Draft. This document is being prepared and is not in effect yet.
Extrastep is a CAD agent: you upload parts, describe changes, and it builds exact geometry. This policy explains what that involves for your data.
Who we are
Extrastep is operated by INYO SYSTEMS LLC, 3647 Oak Knoll Dr, Redwood City, CA 94062, United States. Contact us at support@extrastep.ai or +1 (408) 805-5521. Our representative in the EU is [EU representative].
What we collect
Your account
Your email address, your name if your sign-in shares it, and how you sign in: with Google, with Apple, or with your email address and a password. Each account gets one workspace. If you sign in with Google or Apple, they share your email address and name with us; their own privacy policies cover your accounts with them. You need an email address to have an account: without one we can't provide the service.
Your work
- projects, chats and the messages you send, with the geometry you reference
- STEP files you upload
- each design's source code, parameters and revisions, and the geometry built from them
- images of your model captured during turns, and the view you had when you sent each message
- exports you make
Plan and usage
Your plan, how many model requests and tokens each turn used, and how much of your plan's monthly usage that was. If you pay for a plan, the subscription's status and its payment and customer numbers at Stripe; Stripe keeps your payment details.
Technical data
Our providers keep standard logs, such as IP addresses and request times, to run and protect the service.
Cookies and browser storage
We use only what the service needs, so we don't ask for consent:
- cookies that keep you signed in, for up to 30 days, one of which tells our website you're signed in, so it links to your workbench
- a cookie that lasts 10 minutes while you sign in with Google or Apple
- your theme and layout choices, which stay in your browser
We don't use advertising or analytics cookies.
How we use it, and why
- To run the service you signed up for: your account, your projects and the turns you ask for. This is needed to perform our contract with you.
- To count each turn's usage against your plan and to sell paid plans, also under that contract.
- To email you about your account and to answer your emails, also under that contract.
- To keep the service secure and prevent abuse, which is our legitimate interest.
- To fix problems and improve the service, also our legitimate interest. For this we may review the agent's turns, including your messages and designs.
You can object to the uses based on our legitimate interest. We don't sell your data or use it for advertising, and we don't use your designs, files, pictures or chats to train AI models.
The AI model
To run a turn, we send our AI model provider your messages in that chat, the geometry you reference, the pictures you attach, your design's source code and parameters, the measurements and checks the agent asks for, and images of your model when the agent reviews a view. The provider handles them under a data processing agreement with us, with response storage turned off, and doesn't train its models on them.
Who processes your data
| Provider | What for |
|---|---|
| Our cloud provider | Accounts and sign-in, the database, stored files, emails, and building, checking and rendering designs |
| Our cloud provider | Delivering the website and the app's pages, from servers around the world |
| Our AI model provider | The AI model that runs each turn |
| Our email provider | Our support email |
| Stripe | Selling paid plans through Link, as the merchant of record, and taking their payments |
How long we keep it
We keep your work while your account exists. Deleting a project removes it from your workspace at once, then deletes its history and every stored file that no other project of yours uses. To delete your account and everything in it, email support@extrastep.ai: we do it within 30 days. Service logs, which include IP addresses, are kept for 30 days, and backups for 7 days. Stripe keeps payment records as long as the law requires.
Your choices and rights
You can download your designs at any time as STEP, STL or 3MF, and delete projects yourself. Email support@extrastep.ai to get a copy of your data (in a portable format if you like), to correct or delete it, to limit how we use it, or to object to a use based on our legitimate interest. We answer within a month. If you're in the EU or the UK, you can also complain to your country's data protection authority.
Where your data is
We and our providers store and process your data in the United States. Our providers protect it there under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. Email us for a copy of these safeguards.
Children
Extrastep is not meant for children.
Changes
When we change this policy we update the date above, and we tell you by email before a significant change takes effect.