Legal
Privacy Policy
Last Updated: September 30, 2026 – Version 2.0.1
This Privacy Policy explains MecAgent Inc.’s (“MecAgent,” “we,” us,” or “our”) information practices and the choices you can make about the way your personal information is collected, used, and shared in connection with our website, application, and features (the “Services”).
Personal information that we handle on behalf of our enterprise customers in our role as a service provider / data processor is governed by our Data Protection Addendum.
PERSONAL INFORMATION WE COLLECT
Here’s how we collect personal information in providing our Services.
Personal information we receive from you | |
Data Categories | Examples |
Contact Details | First and last name and email address. |
Login Details | Hashed password. |
File Metadata | Metadata associated with uploaded files, such as document properties, folder paths, comments, annotations, or other embedded metadata, to the extent it contains personal information. |
Payment Data | Payment card information, bank account information and other billing details you provide to subscribe to the Services. This information may be processed by our payment service providers, such as Stripe, which handle your payment information in accordance with their own privacy policies. |
Preferences | Language, interests, and other feedback/preferences that you might express during your use of our Services. |
Marketing Data | Choices regarding our newsletters, surveys, and other marketing displayed or provided to you, and preferred methods of receiving such promotional communication. |
Relationship Information | Details of your communications with us, complaints, and queries. |
Uploaded Content | Files and documents of any type that you upload or submit to the Services, including to our AI assistant (the “Agent”), to cloud processing features, or as reusable knowledge files (for example PDFs, images, spreadsheets, and CAD files), together with the content of your prompts and instructions. Such content may contain personal information about you or about other individuals; you are responsible for having the right to share it with us. |
Personal information collected automatically through your use of our Services | |
Data Categories | Examples |
Online Activity Data | Pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them. |
Device Information | Your device’s operating system type and version, manufacturer and model, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information. |
Agent Session Data | Information captured automatically when the Agent operates within your CAD application on your device, including screenshots of your CAD application and related windows (which may include personal information visible on your screen), data and metadata of the CAD documents you are working on, the history of your conversations with the Agent, and logs of the actions the Agent performed. |
Locally Collected CAD Files | If you use the Free-Tier Service (as defined in our Terms and Conditions), CAD files in supported formats (.sldprt, .sldasm, and .slddrw) that our software automatically collects from your device, as described in Section 5.2 of our Terms and Conditions, including any personal information contained in those files or in their metadata. |
We use the following tools for automatic data collection | |
Cookies | Cookies are pieces of information stored directly on the device that you are using and allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other traffic data. We and our service providers may use the information for security purposes, to facilitate navigation, display targeted advertisements, display information more effectively, and conduct analytics. We do not currently respond to browser do-not-track signals. You can read more information about cookies at http://www.allaboutcookies.org/manage-cookies/index.html. |
Local Storage Technologies | These technologies provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications. |
Pixel Tags | Also known as web beacons and clear GIFs, pixel tags may be used to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the Services and response rates. |
Other sources from which we collect personal information | |
Social Media | Information we collect from social media sites may include details such as social media account ID and other public social media profile information. |
Other Third Parties | We may collect information from third-party sources such as publicly available databases. |
HOW WE USE PERSONAL INFORMATION
Here’s an overview of how we use personal information in providing our Services.
