CAD Modeler Privacy

Scope & Relationship to Site Policies What We Collect How We Use Your Information Third-Party LLM Providers Public Sharing & Remix Image & Sketch Uploads AI Training on Your Content How We Share Information Data Retention Data Security Your Rights & Choices U.S. State Privacy Rights EEA / UK Rights Global Privacy Control (GPC) International Transfers Children Cookies Updates Contact

CAD Modeler Privacy Policy

Last updated: May 19, 2026

PrintPal Privacy Policy · CAD Modeler Terms of Service · PrintPal Terms of Service

Scope & Relationship to Site Policies

This CAD Modeler Privacy Policy (the "CAD Privacy Policy") explains how Atlas Rodin LLC ("PrintPal," "we," "us," or "our") collects, uses, shares, and protects information when you use the PrintPal AI CAD Modeler at /cad-agent, the public design share pages at /cad/share/<id>, and the AI CAD product landing page at /ai-cad-modeler (collectively, the "CAD Modeler").

The CAD Modeler is a feature of the PrintPal platform. The general PrintPal Privacy Policy continues to apply to your use of the platform as a whole. This CAD Privacy Policy is in addition to, and where applicable supplements, the PrintPal Privacy Policy. Where this CAD Privacy Policy describes a practice that is specific to the CAD Modeler (for example, public sharing of chat transcripts, image-to-CAD uploads, or LLM provider routing), this CAD Privacy Policy governs. Where this CAD Privacy Policy is silent, the PrintPal Privacy Policy governs.

By using the CAD Modeler, you acknowledge and agree to the data practices described here and in the PrintPal Privacy Policy.

What We Collect

Information You Provide

When you use the CAD Modeler we collect the following information that you submit, generate, or upload:

  • Account information — your PrintPal account is required to use the CAD Modeler. See the PrintPal Privacy Policy for what we collect at signup.
  • Chat prompts and transcripts — the text you send to the AI agent, the agent's full text and tool-call replies, the AI's reasoning, generated design briefs, generated checklists, and any model selection you make.
  • Project metadata — the project name, viewer settings, build-mode scene graph, material colors, and other editor state.
  • OpenSCAD source code — the parametric source code generated by the AI agent or written/edited by you.
  • Uploaded images and sketches — reference images, photos, hand drawings, or screenshots you upload to the image-to-CAD feature.
  • Rendered previews — JPEG snapshots of your 3D model captured for the History drawer thumbnail and for shareable preview images.
  • Public share metadata — when you click "Share," we mint a public share token and record when sharing was enabled or disabled, view counts on the public page, and the layout choice (isometric vs four-view sheet) for the social preview image.

Information We Generate

  • Billing and credit usage records — per-request records of credits consumed, upstream LLM provider cost, model used, success/failure status, and request identifiers. See our CAD Modeler Terms of Service for how credit pricing works.
  • Tool-call traces — structured records of the AI agent's calls to internal tools (validation runs, repair-loop iterations, etc.).
  • Background-job state — pending-generation markers, job identifiers, and timing data used to resume AI tasks that started before you closed the browser.

Information Automatically Collected

  • Standard request metadata (IP address, user-agent, request timestamps, referrer).
  • Performance and error telemetry for AI generations.
  • Cookies and similar technologies used for authentication, autosave, and analytics — see the PrintPal Privacy Policy for the full list.

How We Use Your Information

We use the information described above to:

  • Operate the CAD Modeler — run the AI agent, render previews, autosave your work, and provide background-job resumability.
  • Authenticate, authorize, and account for your usage (including credit charges and refunds).
  • Render and serve the public share pages you have explicitly enabled.
  • Provide customer support, diagnose bugs, and respond to your requests.
  • Detect, prevent, and respond to abuse, fraud, and security incidents.
  • Comply with legal obligations, respond to lawful requests, and enforce our CAD Modeler Terms of Service.
  • Improve the CAD Modeler — analyze aggregate usage patterns, success/failure rates, and performance to make the tool better.
  • Train, evaluate, fine-tune, or develop our own and our partners' AI/ML systems. See the AI Training on Your Content section below.

