Privacy policy

How SurfCAD uses information to provide your workspace. Updated 1 October 2026.

Account and project information

We store account name, email, a password hash, verification information, projects and saved geometry revisions to provide sign-in, recovery and cloud editing.

Payments

Lemon Squeezy processes checkout. SurfCAD stores identifiers for checkout attempts, orders and subscriptions, payment status and paid-period information to connect purchases to your account. SurfCAD does not ask you to enter full card details in its own forms. Lemon Squeezy's handling is described in its privacy policy.

Consent and delivery records

For revision purchases we record the accepted terms version, acceptance time and IP address. File activity can record account, project, revision, linked order, format, quality, units, request or download-start time and IP address. These records help investigate delivery issues, refunds, fraud and payment disputes.

Cookies and local storage

Session and security cookies support sign-in and request protection. A one-year random browser cookie lets us count how many guests opened the editor in a month without counting repeat visits from the same browser. We store its one-way hash and the visit month, not the visitor's IP address, in monthly statistics. If that browser registers or signs in, we mark its guest visits accordingly. Browser storage can retain editor settings and local workspace information. Clearing browser data can remove those local settings or work; save a backup first.

Retention

Generated export files expire from the 24-hour cache and may be regenerated with valid access. Archived unpurchased revisions are eligible for deletion after 30 days. Guest editor visit identifiers are removed after the monthly statistics window. Account and active project data remain while needed to provide the workspace. Purchase acceptance and delivery records are retained separately from cached files so delivery evidence survives cache cleanup.

For account deletion, access or retention questions, contact us. Payment and dispute records may need to remain after other data is removed where necessary to resolve a dispute or meet applicable obligations.

Access and service providers

Authorized administrators may access information for support and security. Hosting and payment providers process information needed to operate the service. We do not make your private projects publicly accessible through the public sample links.

Your questions

Email support@surfcad.online from your account address to request access, correction or deletion. We may verify your identity before acting.