Purposes | Examples |
Administering the Services | We may use personal information to provide the Services to you, including arranging access to your account, verifying your information, responding to your inquiries, fulfilling your requests, and sending you administrative information such as agreements to provide the Services and changes to our terms, conditions, and policies. |
Operations and General Business | We may use personal information when we conduct our operations (such as troubleshooting, diagnostic testing, performance analyses of our systems and Services, testing of new system features to evaluate their impact, system and log maintenance, technical support, system debugging, and hosting data) and to facilitate mergers, acquisitions, and other reorganizations and restructurings of our business (including prospective transactions). |
Marketing | We may use personal information to send you our newsletters, publications, updates, and invitations that we think may be of interest to you. |
Targeted Advertising | We may engage advertising partners, including third-party advertising companies and social media companies, to display ads to you on other websites and online services. These companies may use cookies and similar technologies to collect information about your interaction over time across the Services, our communications, and other online services, and use that information to serve online ads that they think will interest you. We may also share information about our users with these companies to facilitate interest-based advertising to our or similar users on other online platforms. |
Relationship Building and Engagement | We may use personal information to respond to any posts on our social media pages and to conduct other user relationship building activities. |
Improving and Developing Our Services | We may use personal information to conduct data analysis, to monitor and analyze use of the Services, to use data analytics to improve the efficiency of our Services, to develop new features, to enhance, improve, repair, maintain, or modify our Services, to identify usage trends, to determine the effectiveness of our promotional campaigns, and for other similar purposes. |
Aggregation and/or Anonymization | We may anonymize and aggregate personal information that does not identify you or another individual and use and share such data for our own business purposes. |
Security and Fraud Prevention | We may use personal information to conduct audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements, to monitor for and prevent fraud, and for security purposes, including maintaining system security. |
Legal and Compliance | We may use personal information to fulfill our legal and compliance-related obligations, including complying with applicable laws, complying with legal processes, responding to requests from public and government authorities, meeting national security or law enforcement requirements, complying with requirements set by industry-specific supervisory bodies, enforcing our terms and conditions and standards, protecting our operations, protecting the rights, privacy, or property of our business, responding to auditors, pursuing available legal remedies, making insurance claims, defending claims, and limiting the damages that we may sustain. |
Providing AI Features | We process Uploaded Content and Agent Session Data to generate responses, drawings, models, macros, and actions in your CAD application, and to perform the cloud processing tasks you request. Where a cloud processing task is completed, reviewed, or corrected by a person, that person will access the relevant content (see “Human Review” below). |
Training and Improving AI Models | For Free-Tier users, we use Uploaded Content, Agent Session Data, and Locally Collected CAD Files to train, develop, and improve our AI models and Services, as described in Section 7.1 of our Terms and Conditions. We do not use content from paid Subscription customers to train our models, as described in Section 7.2 of our Terms and Conditions. |
Licensing of Free-Tier Content | For Free-Tier users, we may license or otherwise make available Uploaded Content, Agent Session Data, and Locally Collected CAD Files, in original, modified, aggregated, or derivative form, to third parties, including for commercial purposes, as described in Section 7.1 of our Terms and Conditions. |
HOW WE DISCLOSE PERSONAL INFORMATION
Here are the types of entities to which we may disclose personal information in providing the Services.
Service Providers | We use service providers that provide hosting, information technology, email and communications delivery, and analytics services for the purposes listed above. |
Advertising Partners | We engage third party advertising companies, including for the interest-based advertising purposes described above, which may collect information on the Services through cookies and other automated technologies. |
Professional Advisors | We use accountants, actuaries, auditors, experts, consultants, lawyers, banks, and financial institutions to support our business. |
Authorities and Others | If we are required by law or legal process or if we deem the disclosure appropriate for other legal, compliance or fraud-prevention purposes, we may disclose personal information to law enforcement, public, regulatory, and government authorities, courts, or other entities that obtain valid subpoenas. |
Other Online Services | When you interact with us, you may choose to share information and content on our social media pages and other online services. |
Business Transferees | We may disclose or transfer your personal information to third parties such as acquiring entities and their advisors in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). |
AI Model Providers | We use third-party providers of artificial intelligence models to power the Services. Uploaded Content and Agent Session Data may be transmitted to these providers to generate responses. We contract with these providers on terms that restrict them from using your information to train their own models and from retaining it beyond what is needed to provide and secure their services to us. |
Cloud Infrastructure Providers | We host the Services and perform cloud processing tasks on infrastructure provided by third-party cloud providers, currently Amazon Web Services, located in the United States. |
Engineering Contractors and Partners | Cloud processing tasks may be completed, reviewed, or corrected by personnel of MecAgent or of contractors and partners that we engage, who may be located outside your country and who are bound by confidentiality obligations. |
Data Licensees (Free-Tier only) | Third parties to whom we license or make available Free-Tier content as described above under “Licensing of Free-Tier Content”. |
Organization Administrators | If you use the Services through an organization or team account, the administrators and other members of that organization may access the content you share in that organization’s workspace. |
HUMAN REVIEW
Cloud processing tasks are performed primarily by automated systems. In some cases, MecAgent personnel, or contractors and partners engaged by MecAgent, may access the content of a task in order to complete, review, or correct it. Our support, security, and engineering personnel may also access your content where necessary to resolve a support request, investigate abuse or a security incident, or maintain the Services. Such access is limited to personnel who need it for these purposes and who are bound by confidentiality obligations.