Third-Party LLM Providers

IMPORTANT. The CAD Modeler relies on third-party large language model ("LLM") providers and intermediary routing services (such as OpenRouter) to generate text, design briefs, OpenSCAD code, repair iterations, and other AI output. When you use the CAD Modeler:

  • Your chat prompts, any uploaded images, prior conversation context, and tool-call results are transmitted to one or more third-party LLM providers for processing.
  • The provider used for a given request depends on the model you select, our infrastructure choices at the time of the request, fallback routing, and provider availability.
  • Each provider operates under its own privacy policy, security controls, and data-handling practices, including its own data-retention and training policies. These policies may permit the provider to retain submitted content for abuse monitoring, debugging, or other operational purposes for limited periods.
  • Providers may be located in jurisdictions different from yours, including outside the United States.
  • We select providers based on their commercially-available security and privacy controls but we do not control providers' internal practices.

The current set of LLM providers we route to may change without notice as we add, remove, or rebalance models. Upon written request to [email protected] we will identify the providers currently used by the CAD Modeler.

By using the CAD Modeler, you acknowledge and agree that your chat content, uploaded images, and other inputs may be transmitted to and processed by third-party LLM providers. If this is not acceptable to you, do not use the CAD Modeler.

Public Sharing & Remix

The CAD Modeler includes a "Share" feature that lets you publish a snapshot of a design to a public URL of the form https://printpal.io/cad/share/<id>. Public sharing is OFF by default. You must explicitly enable it from the Share modal.

When you enable public sharing:

  • The following information becomes publicly visible to anyone who has the link, and is published as an HTML page that is indexable by search engines (Google, Bing, etc.):
    • The project title.
    • The full chat transcript — including every prompt you sent and every reply the AI returned, with the exception of message-attached images, which are excluded from the public view.
    • The generated OpenSCAD source code.
    • The design brief and checklist.
    • Last-render stats (bounding box, triangle count, etc.).
    • The rendered preview image you captured at share time.
    • Your PrintPal username (so visitors can attribute the design to you).
    • A view counter (incremented every time the public page is fetched).
  • The page exposes Open Graph and Twitter Card metadata so that any link to it shared on social media may unfurl with the preview image and a description.
  • Remixing the design (creating a private copy in another user's account) is OFF by default. You must separately opt in to remixing in the Share modal for visitors to be able to remix.

Risks of public sharing. Once content is public, it can be screenshotted, archived, scraped, cached by search engines, or copied. Even if you later disable public sharing or delete the design, copies may persist on third-party servers (search-engine caches, social-media unfurls, the Wayback Machine, etc.) outside of our control.

Disabling sharing. You may turn public sharing off at any time. Once disabled, the public URL and preview image stop serving from our servers within a reasonable propagation window (typically minutes; we ask social crawlers to drop their caches but cannot force this). The "Rotate link" button generates a new public token and immediately invalidates the prior URL.

Remix. When you opt in to allow remixing, anyone who views the public share may fork it into a brand-new private session in their own PrintPal account. The remixed copy includes the same chat transcript, OpenSCAD code, design brief, checklist, settings, and preview image. The remixed copy is private to the remixer and does not affect your original. Edits made by the remixer to their copy do not propagate back to you.

Image & Sketch Uploads

The image-to-CAD feature lets you upload reference photos, sketches, screenshots, or other images for the AI agent to interpret.

  • Uploaded images are stored as part of your chat history and are sent to third-party LLM providers along with your prompt (see Third-Party LLM Providers).
  • Uploaded images are NOT included in the public payload when you enable public sharing — they are excluded from the sanitized chat history served to public viewers. Note, however, that the AI's text response describing the image may still appear in the public chat transcript.
  • You represent and warrant that you have all rights, licenses, consents, and permissions necessary to upload each image to the CAD Modeler. See the CAD Modeler Terms of Service for the full warranty language.
  • Do not upload images that contain biometric identifiers, identifying photos of other people without their consent, sensitive personal data, regulated data (e.g., PHI under HIPAA), classified information, or trade secrets that you are not authorized to disclose.

AI Training on Your Content

We reserve the right to use information you submit through the CAD Modeler — including chat prompts, uploaded images, generated OpenSCAD code, design briefs, checklists, and tool-call traces — to train, evaluate, fine-tune, or otherwise improve our own and our partners' artificial-intelligence and machine-learning systems, including future versions of the CAD Modeler.

