1. Overview

This Privacy Policy describes how Prompt2CAD ("we", "us"), operated at prompt2cad.com, collects, uses, and protects your information when you use our Service.

2. Information We Collect

Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. This is used solely for authentication and displaying your identity within the app.

Billing information. Payment processing is handled entirely by Stripe. We do not store your credit card details. We store your credit balance in Cloudflare KV and your transaction history (amounts, timestamps, action type, token counts, internal cost) in Cloudflare D1, both keyed to your user ID.

Conversation data. Your chat messages, uploaded images, and the AI's responses are sent to Google's Gemini API for processing. Conversations (chat history, geometry code, parameters, checkpoints, renders) are stored in your browser's IndexedDB database. For signed-in users, project metadata and geometry are also synced to our servers (Cloudflare D1) so the same projects appear when you sign in on another device.

Uploaded images. Reference images you upload are sent to Google's Gemini API as part of the conversation context. They are persisted locally as part of the project, and synced to our servers for signed-in users alongside the rest of the project state.

Transactional emails. Onboarding and product emails (welcome message, tips, inspiration) are delivered through Resend. We send these to the email address Google provided at sign-in; every message contains an unsubscribe link that you can use to stop further emails at any time.

3. Analytics

We use the following analytics services to understand how the Service is used:

PostHog — product analytics (page views, feature usage, anonymous session data). PostHog's privacy policy: posthog.com/privacy.
Google Ads (gtag) — conversion tracking for advertising. Google's privacy policy: policies.google.com/privacy.

4. Third-Party Services

The Service relies on the following third-party providers, each with their own privacy policies:

Google — AI model provider (Gemini) and authentication (Google Sign-In). Your prompts, uploaded images, and the AI's responses are processed by the Gemini API. policies.google.com/privacy
Stripe — Payment processing. stripe.com/privacy
Cloudflare — Hosting, edge infrastructure, and managed storage (KV for credit balances, D1 for projects and transactions, R2 for material textures). cloudflare.com/privacypolicy
Resend — Transactional email delivery (onboarding sequence, feedback receipts). resend.com/legal/privacy-policy
PostHog — Product analytics (see Analytics section above). posthog.com/privacy

5. Local Storage

Your project data (3D models, conversation history, parameters, checkpoints, cached renders, and settings) is stored in your browser's IndexedDB database under the nameprompt2cad. Accounts created on earlier versions of the app may also retain residual entries in localStorage prefixed with 3dmg:; these are migrated automatically into IndexedDB on first use of the new schema.

For signed-in users, project metadata and geometry are synced to our servers (Cloudflare D1). Checkpoints and cached renders are local-only. Clearing your browser data will remove the local copy; synced projects can be recovered by signing in again.

6. Cookies

We use essential cookies for authentication sessions. Third-party analytics services (PostHog, Google) may set their own cookies. You can control cookie behavior through your browser settings.

7. Data Retention

Account data is retained as long as your account exists.
Billing records are retained as required for financial and legal compliance.
Analytics data is retained per the respective provider's policies.
Project data is stored locally in your browser and is under your control.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction or deletion of your personal data.
Object to or restrict processing of your data.
Request data portability.

To exercise these rights, contact us at support@prompt2cad.com.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at support@prompt2cad.com.