Privacy
Privacy & data use
This page is both our privacy policy and our disclosure notice under the Turkish Personal Data Protection Law (KVKK, Law No. 6698). It explains which data we process and why, who we share it with, and how you can exercise your rights.
Data controller
Personal data processed through the CADAGEN platform is handled by the CADAGEN Initiative (CADAGEN Girişimi) as data controller under applicable data protection law, including KVKK. For questions, data subject requests, or privacy inquiries, write to [email protected] or use the Contact page. Requests are answered within 30 days at the latest.
Categories of personal data we process
Account details (email address, sign-in records), your design prompt (text), optional images, your voice recording if you use voice input (transcribed only, not stored), generation script, STEP/STL outputs, retry history (errors and fixes), credit/transaction records, optional feedback (thumbs up/down, structured reason chips, optional note), your cookie/analytics preference, and basic technical records needed to run the service (e.g. error logs). Do not include personal data in free-text notes.
Purposes of processing
Your data is processed to: provide the service (CAD file generation, preview, download), manage your account and credit balance, run payment and billing processes, respond to support requests, detect and fix errors, prevent abuse, and — via identity-free training rows — improve service quality (including future model improvement).
Collection method and legal basis
Data is collected electronically while you use the service (sign-up, design studio, support channels), by automated or partly automated means. Legal bases under KVKK art. 5: performance of a contract (providing the service, billing), compliance with legal obligations, and legitimate interest (security, error fixing, abuse prevention, proportionate product improvement). Non-essential analytics cookies and marketing emails rely on your explicit consent.
Who your data may be shared with
Only to the extent needed to run the service, your data may be shared with these categories of recipients: a server hosting provider (application and database), a sign-in provider, a network, security, and file storage/backup provider, AI model providers (text, vision, and speech; prompts and CAD models may be processed for AI model training and refinement), Creem (payments; card data never reaches CADAGEN), and a transactional email provider. In-browser usage measurement and error monitoring tools load only if you accept on the cookie banner; server-side error records are sent to an error monitoring provider with personal details scrubbed. Disclosures to legally authorized authorities remain reserved. Some of these providers host servers abroad; such transfers are handled under KVKK art. 9 (adequacy decision, standard contractual clauses, or other appropriate safeguards).
Retention periods
Account data is kept while your account is active; transaction and billing records are kept for the retention/limitation periods required by applicable law. Preview files (e.g. GLB) are kept for a short time. Identity-free training rows (no email / task ID / user hash) may be kept longer where they no longer qualify as personal data. On a deletion request, personal data and training rows are deleted or anonymized as far as possible within a reasonable time (as a rule 30 days).
What we do not export / store
The training store does not write email, task ID, or a user hash; rows use a random training ID. Feedback records do not store your email. Payment card data is not stored on CADAGEN servers (payments go through Creem).
Training data and model improvement
To improve service quality, optimize CAD generation, and advance artificial intelligence systems, your design prompts, parameters, and generated CAD models (code, STEP, STL) may be processed and used by CADAGEN and the AI model providers it uses for AI model training, fine-tuning, and system optimization. Personal identity and payment records are excluded from training datasets. Marking unsatisfactory results via feedback helps refine quality benchmarks.
Cookies and analytics
Cookies strictly necessary for the site to work (session, language, security) may be used without consent. Usage measurement, in-browser error monitoring, and similar non-essential third-party tools load only if you choose Accept on the cookie banner. If you Reject, those tools are not loaded. We store your choice in the browser; clear site data or contact us to change it.
Your rights (KVKK art. 11) and how to apply
For rights under KVKK art. 11 (access, correction, deletion, transfer information, objection, etc.), use [email protected] or the Contact page. If signed in, you can also request account and personal data deletion under Privacy on the Dashboard. Requests are answered within statutory deadlines.
Account support & admin access
Support staff may access your email, credit balance, and related task records to provide support, apply manual credit adjustments, and investigate issues. The content-review screen does not show email; a task ID can still be linked to your account (pseudonymization). Each such action is recorded in an internal audit log (who, when, reason). We do not use this data for marketing without separate consent.
Last updated: October 2026
Start designing