Where we use your content for training, we use commercially reasonable efforts to de-identify it (for example, by stripping account identifiers). However, prompts and CAD designs may still contain information that, in combination, could identify you. We do not currently offer an opt-out from this use for CAD Modeler content. If you do not want your content used for AI training, do not submit it through the CAD Modeler.

Separate from our own training use, third-party LLM providers may also use submitted content for their own model-improvement purposes, subject to their respective policies. See Third-Party LLM Providers.

How We Share Information

We disclose CAD-Modeler-related information in the following circumstances:

  • To third-party LLM and AI providers, as described in Third-Party LLM Providers.
  • To service providers that host our infrastructure (AWS), process payments (Stripe), send transactional email, provide CDN and DDoS protection, provide error tracking, and provide analytics. These vendors process information only on our instructions.
  • To the public, when you explicitly enable public sharing of a design and when you authorize remix as described above.
  • For legal and safety reasons, including in response to lawful requests, to defend our legal rights, to enforce our Terms of Service, and to investigate or prevent fraud, abuse, or security incidents.
  • In a corporate transaction such as a merger, acquisition, financing, or sale of substantially all of our assets.
  • With your consent, for any purpose not otherwise described in this CAD Privacy Policy.

We do not "sell" personal information for money, and we do not engage in "cross-context behavioral advertising" using CAD Modeler content, as those terms are defined under U.S. state privacy laws.

Data Retention

We retain CAD-Modeler-related information for the following periods, except where law requires longer or where you delete content earlier:

  • CAD sessions (chat transcript, code, brief, checklist, settings, preview image): retained while your account is active. Soft-deleted sessions are recoverable for 30 days, then purged.
  • Public share tokens and view counts: retained until you disable sharing, rotate the link, or delete the session.
  • Uploaded images: retained as part of the chat history for the life of the session; purged when the session is purged.
  • Credit-usage records and billing-ledger entries: retained for at least 7 years for tax, accounting, and audit purposes.
  • Request logs, error logs, and AI tool-call traces: retained for up to 13 months for operational, security, and abuse-prevention purposes.
  • Background-job state (pending-generation markers, job IDs): cleared when the job completes or expires (typically within 24 hours of job start).
  • Closed-account data: cleared per the closed-account schedule in the PrintPal Privacy Policy, except for records we must retain by law (billing, fraud, and similar records).

De-identified and aggregated data may be retained indefinitely.

Data Security

We implement administrative, technical, and physical safeguards designed to protect CAD-Modeler-related information, including:

  • TLS in transit between your browser, our servers, and our LLM-provider endpoints.
  • Encryption at rest for stored CAD sessions, uploaded images, and preview thumbnails.
  • Authentication, authorization, and least-privilege access controls for our staff and infrastructure.
  • Logging, monitoring, and alerting for anomalous access patterns.
  • Regular dependency updates and security patching.

No system is ever 100% secure, and we cannot and do not guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect your account has been compromised.

Your Rights & Choices

Depending on where you live, you may have some or all of the following rights with respect to information we hold about you:

  • Access — request a copy of the information we hold.
  • Correction — request that we correct inaccurate or incomplete information.
  • Deletion — request that we delete information we hold about you, subject to legal exceptions.
  • Portability — receive a copy in a structured, commonly-used, machine-readable format.
  • Restriction or objection — ask us to limit or stop certain processing.
  • Withdraw consent — where processing is based on consent, withdraw it (without affecting prior processing).
  • Non-discrimination — we will not discriminate against you for exercising any of these rights.

How to exercise rights. Email [email protected] with your request and enough detail for us to verify your identity. Many requests can also be self-served from your account settings (delete sessions, disable sharing, rotate share links, close account, etc.). We will respond within the timeframes required by applicable law (typically 30–45 days).

Authorized agents. Where state law permits, you may designate an authorized agent to make requests on your behalf. We will require the agent to provide proof of authorization and we may require you to verify your identity directly.

Appeals. If we deny your request and your state's privacy law grants an appeal right, you may appeal by replying to our response email. We will respond to the appeal within the timeframe required by your state.

