Privacy Policy

Last updated: [date]

This policy explains what personal information ParametrIQ ("we", "us") collects when you use this website, ParametrIQ CAD, the PiQ Playground and the PiQ SaaS API (together, "the services"), why we collect it, who we share it with, and the rights you have over it.

The data controller is [company legal name], [registered address], registered in [country] under number [company number]. If you have any questions about this policy or your information, contact us at [privacy email address].

Information we collect

Information you give us

Account details: your name, email address and password when you sign up. Passwords are stored only in a hashed form; we can't read them.
Sign-in with another service: if you sign in with Facebook (or another provider we offer), we receive your name, email address, profile picture and an account identifier from that provider. We don't receive your password for that service.
Subscription and billing details: the plan you choose and your billing history. Card payments are taken by our payment provider, Stripe; we never see or store your full card number.
Messages and feedback: what you send us when you contact us, report a problem or give feedback.

Information created when you use the services

Licence activation: when you activate ParametrIQ CAD, the program sends your licence details and an identifier for the computer it is activated on to our licence server, so we can check the licence and limit how many computers use it.
Problem reports: when you use Help › Report a Problem… in ParametrIQ CAD, the program sends us what you write, the category and severity you choose and, if you give one, an email address to reply to; and, unless you leave them out, screenshots of the program (with any parts you black out removed before they leave your computer), its recent messages and information about your computer and the program (versions, operating system, graphics, languages, screens and memory). Your drawing is sent only if you choose to include it. A report is linked to your licence and the computer it came from; your licence key and activation token are never sent. You can see exactly what will be sent before you send it.
Drawings and code you send us: PiQ Lang code you run in the Playground, and drawings, parameters and requests you send to the PiQ SaaS API, are processed on our servers to produce the result you asked for. Drawings you make in ParametrIQ CAD stay on your own computer unless you send them to us.
API keys and usage: the API keys issued to you and records of the requests made with them (time, size and result), used for security, billing and fair use.
Technical information: like most websites, our servers record your IP address, browser type, the pages you request and the time of each request. We use these logs to keep the services secure and working, and keep them only for a short time.

How we use your information, and our legal basis

To provide the services you sign up for (your account, licences, subscriptions, the Playground and the API). Legal basis: performance of our contract with you.
To take payments and keep financial records. Legal basis: contract, and our legal obligations.
To send you service emails, such as password resets, receipts, licence and security notices. Legal basis: contract, and our legitimate interest in running the services safely.
To keep the services secure, prevent fraud and misuse, and fix problems. Legal basis: our legitimate interests.
To investigate and fix problems you report, and to reply to you about them if you gave an address. Legal basis: our legitimate interests in fixing faults in our software.
To understand how the website is used and improve it, with analytics cookies, only if you allow them. Legal basis: your consent.
To send you news about our products, only if you have asked for it or we are otherwise allowed to by law. You can unsubscribe at any time. Legal basis: consent or legitimate interests.

We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.

If you sign up for our newsletter, we keep your email address, the language you chose, and when you signed up, confirmed and unsubscribed. We use them only to send the newsletter, through our email provider. Until you follow the link in the confirmation mail, we send you nothing else. Every issue has a one-click unsubscribe link (in the mail and in its List-Unsubscribe header); once you unsubscribe we send you nothing more, and we keep only the record that you did. Ask us through the contact page to have it deleted. Legal basis: consent.

Cookies and similar technologies

We use a small number of cookies and similar browser storage:

Necessary: to keep you signed in, protect forms against forgery, keep your session working and remember your cookie choices. These are always on, because the site can't work without them.
Analytics: anonymous counts of visits so we can see which pages are useful. Off unless you turn them on.
Marketing: used to measure our campaigns. Off unless you turn them on.

You can change your choices at any time with Manage Cookies (also at the foot of every page), and you can block or delete cookies in your browser's settings.

Who we share your information with

We share personal information only with organisations that help us run the services, under contracts that require them to protect it and use it only on our instructions:

Payment processing: Stripe, for subscriptions and payments.
Hosting, databases and content delivery: [hosting provider(s)].
Email delivery: [email provider], for account and service emails.
Sign-in providers: Facebook (or another provider), only if you choose to sign in with them.
Analytics: [analytics provider], only if you allow analytics cookies.

We may also disclose information where the law requires it, to protect our rights or the safety of others, or to a buyer if our business is sold or reorganised.

International transfers

Some of our providers process information outside the UK and the European Economic Area. Where they do, we make sure the transfer is protected, for example by an adequacy decision or the standard contractual clauses approved for that purpose.

How long we keep your information

Account information: for as long as your account is open. If you delete your account, it is closed straight away; we keep its information for [30 days] so it can be restored if you change your mind, and then delete it.
Billing records: for as long as tax and accounting law requires (usually six years in the UK).
Playground code and API requests: only as long as needed to produce the result, and request logs for no more than [90 days], unless we need them to investigate misuse.
Server logs: no more than [30 days].
Problem reports (with their screenshots and files): no more than [1 year] after the problem is dealt with.

Keeping your information safe

We use encrypted connections (HTTPS) for the website, the licence server and the API, store passwords only as secure hashes, and limit who can see personal information. No system is completely secure, but if a breach happens that puts you at risk, we will tell you and the regulator as the law requires.

Your rights

Depending on where you live, you have the right to:

ask for a copy of the personal information we hold about you;
have inaccurate information corrected, and update your details yourself from your account page;
have your information deleted, for example by deleting your account;
object to, or ask us to restrict, how we use your information;
receive the information you gave us in a portable format;
withdraw your consent at any time, where we rely on it, without affecting what was done before.

To use any of these rights, contact us at [privacy email address]. We will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ico.org.uk) or the data protection authority where you live, though we would like the chance to put it right first.

Children

The services are meant for businesses and adults. They are not directed at children under 16, and we do not knowingly collect their information.

Links to other websites

This website links to other sites, such as our social media pages. Their own privacy policies apply when you visit them.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and if we make significant changes we will tell you by email or with a notice on the website.