danish — running on SweepCAD’s own server, or on your own computer if you run SweepCAD there. Your voice is not sent to any third-party or proprietary speech service.
- Sessions are logged. The hosted app logs each session — what you do, the text your speech becomes, and what SweepCAD made of it — to find bugs and improve the tool. The log is not linked to your name or email, and the server shows a visitor only as a scrambled tag, never an IP address. Legal basis: Art. 6(1)(f) — our legitimate interest in testing and fixing SweepCAD. In the app, Workbench → Log → Clear log removes what your browser wrote, and you can object by writing to us.
- Saved parts, imported files and reports are kept on a server shared by the testers, so other testers can see them. Don’t save, import or report anything confidential.
- AI features go elsewhere, only when you use them. AI design, “Make it 3D” and “Make it Real” send your request — the text, sketch or picture and the part — to OpenRouter, which passes it to the AI model provider it picks; they may be outside the EU. During testing we try both commercial AI models and models that can be deployed locally, and may switch between them; local models are not guaranteed. If you’re asked for your own OpenRouter API key, your AI requests run under your OpenRouter account, and OpenRouter’s terms and privacy policy apply to them. Nothing else goes to proprietary AI unless you choose an AI feature.
How we protect it
- Your name and email are encrypted (AES-256-GCM) before they are written to the database; the keys are kept separately from the database.
- Your email is only searchable through a keyed one-way fingerprint, so duplicates can be prevented without the address being stored in clear.
- All traffic is encrypted (HTTPS). The database is not reachable from the internet.
Who processes it for us
| Processor | What | Where |
|---|---|---|
| Railway Corporation | Hosting of the website, the app and their databases | EU (Amsterdam) region |
| Sendinblue SAS (Brevo) | Sending the sign-up and access emails | EU (France) |
| Cloudflare, Inc. | Network, DNS and protection against abuse | Global network; EU Standard Contractual Clauses |
| Google Ireland Ltd. (Google Workspace) | Our [email protected] mailbox, if you write to us | EU / Standard Contractual Clauses |
| OpenRouter, Inc. | The AI features, only when you use them | USA; the AI providers may be elsewhere |
They process the data only for us, under their data processing terms. We never sell or share your data with anyone else.
How long we keep it
- Sign-ups that are not confirmed within 48 hours stop working and are deleted after 7 days.
- Confirmed sign-ups are kept until you delete them, or until SweepCAD is discontinued.
- If you turn the newsletter off, we stop sending it immediately.
- Session logs from the testing period are kept while they help us develop SweepCAD.
Your rights
You can ask to see, correct, export or delete your data, object to its use, or withdraw your consent at any time. Every email from us contains a “Manage or delete your data” link where you can turn the newsletter off, or delete everything yourself, instantly. You can also write to [email protected].
If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency, Datatilsynet — datatilsynet.dk.
Age
You must be at least 13 years old to sign up.
Payments
Support payments ($5 / $25) are handled entirely by Stripe on Stripe’s own pages; we never see your card details. Stripe’s privacy policy applies to the payment.