U.S. State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Jersey, New Hampshire, Maryland, Minnesota, or another U.S. state that has enacted a comprehensive privacy law, you have the rights described in the Your Rights & Choices section above, subject to the exceptions, thresholds, and verification requirements set out in your state's law.

Categories of personal information. In the past 12 months we have collected the categories of personal information described in the What We Collect section, for the purposes described in How We Use Your Information, and disclosed those categories to the recipients described in How We Share Information.

No sale; no targeted advertising. We do not sell personal information collected through the CAD Modeler for money, and we do not use it for cross-context behavioral advertising or targeted advertising.

Sensitive personal information. We do not knowingly use sensitive personal information for purposes that would require a "limit use of sensitive personal information" link under California's CCPA/CPRA regulations. If this changes, we will update this CAD Privacy Policy and offer the required opt-out mechanism.

Shine the Light (California). California residents may request information about disclosures of personal information to third parties for their direct marketing purposes under California Civil Code §1798.83. We do not currently make such disclosures from the CAD Modeler.

EEA, UK & Swiss Rights (GDPR / UK GDPR / FADP)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the EU General Data Protection Regulation, the UK GDPR, the UK Data Protection Act 2018, or the Swiss Federal Act on Data Protection (as applicable), including:

  • Right of access, rectification, erasure, restriction, portability, and objection.
  • Right to withdraw consent at any time, where processing is based on consent.
  • Right to lodge a complaint with a data protection authority in your country of residence.

Legal bases for processing. We process CAD-Modeler-related personal data on the following legal bases:

  • Contract — to provide the CAD Modeler service you have requested (running the AI agent, storing your sessions, processing payments).
  • Legitimate interests — to detect and prevent abuse, debug, improve the product, and operate the business, where those interests are not overridden by your fundamental rights.
  • Legal obligation — to retain billing and tax records and to respond to lawful requests.
  • Consent — for any processing where we ask you to opt in (for example, you must affirmatively enable public sharing).

Controller. The data controller for CAD-Modeler-related personal data is Atlas Rodin LLC, 400 W Deming Place, Chicago, IL 60614, USA. We do not currently maintain a representative in the EU or UK; you may contact us at [email protected].

Global Privacy Control (GPC)

We honor browser-level Global Privacy Control (GPC) signals as a valid request to opt out of "sale" and "sharing" (cross-context behavioral advertising), where opt-out rights are granted by applicable U.S. state privacy laws. Because we do not sell personal information collected through the CAD Modeler and do not engage in cross-context behavioral advertising using such information, the GPC signal has no practical effect on the CAD Modeler today — but if we ever begin such processing, the GPC signal will be honored automatically.

International Data Transfers

Our primary infrastructure is hosted in the United States. Third-party LLM providers may be located in other jurisdictions. If you access the CAD Modeler from outside the United States, your personal data will be transferred to, stored in, and processed in the United States and in other jurisdictions in which our service providers operate.

Where required by applicable law, we rely on appropriate transfer safeguards, including Standard Contractual Clauses (or the UK International Data Transfer Addendum where applicable) with our service providers, and on supplementary technical and organizational measures.

Children

The CAD Modeler is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 in violation of the Children's Online Privacy Protection Act (COPPA), we will delete it. If you believe a child has provided us with personal information, please contact us at [email protected].

In the EEA, UK, and Switzerland, the GDPR-default age of consent for online services is 16 (lower in some member states). If you are under 16 (or your local age of digital consent), please obtain a parent or guardian's consent before using the CAD Modeler.

Cookies

The CAD Modeler uses cookies and similar technologies for authentication, autosave, viewer preferences, and analytics. See the Cookies section of the PrintPal Privacy Policy for a full description and for instructions on managing cookies.

Updates

We may update this CAD Privacy Policy from time to time. If we make a material change, we will give you notice by posting the updated policy on the CAD Modeler page, by email, or through an in-product notice. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of the CAD Modeler after an update means you agree to the updated policy.

Contact

For questions about this CAD Privacy Policy, or to exercise any of the rights described above, contact:

Email: [email protected]
Mail: Atlas Rodin LLC
Attn: Privacy
400 W Deming Place
Chicago, IL 60614, USA