Privacy Policy

Last updated 30 September 2026

SurfaceCAD is run by Alberto Galván (“we”), an individual based in Nuevo León, Mexico. This policy explains what we collect when you use surfacecad.com, why, and what you can do about it. Questions: surfacecad.ai@gmail.com.

What we collect

Your Google account basics when you sign in: your name, email address, profile picture link and Google’s id for you. We never see your Google password.
Sign-in sessions: a random session id in a cookie (we store only a fingerprint of it), when it started and ends, and your browser’s user-agent text.
Your files: parts you save, STEP files you upload, folders, and export files (kept 24 hours). Your profile role and workspace name, if you set them.
AI assistant use (Pro): when you send a message, it goes to OpenAI together with what the assistant reads from your open part (its features, measurements and pictures of the view) so the model can answer. We keep a record of each request (time, number of steps, tokens used and cost), not the conversation text.
Connected AI apps: which apps you connected and a log of the tools they used on your parts (kept 30 days), shown to you in Settings.
Payments: Stripe handles your card; we never see or store card numbers. We keep your Stripe customer and subscription ids, the subscription status and its billing period.
Error reports: when something breaks in the app, the page address, the error message and your browser type, to fix it (kept 30 days).

Who processes it for us

Cloudflare: hosting, storage of your account and files, logs and aggregate, cookie-free visit counts.
Google: sign-in.
OpenAI: the AI assistant’s model. OpenAI keeps conversation state for up to 30 days and does not train on it.
Stripe: payments and invoices.

We do not sell your data, show ads, or share it with anyone else unless the law requires it.

Cookies and browser storage

One cookie keeps you signed in (sc_session, not readable by scripts). The app also keeps a copy of your open part and a few preferences in your browser’s storage so work survives a reload. There are no advertising or tracking cookies.

How long we keep it

Your account and files stay until you delete them. Deleting your account (Settings → Your data) removes your profile, files, sessions, activity and AI request records, ends any subscription and disconnects your AI apps. Stripe keeps payment records as tax law requires.

Your choices and rights

You can download everything in your account (Settings → Your data → Download my data), correct your profile, and delete your account at any time. For anything else, including questions under data-protection laws that apply to you, write to surfacecad.ai@gmail.com.

Children

SurfaceCAD is not meant for anyone under 16.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect.