Privacy Policy

The short version

Scans you upload are processed and then automatically deleted from our servers within 24 hours — we don't keep them, build a dataset from them, or share them. Your account data is the minimum needed to run the service.

What we hold

Account: your email address and a salted hash of your password (we never store the password itself), your saved export preferences, and a history of builds (file names, sizes and results — not the scan contents).
Scans: uploaded scan files and generated models are stored transiently for processing and instant re-editing, then deleted automatically within 24 hours.
Teams and computers: business name and location, invited staff emails, team memberships, computer names, installation identifiers, credential hashes, last-seen times and access activity. Workspace owners can see team membership, computer access and the shared model count; members keep their own model history. Invitations expire after 7 days. We use device activity to review possible misuse, without automatically signing you out for changing networks.
Service improvement: to find problems and make AutoBuilder better, we record how each build went and how the website and desktop app are used: the settings chosen, the scan's size and format, timings, whether the model built or why it failed, screens visited, settings changed, errors shown, app version and an identifier for the computer. This is linked to your account and kept for up to 400 days. It never includes your scans, models, file names, patient names or the text engraved on a base.
Billing: handled by Stripe; we never see or store card numbers. Stripe's privacy policy applies to payment data.

Patient information

Scan files and their file names may contain patient information you control. You are responsible for having the appropriate basis (such as patient consent) to process it; we act on your instructions, keep it transient as described above, and apply encryption in transit. The desktop app either builds on your own computer (nothing is uploaded) or uploads scans the same way the web studio does, covered by the same 24-hour deletion promise.

What we don't do

No selling of data, no advertising use, no training datasets built from customer uploads.

Your rights

Email [contact email] to access, correct or delete your account data. Deleting your account removes it, subject to records we must keep for tax and accounting.