Privacy Policy
Last updated [date]. This explains what electronically collects, why, where it's kept, who processes it and for how long. [legal entity name] is responsible for your data. For a plain summary of where your design files go, see Where your files go.
1. What we collect
- Account
- Your email address, and your name and company if you give them. Your plan, credits and payment history.
- Project files
- When you ask for a review, a copy of the project folder you opened (without backups, caches and files over 50 MB), and later the files that changed. Everything else on your computer stays there, including the snapshots the app keeps before each change.
- Work on your board
- Your messages to Ally, its answers, check results, proposed changes and which ones you applied.
- Feedback
- Ratings you give an answer or a finding, and any note you add.
- Usage events
- Small records tied to your account, such as signing in, opening the app, opening a project (KiCad or Altium), looking at a proposed change, applying or restoring a change. They never contain your files.
- Problem reports
- Only when you send one, and only the parts you tick: your email, the app and Windows version, the app's log (keys and tokens removed) and a screenshot of the app window. Never your project files.
- Support messages
- What you write to us in the app's "Talk to us" chat or by email.
- Technical data
- Server logs with IP address and request details, kept for security and to fix faults [for N days]. On the website, one sign-in cookie; no tracking or advertising cookies.
2. How we use it
- To review and change your own board when you ask, and to show you the results. Your files are processed for nothing else.
- To run your account: sign-in, credits, billing and support.
- To keep the service secure and to fix problems you report.
- To improve the app and the checks from usage events, feedback and problem reports, never from the contents of your files.
- Never to train or tune AI models, ours or anyone's. Never on our test machines, which hold only public projects and our own examples.
[Legal bases for processing (contract, legitimate interests, consent) to be added by counsel.]
3. Where it's kept and who processes it
All of your data is stored and processed in the United States. We use these processors, each only to run the service:
- Hetzner
- Our server and backups, in Ashburn, Virginia. Stores your uploaded projects and runs the checks and changes.
- Anthropic
- The AI model (Claude), through its API in the US. Receives the parts of your project and chat a job needs, under commercial terms that forbid training on your data.
- Supabase
- Our database, in East US (North Virginia): account, check results, chat, usage events and problem reports.
- Resend
- Sends our emails (sign-in links and account notices) from its US East region.
- Payment provider
- [name]: what you pay for and your billing details, never your files.
If you're outside the United States, your data is transferred to and processed in the US. [Transfer safeguards to be confirmed by counsel.]
4. Who can see your projects
You, and the people you invite. Our staff (today, the founder) open a project only to help when you ask or to look into a problem you reported, and each access is logged. Nobody else can see that your project exists.
5. How long we keep it
- Your account
- Until you delete it.
- Deletion on request
- Ask in the app (Help → Talk to us) or by email to delete one project or your whole account. Deleting an account removes its projects, files, chats, sign-in tokens and your email, name and company. Backups are kept at most 28 days, so within 30 days no copy is left. Payment records are kept as the law requires, attached to an anonymous id.
- Inactivity
- Coming soon: after 90 days without any use we'll delete your projects from our servers, with an email 14 days before and a link to a "Keep my files" button. This isn't switched on yet; until it is, nothing is deleted for inactivity. Your account and the files on your own computer stay.
- Job folders
- Each job's working folder on our server is deleted when the job ends.
- Problem reports
- [Kept until resolved, then N months.] Deleted with your account.
6. Your choices and rights
- See, correct, export or delete your data: ask us and we'll do it within [30] days.
- Problem reports are optional, and you choose what goes in each one.
- [Rights under GDPR, UK GDPR, PIPEDA and US state laws, and how to complain to a regulator, to be added by counsel.]
7. Security
Sign-in is by email link, with no passwords. Every connection uses HTTPS. Keys live only on the server. Access to your projects is logged. We haven't had an outside security audit yet; one is planned.
8. Children
electronically isn't meant for children under [16], and we don't knowingly collect their data.
9. Changes and contact
We'll tell you about material changes by email or in the app before they take effect. Questions or requests: support@electronically.ai.