Privacy Policy
Last updated: October 12, 2026
This policy explains what personal data CAD Assembler collects, why, and what you can do about it. CAD Assembler is operated by Cristian Eloy Lopez Zabala, an individual based in the Dominican Republic ("we", "us"). Contact: support@cadassembler.com.
In short: we collect what we need to run your account and nothing more. We don't sell your data, we don't show ads, and the website has no tracking cookies.
What we collect
| Data | Why | Where it's kept |
|---|---|---|
| Account: email address, password (stored only as a secure hash), your plan | To sign you in and give you your plan | Supabase (our database and login provider) |
| Your content: parts, assemblies, projects, files you upload, and the details you type in them (e.g. a project's client and address) | To store and show your work | Supabase |
| Billing: name, email, country, billing address, tax ID if you give one, subscription status | To charge you and issue invoices | Lemon Squeezy (we see the subscription, never your full card number) |
| Support emails: what you write to us | To answer you | Our email (Google Gmail, via Cloudflare email forwarding) |
| Technical logs: IP address, browser or app version, time of requests | Security, keeping the Service running | Our hosting providers, kept for a short time |
On the desktop app, "Remember me" keeps a sign-in token on your device so you stay signed in. Signing out deletes it.
Who we share it with
Only the service providers that run CAD Assembler for us, each bound to protect it:
- Supabase: database, file storage, sign-in
- Lemon Squeezy: payments, invoices, tax (Merchant of Record)
- Cloudflare: website hosting, domain, email forwarding
- Google: the support mailbox
We share data with authorities only when the law requires it. If CAD Assembler is ever sold or moved to a company, your data moves with it under this policy, and we'll tell you.
Some of these providers process data in the United States and other countries. They use standard safeguards (such as the EU Standard Contractual Clauses) for those transfers.
Cookies
The website uses no tracking or advertising cookies, and no analytics. The app uses only what's needed to keep you signed in.
How long we keep it
- Account and content: while your account exists. When you delete your account, we delete your data within 30 days (backups roll over soon after).
- Billing records: as long as tax law requires (Lemon Squeezy keeps its own records).
- Support emails: up to 3 years, then deleted.
Your rights
You can ask us to see, correct, export or delete your personal data, or object to how we use it, by writing to support@cadassembler.com. We answer within 30 days. If you're in the EU, UK or another region with data protection laws, you can also complain to your local authority.
Children
CAD Assembler isn't meant for anyone under 16, and we don't knowingly collect their data.
Security
Data is sent over encrypted connections (HTTPS). Each user can reach only their own data (row-level security in the database). Payment details never reach our systems.
Changes
We'll post any update here with its date, and email you about important changes.