Privacy Policy

1. Information We Collect

Account Information

When you sign up via Google or GitHub OAuth, we receive your name, email address, and profile picture. We do not receive or store your Google/GitHub password.

Payment Information

Payments are processed by Stripe. We store your Stripe customer ID and subscription status. We do not store credit card numbers, CVVs, or full payment details — Stripe handles this securely.

Design Data

We store your design prompts, project history, and generated design files (CAD models, PCB layouts, schematics) to enable iterative design and project management. Design files are stored on our secure servers.

Usage Data

We collect anonymized usage events (e.g., number of designs generated, features used, export actions) to improve the platform. This data is tied to your account but does not include the content of your designs.

Voice Data

If you use voice input, audio is processed for transcription and immediately discarded. We do not store voice recordings.

2. How We Use Your Information

• To provide and maintain the Service
• To process your subscription payments
• To save and restore your design projects
• To send AI prompts to our design generation engine
• To improve platform performance and user experience
• To respond to support tickets
• To send important service notifications (not marketing)

3. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Google/GitHub — for authentication (OAuth only)
• AI providers — design prompts are sent to our AI engine for generation (prompts are not stored by the AI provider beyond the request)
• PCBWay — only when you explicitly choose to manufacture, and only Gerber files you approve

4. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on secure cloud infrastructure. All connections use TLS encryption. We implement industry-standard security measures including encrypted connections, access controls, and regular backups.

5. Data Retention

Your account data and design projects are retained as long as your account is active. Upon account deletion request, we will delete your personal data within 30 days. Anonymized usage statistics may be retained indefinitely.

6. Your Rights

You have the right to:

• Access — Request a copy of your personal data
• Export — Download all your design files at any time
• Correction — Update your profile information
• Deletion — Request account and data deletion
• Portability — Export your designs in standard formats (STEP, Gerber, etc.)

7. Cookies

We use essential cookies for authentication session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or data requests, contact us at privacy@iorchestra.ai.