This policy explains what personal data we collect when you use the CADSECTION software, your CADSECTION account and this website, and what we do with it. The data is handled by Ramkrishna Barman, an individual software developer, Sajherpar Ghoramara, Cooch Behar, West Bengal – 736165, India ("we", "us"), who decides how it is used (the data fiduciary under the Digital Personal Data Protection Act, 2023).
What we collect
| Data | What it is |
|---|---|
| Account | Your name, company (if you give it), e-mail address, mobile number, GSTIN and state (if you give them). |
| Sign-in codes | The one-time codes we send you, stored only as a one-way hash and valid for 10 minutes. |
| Your PC | To tie a licence to one PC: one-way hashes (SHA-256) of the motherboard id, the Windows installation id, the processor id, the system disk serial and the network card address – not the ids themselves – plus the PC's name, the CADSECTION version, and whether it is a virtual machine. |
| Licences and purchases | Your plans, their dates, the PCs they are on, and your payments: item, amount, date and the Razorpay order and payment numbers. We never receive your card, UPI or bank details. |
| AI use | For each Copilot request: the time, its size (tokens), the credits and cost, and your internet address. Not the text of your request or the answer. |
| Security records | Internet addresses and times of sign-ins, trial starts and failed attempts, to stop abuse. |
| Acceptance records | Each time you accept the End User Licence Agreement, the terms and this policy: the version, the date and time, your internet address and the program or browser used. |
| AI app link | If you turn on the internet link for AI apps: the tools CADSECTION offers, a one-way hash of the link's secret address, when your PC last connected and the name of the app that connected (for example ChatGPT). Not the content of the requests or answers. |
| Downloads | When you download the installer: the time, the edition (64-bit or 32-bit), the version and your internet address. |
| Messages to us | What you write to us, and any file you attach (for example a problem report). |
What we do not collect: your projects, survey data and drawings. They stay on your PC, and so do your Copilot chats. Only what you choose to send to the Copilot, or attach to a message to us, leaves your PC.
The AI Copilot
When you ask the Copilot something, the text and files of that request (for example the sections it needs, or a photo of a level book) are sent through our server to our AI provider, Anthropic, PBC (United States), which produces the answer. We do not keep the content of requests or answers on our server. Anthropic processes them under its commercial terms for business customers.
AI apps
You can let AI apps of other companies – for example Claude Desktop, ChatGPT, Cursor or VS Code – work with CADSECTION. Such an app reads and changes your project through CADSECTION on your PC, and its maker (for example Anthropic or OpenAI) processes what the app reads under its own terms and privacy policy, not ours. Apps on your PC talk to CADSECTION directly on the PC; nothing goes through our server.
ChatGPT and Claude on the web can only reach internet addresses. If you turn on the internet link for them, their requests and CADSECTION's answers (which can include project data) pass through our server: each request is handed to your PC, and the request and the answer are deleted as soon as the app has the answer – at most an hour later if something goes wrong. You can turn the link off or change its address at any time in CADSECTION.
Why we use it
- To create and run your account, and to sign you in.
- To give you a licence, keep it on one PC, and check it from the software.
- To take payments, keep accounts and meet tax and legal obligations.
- To run the AI Copilot, count AI credits and apply fair-use limits.
- To pass requests between the AI apps you connect and CADSECTION on your PC, when you turn on the internet link.
- To prevent fraud: repeated trials, shared or cracked licences, passing on the installer, and misuse of the AI service.
- To keep evidence of the agreements you accepted, in case of a question or dispute.
- To answer your messages and send you service notices (renewals, payments, important changes). We send no marketing without your consent.
We use your data on the basis of your consent, given when you create an account and accept this policy together with the End User Licence Agreement and the terms, and for the legitimate uses the law allows, such as meeting legal obligations. We do not sell your data and we show no advertising.
Who processes it for us
- Google Cloud and Firebase (Google LLC): the server, the database and this website, in Google's Mumbai region (asia-south1).
- Razorpay (Razorpay Software Private Limited): payments.
- Anthropic (Anthropic, PBC): the AI Copilot, as described above.
- Google (Gmail) and, if we add one, an SMS service provider: to send sign-in codes and service e-mails.
They may use the data only to provide their service to us. We may also disclose data when Indian law or a lawful order requires it.
Where it is stored and how it is protected
Account, licence and payment data is stored in Google Cloud in Mumbai, India. AI requests are processed by Anthropic in the United States. Data is encrypted in transit (HTTPS), passwords and keys are kept in Google Secret Manager, codes and PC ids are stored only as hashes, and access to the data is limited to us.
How long we keep it
- Account, licence and AI-use records: while your account is open, and for up to 3 years after your last licence ends, to handle renewals, questions and disputes.
- Payment records: for as long as Indian tax and accounting laws require.
- Acceptance and download records: while your account is open and for up to 3 years after it is closed (the period in which a claim can be made), or longer while a dispute is open.
- Sign-in codes: they expire after 10 minutes and are deleted soon after.
- AI app link: requests and answers are deleted as soon as they are handed on (at most an hour); the link's settings until you make a new address or close your account.
- When you ask us to delete your account, we delete or anonymise your data within 30 days, except what the law requires us to keep.
This website
This website uses no advertising or tracking cookies and no analytics. When you sign in on My account, your browser keeps a sign-in token in its local storage until you sign out. The site's fonts are loaded from Google Fonts, so your browser connects to Google's servers to fetch them.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask us for a summary of the personal data we hold about you and how we use it, have it corrected or completed, have it erased, withdraw your consent (which closes your account), nominate a person to act for you, and have a grievance resolved. Write to the address below. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Children
CADSECTION is meant for professionals. You must be 18 or older to create an account, and we do not knowingly collect data about children.
Changes
We may update this policy; the date at the top shows the version in force. Important changes are announced on this website or by e-mail.
Contact and grievances
Ramkrishna Barman (grievance officer)
Sajherpar Ghoramara
Cooch Behar, West Bengal – 736165
India
E-mail cadsectionstudio@gmail.com (subject "Privacy" or "Grievance"), phone +91 89062 40692.
We acknowledge a grievance within 48 hours and resolve it within 30 days.