Privacy Policy

1. Controller

The data controller responsible for your personal data is:

If you have questions or concerns about how we handle your data, please contact us at the address above.

2. Data We Collect

When you use our service, we collect the following categories of personal and technical data:

• ▸Email address — provided by you when submitting a request, used to return your results and communicate about your submission.
• ▸Uploaded FEA files (.inp, .cdb) — structural simulation files you submit for conversion. These may contain technical data about your designs, geometry, material properties, and boundary conditions.
• ▸Submission metadata — file name, file size, timestamp of submission.
• ▸Optional: Marketing consent status, if you choose to receive product updates.

We do not collect payment data, government identification, or sensitive personal data as defined under Article 9 GDPR.

3. Legal Basis for Processing

We process your data on the following legal bases under Article 6 GDPR:

• ▸Performance of a contract (Art. 6(1)(b) GDPR) — processing your uploaded file and returning the converted CAD result constitutes the service you have requested. This is the primary basis for processing your file and email address.
• ▸Legitimate interests (Art. 6(1)(f) GDPR) — for service improvement, fraud prevention, and maintaining security logs. Our legitimate interests do not override your fundamental rights.
• ▸Consent (Art. 6(1)(a) GDPR) — for sending you optional product update communications. You may withdraw consent at any time by emailing privacy@rapidcad.ai.

4. How We Use Your Data

We use your data exclusively for the following purposes:

• ▸To process your uploaded FEA file and generate a parametric CAD model.
• ▸To return the generated result to you via email.
• ▸To communicate with you about your submission if we have questions about your model.
• ▸To send product updates if you have given explicit consent.
• ▸To maintain security logs and prevent misuse of the service.

We do not use your data for automated profiling, advertising, or any purpose beyond those listed above.

5. Third-Party Processors and Data Transfers

To deliver our service, we share data with the following third-party processors. All processors have been selected for their GDPR compliance and EU data residency capabilities. We have entered into Data Processing Agreements (DPAs) with each processor listed below.

5.1 Amazon Web Services (AWS) — Cloud Infrastructure

We host our service on Amazon Web Services infrastructure located exclusively within the European Union. Your uploaded files and personal data are stored and processed on AWS EU infrastructure.

• ▸Data processed: Uploaded FEA files, email address, submission metadata.
• ▸Location: European Union (EU-Central region, Frankfurt, Germany).
• ▸Safeguards: AWS Standard Contractual Clauses and Data Processing Agreement. AWS maintains data residency controls ensuring your data does not leave the EU.

AWS Privacy Policy

5.2 Anthropic — AI Processing

We use Claude AI models provided by Anthropic, PBC to process your uploaded FEA files and generate CAD output. Your file content is transmitted to Anthropic's API for processing as part of our AI pipeline. This constitutes a transfer of technical data to Anthropic.

• ▸Data processed: Contents of your uploaded FEA file (geometry, material properties, boundary conditions, load definitions). Your email address is not transmitted to Anthropic.
• ▸Processing location: Anthropic processes API requests on infrastructure that may be located outside the EU. This transfer is covered by Standard Contractual Clauses (SCCs) pursuant to Article 46(2)(c) GDPR.
• ▸Retention by Anthropic: Anthropic does not use API inputs to train their models by default. API data is subject to Anthropic's data retention policy.

Anthropic Privacy Policy

By submitting a file to our service, you acknowledge that the technical contents of your file will be processed by Anthropic's Claude models as described above. If your file contains commercially sensitive or export-controlled information, please review Anthropic's terms before submitting.

6. Data Retention

We retain your data for the following periods:

• ▸Uploaded FEA files — deleted within 30 days of submission unless you explicitly request longer retention.
• ▸Generated CAD output files — deleted within 30 days of delivery.
• ▸Email address — retained for 12 months from last submission, then deleted unless you have an active account or have consented to marketing communications.
• ▸Security and access logs — retained for 90 days for fraud prevention and security purposes.

You may request earlier deletion of any of your data at any time. See Section 8 for your rights.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• ▸Encryption of data in transit using TLS 1.2 or higher.
• ▸Encryption of data at rest on AWS infrastructure.
• ▸Access controls limiting who within RapidCAD can access submitted files.
• ▸Error monitoring using Sentry, configured to exclude file contents from error reports.

No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• ▸Right of access (Art. 15) — you may request a copy of the personal data we hold about you.
• ▸Right to rectification (Art. 16) — you may request correction of inaccurate data.
• ▸Right to erasure (Art. 17) — you may request deletion of your personal data, subject to our legal obligations.
• ▸Right to restriction of processing (Art. 18) — you may request that we restrict how we use your data in certain circumstances.
• ▸Right to data portability (Art. 20) — you may request your data in a structured, machine-readable format.
• ▸Right to object (Art. 21) — you may object to processing based on legitimate interests.
• ▸Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@rapidcad.ai. We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the competent supervisory authority. In Germany, this is:

9. Cookies and Tracking

Our website uses only technically necessary cookies required for the service to function. We do not use advertising, analytics, or third-party tracking cookies. No consent banner is required for strictly necessary cookies under GDPR and the German TTDSG.

If we introduce analytics or non-essential cookies in future, we will update this policy and implement appropriate consent mechanisms before doing so.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. We will notify you of material changes by posting the updated policy at rapidcad.ai/privacy with a revised effective date. For significant changes affecting your rights, we will notify you by email where we hold your address.

Continued use of our service after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, requests, or concerns:

We aim to respond to all privacy enquiries within 5 business days.