Privacy Policy

CavityX simulation service — effective 16 October 2026. This policy explains what we collect, why, and the controls you have over it.

Your CAD stays yours. Customer CAD files and the results we compute from them are stored per-account and are deletable on request — you can delete individual files, a whole project, or your entire account at any time. We never use your files to train models or to serve other customers.

About the results. CavityX results are engineering estimates, not a substitute for physical trial molds or certified Moldflow analysis. This policy covers the data behind those estimates; the Terms of Service cover how you may use them, including cancellation of your subscription at any time.

1. What we collect

Account data. The name, email and password you give us to create an account. Passwords are stored hashed, never in plain text.
Your files. The part files you upload (STEP, STP, BREP, IGES, STL) and the run results and reports we generate from them. These are stored under your account.
Usage data. A per-run ledger: run id, date, part size, mesh size, CPU time and wall time. This is what powers your usage card and any overage billing.
Technical data. Browser type, IP address and the standard server logs needed to keep the service secure and running.

2. How we use it

To run the simulations you request and store the results for you.
To meter usage and bill for paid plans and overage, accurately and only for runs you actually made.
To operate, secure and improve the service (for example, capacity planning and bug diagnosis from aggregate logs).
To send you service messages (billing, security, material changes to these policies). We do not send marketing to your account email without a separate opt-in.

3. Your CAD data — handling and deletion

Files are stored per-account and are accessible only to you. We do not share your files with other customers, and we do not sell them.
When you delete a file, project or account, we remove it from active storage within 30 days. Deletion of an account removes all files, runs and reports for that account.
Backups: deleted data may remain in encrypted backup archives until those archives roll over (up to 7 days for local backups), after which it is gone. We do not restore deleted data except to recover from a system failure.
If you are on object storage (S3/B2), the same deletion applies to the off-site copies.

4. What we do not do

We do not use your CAD files or results to train machine-learning models.
We do not use your files to generate results for other customers.
We do not sell your personal data or files.

5. Sharing

We share data only with: (a) processors who run our infrastructure (hosting, object storage, payment) under contract and only to provide the Service; and (b) where we are legally required to (for example, a valid legal process). We will tell you before any legally-required disclosure where the law allows.

6. Your rights

Access. Ask what we hold about you and your files.
Correction. Ask us to fix inaccurate account details.
Deletion. Delete files, a project, or your whole account, in the app or by request.
Portability. Export your run results and reports.
Where you are in the EEA/UK or Switzerland, you have the rights under the GDPR, including the right to lodge a complaint with a supervisory authority.

7. Security

We use TLS in transit and standard access controls at rest, and we limit internal access to your data to what is needed to operate the Service. No system is perfectly secure; if you believe your data has been compromised, contact us and we will investigate.

8. Changes

We may update this policy; material changes are announced by email at least 30 days before they take effect. The date at the top shows the current version.

9. Contact

Data questions and deletion requests: privacy@cavityx.example.