INTERNATIONAL DATA TRANSFERS
MecAgent is headquartered in the United States, and we process personal information in the United States and in other countries where we, our service providers, or our contractors and partners operate. These countries may have data protection laws that differ from those of your country. Where we transfer personal information originating from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. You may contact us as described below for more information about these safeguards.
SECURITY
We seek to use reasonable organizational, technical, and administrative measures to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.
MARKETING CHOICES
You have choices regarding marketing-related communications. If you no longer want to receive marketing-related communications from us on a going-forward basis, you may opt-out by following the unsubscribe instructions in any such message or by contacting us by email at [email protected].
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing from us, we may still send you important administrative messages, from which you cannot opt out.
PRIVACY RIGHTS REQUESTS
You may request the following in relation to your personal information:
- Information about how we have collected, used, and disclosed personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
- Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
- Correction of personal information that is inaccurate or out of date.
- Deletion of personal information that we no longer need to provide the Services or for other lawful purposes.
To make a request, please contact us in accordance with the “Contacting Us” section below. We will respond to your request consistent with applicable law. For your protection, we may need to verify your identity before implementing your request. Requests concerning content that you have uploaded to the Services may be made by emailing [email protected] and are subject to the same standard as set out above; where available, you may also use deletion controls within the Services. For Free-Tier users, deletion of content does not affect AI models that were trained, or licenses that were granted, before the deletion, as described in Section 7.5 of our Terms and Conditions.
Please note that we may need to retain certain information for recordkeeping purposes. Further, certain personal information may be exempt from requests pursuant to applicable data protection laws or other laws and regulations.
ADDITIONAL INFORMATION FOR USERS IN THE EEA, THE UNITED KINGDOM, AND SWITZERLAND
Controller. MecAgent Inc. is the controller of the personal information described in this Privacy Policy, except where we process personal information on behalf of an enterprise customer as a processor under our Data Protection Addendum.
Legal bases. We process personal information on the following legal bases: (a) the performance of our contract with you, for administering the Services, providing AI features, and processing payments; (b) our legitimate interests, for our operations and general business, improving and developing our Services (including, for Free-Tier users, training and improving our AI models with Free-Tier content and licensing Free-Tier content as described in our Terms and Conditions), security and fraud prevention, relationship building, and marketing to business contacts, provided that these interests are not overridden by your rights and freedoms; (c) your consent, where required by law, for example for certain cookies and for the automatic collection of CAD files from your device on the Free-Tier Service, which you may stop at any time by uninstalling the software or upgrading to a paid subscription; and (d) compliance with our legal obligations.
Your rights. Subject to applicable law, you have the right to access, rectify, or erase your personal information; to restrict or object to its processing, including processing based on our legitimate interests and processing for direct marketing; to data portability; and to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may exercise these rights by contacting us as described under “Contacting Us”. You also have the right to lodge a complaint with your local data protection supervisory authority; for individuals in France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL).
Automated decision-making. The Services use AI models to generate outputs and to perform actions at your request. We do not use personal information to make decisions that produce legal or similarly significant effects on you without human involvement.
U.S. STATE PRIVACY RIGHTS
Residents of California and of other U.S. states with comprehensive consumer privacy laws may have additional rights under those laws, to the extent they apply to MecAgent and to your personal information, including the rights to know, access, correct, and delete personal information and not to be discriminated against for exercising those rights. You may exercise any such rights, and may designate an authorized agent to do so on your behalf, by contacting us as described under “Contacting Us”. We will verify requests as described under “Privacy Rights Requests”.
RETENTION PERIOD
We retain personal information for as long as needed or permitted in light of the purposes for which it was obtained as outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable law. Uploaded Content and Agent Session Data may be retained for as long as your account is active and thereafter for as long as needed or permitted for the purposes described in this Privacy Policy, subject to our backup cycles and legal retention obligations. For Free-Tier users, content that was used to train our AI models or licensed to third parties before deletion may continue to be reflected in those models and licenses, and Locally Collected CAD Files are retained for as long as needed for the purposes described under “Training and Improving AI Models” and “Licensing of Free-Tier Content”.
THIRD-PARTY SERVICES
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties. This includes any third party operating any website or service to which our Services link. The inclusion of a link on our Services does not imply endorsement of the linked site or service by us or by our affiliates.
UPDATES TO THIS PRIVACY POLICY
The “Last Updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services.
CONTACTING US
You can reach us at [email protected].