Privacy Policy

NullCAM is a US-based company providing GPU-native CAM software. This policy describes what data we collect and how we use it. Our service is intended for users in the United States and Canada.

From you directly:

• Email address when you create an account
• CAD files you upload for toolpath generation
• Payment details (handled by Stripe, not stored by us)
• Any support messages you send us

Automatically:

• IP address, and your browser's user agent (which names an in-app browser)
• One first-party cookie, __view_sid, that groups the pages of a visit
• When you arrive: the page, the address that linked you here, and any campaign tags on the link (?r=, utm_*, an ad click id)
• In your browser's local storage: the campaign code you last arrived with and when, used for one month to credit that campaign if you upload or sign up
• Device attributes: screen and window size, pixel density, colour depth, time zone, language, platform, CPU count, memory, connection type, colour-scheme and reduced-motion settings, and page load time
• Processing logs and usage metrics

We use no advertising pixels, third-party trackers or ad-platform conversion APIs. Campaigns are measured on our own servers, from the visits, uploads, sign-ups and purchases above.

• Processing your CAD files and generating toolpaths
• Running and improving our service
• Sending you account-related communications
• Training our algorithms (see next section)
• Preventing abuse and complying with law

Uploaded files and generated toolpaths are deleted after 90 days. Storage lifecycle rules do the deleting, on every bucket we write to.

Uploaded without an account? The same 90 days applies to you, and your upload is used to improve the product exactly as described below. What is shorter is your access: an anonymous result link stays valid for 1 hour after submission, after which you can no longer open it.

During this window, anonymized geometry may be used to improve our algorithms. Nothing is retained for training past the window.

Want your data deleted sooner? Email [email protected]

We don't sell your data. We share it only with:

• Infrastructure providers: Google Cloud for hosting, Stripe for payments
• Google Sign-In: Google sees that you signed in to NullCAM with your Google account
• Legal obligations: When required by law or to protect our rights
• Corporate transactions: If we're acquired or merged

TLS 1.3 in transit, AES-256 at rest, single-region GCP deployment in us-central1.

Details on our Security page.

• Request a copy of your data
• Request deletion of your account
• Opt out of training data usage

Email [email protected]

We may update this policy. Changes will be posted here with a new "last updated" date.

Questions? [email protected]