---
title: "App Privacy Policy — Partimation"
url: https://partimation.com/legal/privacy-app.html
---

<h1>Application Privacy Policy</h1>
  <p class="updated">Last updated: 16 July 2026 · Applies to the Partimation application (app.partimation.com)</p>

  <div class="toc"><b>Contents</b>
    <ol>
      <li><a href="#who">Controller</a></li>
      <li><a href="#what">What we process</a></li>
      <li><a href="#uploads">Your CAD files &amp; results</a></li>
      <li><a href="#model">Training &amp; the shared model</a></li>
      <li><a href="#why">Purposes &amp; lawful basis</a></li>
      <li><a href="#share">Processors we use</a></li>
      <li><a href="#security">Security</a></li>
      <li><a href="#retention">Retention</a></li>
      <li><a href="#rights">Your rights &amp; how to exercise them</a></li>
      <li><a href="#onprem">On-prem installs</a></li>
      <li><a href="#contact">Contact</a></li>
    </ol>
  </div>

  <h2 id="who">1. Controller</h2>
  <p>The controller for the hosted application is MetaBinary Limited, a company
    registered in Ireland (CRO 806119, VAT IE4698974FH), Office 40 — Boxworks,
    40–44 Patrick Street, Waterford, X91&nbsp;X3KF, Ireland. Contact:
    <a href="mailto:privacy@partimation.com">privacy@partimation.com</a>.
    As an EU-established controller we are not required to appoint an EU
    representative, and we have not appointed a Data Protection Officer.</p>

  <h2 id="what">2. What we process</h2>
  <ul>
    <li><b>Account data</b> — your email, a salted <b>hash</b> of your password
      (we never store the password itself), your role, plan, and preferences.</li>
    <li><b>Content you upload</b> — 3D models (STL/STEP), drawings (DXF/PDF), and
      any tolerances, notes or rates you enter.</li>
    <li><b>Analysis records</b> — the results we compute (findings, quotes,
      simulation outputs) and metadata such as a geometry fingerprint (a hash of
      the shape) used to recognise and de-duplicate parts.</li>
    <li><b>Feedback</b> — accept/override decisions and quote-vs-actual figures
      you choose to submit.</li>
    <li><b>Billing references</b> — subscription and customer identifiers from
      Stripe. <b>We do not receive or store your card details</b>; Stripe
      handles payment data directly.</li>
    <li><b>Technical logs</b> — standard security/reliability logs.</li>
  </ul>

  <h2 id="uploads">3. Your CAD files &amp; results — your data</h2>
  <p>The parts you upload and the results we produce are <b>yours</b>. We process
    them to provide the service to you. You can export them and delete them at
    any time (see <a href="#rights">Your rights</a>). We do not sell them, and we
    do not share them with other customers.</p>

  <h2 id="model">4. Training &amp; the shared model</h2>
  <p>Partimation improves its recommendations using machine-learning models. Three
    distinct programs exist, and they are not the same thing:</p>
  <p><b>Shared model improvement.</b> With your explicit consent — asked in the
    application, never assumed — signals from your use of the service
    (geometry-derived features, process picks, corrections, and outcomes)
    contribute to training the shared models that all customers benefit from. If
    you do not opt in, your data is not used for shared training. You can
    withdraw consent at any time in account settings; withdrawal stops future
    contributions but does not unwind models already trained.</p>
  <p><b>Shop calibration (private).</b> On plans that include it, calibration
    models are trained on your own records to tune your prices and predictions.
    Shop calibration data and models are yours alone: they are never used to
    train the shared models and never shared with other customers.</p>
  <p><b>Feedback and surveys.</b> The application may ask how it is performing
    and invite you to share a survey response or the underlying job data with us
    to validate results. Sharing is always an explicit choice at the moment of
    submission. If you have not opted in to shared model improvement, anything
    you choose to share this way is still sent to us and may be used for product
    improvement — the application will highlight this before you confirm.</p>

  <h2 id="why">5. Purposes &amp; lawful basis</h2>
  <table>
    <tr><th>Purpose</th><th>Lawful basis</th></tr>
    <tr><td>Provide the app you signed up for</td><td>Performance of a contract</td></tr>
    <tr><td>Billing &amp; subscription management</td><td>Contract; legal obligation (tax)</td></tr>
    <tr><td>Security, abuse prevention, logs</td><td>Legitimate interests</td></tr>
    <tr><td>Shared model improvement</td><td>Consent (opt-in; withdrawable at any time)</td></tr>
    <tr><td>Shop calibration (private)</td><td>Performance of contract (your own data, your use only)</td></tr>
  </table>

  <h2 id="share">6. Processors we use</h2>
  <ul>
    <li><b>Hosting</b> — Hostinger International Ltd (application servers,
      currently located in the United States) with Cloudflare, Inc. as
      CDN/security in front of the service.</li>
    <li><b>Payments</b> — Stripe (Stripe Payments Europe / Stripe, Inc. as
      applicable to your region).</li>
    <li><b>Email</b> — Resend, Inc. (transactional email).</li>
  </ul>
  <p>Each is engaged under a data-processing agreement. We keep the current list
    of processors on this page and will update it when providers change. Copies
    of the relevant data-processing terms are available on request. Where
    personal data of EEA/UK users is
    processed outside the EEA/UK (our application servers are currently
    US-located), we rely on the EU–US Data Privacy Framework where the provider
    is certified, or on the Standard Contractual Clauses, with appropriate
    supplementary safeguards.</p>

  <h2 id="security">7. Security</h2>
  <p>Passwords are hashed with a memory-hard function (scrypt) and never stored
    in the clear. Access is over TLS. Sessions use signed, expiring tokens.
    The application runs in isolated containers on virtual servers;
    administrative access is limited to key-based SSH for named administrators,
    and backups are encrypted and rotated per the retention section below.</p>

  <h2 id="retention">8. Retention</h2>
  <p>We keep account and content data for as long as your account is active.
    When you delete your account we remove your profile and associated analysis
    records; some entries may persist in encrypted backups for up to
    30 days before rotation. Billing records are kept as required by Irish tax
    law (6 years).</p>

  <h2 id="rights">9. Your rights &amp; how to exercise them</h2>
  <p><b>EU/UK (GDPR)</b> and <b>California (CCPA/CPRA)</b> rights apply, including
    access, correction, deletion, portability, restriction/objection, and
    (California) opt-out of sale/share — which we do not do, as those terms are defined in the California Consumer Privacy Act.</p>
  <ul>
    <li><b>Export</b> — download your data from <b>Account → Export my data</b>
      in the app.</li>
    <li><b>Delete</b> — remove your account and records from <b>Account → Delete
      account</b>.</li>
    <li><b>Anything else</b> — email <a href="mailto:privacy@partimation.com">privacy@partimation.com</a>.
      You may complain to your supervisory authority (Ireland: the Data
      Protection Commission).</li>
  </ul>

  <h2 id="onprem">10. On-prem installs</h2>
  <p>If you run Partimation on-premises or air-gapped, you are the controller of
    all data in your install; it stays on your hardware and does not reach us.
    Licences and updates are exchanged as signed files, with no runtime
    connection back to us.</p>

  <h2 id="contact">11. Contact</h2>
  <p>Privacy: <a href="mailto:privacy@partimation.com">privacy@partimation.com</a>.
    We may update this policy; material changes are notified in-app and dated
    here.</p>