SpeakCAD
Live demoPricing
Log inGet started
Legal

Privacy Policy

Last updated 7 October 2026

Who we are

SpeakCAD ("we") operates speakcad.com and app.speakcad.com. Contact us through the contact form.

What we collect

  • Account data: e-mail address and a hashed password (or magic-link or Google sign-in), managed by Supabase Auth. When you use Google, we receive your Google e-mail and display name from Google; we do not receive your Google password.
  • Content you create: prompts, chat messages, uploaded files (images, STL, 3MF, SCAD), generated models and thumbnails. This is needed to provide the service.
  • Billing data: payments are processed by Stripe. We store your Stripe customer id, subscription id, plan and your credit ledger. We never see your card number.
  • Usage data: downloads, timestamps, and basic technical logs for reliability and abuse prevention.
  • Marketing attribution: on your first visit we store the page you landed on, whether it was on the site (speakcad.com) or the app (app.speakcad.com), whether your device is a phone or a computer, the site that referred you and, if you arrive from an ad or a campaign link, the click id and UTM parameters, in a first-party cookie for 90 days. They are attached to your account if you sign up so we can measure which channels work, together with the country your connection comes from (read from your IP address by our host; the address itself is not stored).
  • Affiliate payouts: if you join the affiliate program, the PayPal or Wise address payouts go to and, for the invoices we issue on your behalf, your billing details (name, postal address, country, how you receive the money, and for a business its registration and VAT numbers), with the date you accepted the self-billing agreement. Invoices and statements are accounting records: they keep a copy of these details and are kept for 10 years, as French law requires, even after your account is deleted.
  • Invitations: if you arrive from a member's invitation link, we store its code in a first-party cookie for 60 days and, if you sign up, link your account to theirs so both of you receive the invitation credits. The person who invited you sees only how many people joined from their link and how many were rewarded, never who.
  • Print orders: if you order a printed part, the name, delivery address and phone number you enter at checkout, and the part's file. They go to the print service that makes and ships it, and stay with the order as a billing record.

How we use AI providers

Your prompts, attached images and files, and the current model code are sent to the AI provider that answers the request (Anthropic's API; xAI's API only if we switch a model tier to it) to generate models. Neither uses API data to train its models. We do not use your content to train anything.

Assistant connectors (MCP)

ChatGPT, Claude and other assistants can call our MCP servers (speakcad.com/api/mcp and speakcad.com/api/mcp/slicer), for example when you have installed the SpeakCAD or SpeakCAD Slicer connector or plugin. We never see your conversation or your assistant account: a call carries only what the assistant sends the tool, such as search keywords, a part description or a change, a printer name and print settings. We count calls per day, per tool and per assistant product (for example ChatGPT or Claude, read from the request's user agent), and we keep the calling address in memory for a minute to limit request rates.

  • Signing in an assistant: when you connect an assistant to your SpeakCAD account, you sign in on our site and approve it (OAuth). We store the assistant's registration (its name and the address it returns to), and access and refresh tokens as one-way hashes, with the time they were last used. An access token lasts an hour and a refresh token 30 days; disconnecting the connector in your assistant stops it, and you can ask us to revoke every connection.
  • What a signed-in assistant does: a part it asks for (create_part, edit_part) is designed in your account like a request in the editor, so the description, the AI's answer and the model are saved with your models and the AI providers section above applies. Downloads, slices and credits are recorded as on the site. We keep the model's STL a short time to show it in the assistant, and a download link works for 24 hours.
  • Files you slice in the assistant: a file you drop on the slicer shown in the conversation goes from your browser straight to the slicer service, like on the site; only its name and size are recorded with the slice. The G-code is kept 24 hours behind its download link.
  • Files you have changed in the assistant: an STL or 3MF you drop on the card to have SpeakCAD's AI change it (edit_file) is stored with your models, like a file sent in the editor, and handled as a request in the editor. From the SpeakCAD Slicer connector, which has no AI, the file and the change you typed wait in private storage until you open them in the editor on our site, 24 hours at most, then they are deleted.

Without signing in, the tools read our public catalogue and return links, and nothing is linked to an account. In Claude and ChatGPT, the slicer shown in the conversation then allows a few free slices a day: to count them we store a one-way hash of your connection address with the printer and the file size for 7 days, never linked to an account.

Cookies

We use these first-party cookies:

  • Authentication (Supabase): keep you signed in. Strictly necessary.
  • sc_attr (90 days): the marketing attribution described above, including whether the visit landed on the site or the app and whether the device is a phone or a computer.
  • sc_ref (60 days): the invitation code, only when you arrive from a member's invitation link.
  • sc_seen (180 days): holds only "1" and marks a browser as already counted, so our daily visitor totals count each browser once. The totals are aggregated daily counts, which may be broken down by traffic source, device type (phone or computer) and landing page; nothing in them identifies you, and the cookie is not linked to your account.
  • sc_chat (1 year): only if you write to us in the support chat without being signed in, so the conversation is still there on your next visit.
  • sc_demo (90 days): only if you try the live demo; it holds the time of your first demo edit and is copied to your account if you sign up, so we can tell whether the demo helped.

If Google Ads conversion tracking is enabled, Google's tag may set cookies as described in Google's privacy policy.

OpenAI's measurement pixel, for ads shown in ChatGPT, sets __obref (1 year, a random browser reference) and, when you arrive from such an ad, __oppref (30 days, the reference of the ad click). We send it only payments: when you buy credits or a plan, the amount and what was bought, with a SHA-256 hash of your e-mail address and of your account id, so OpenAI can credit the purchase to the ad. OpenAI's privacy policy applies to that data.

Meta's pixel, for ads on Facebook and Instagram, sets _fbp (90 days, a random browser reference) and, when you arrive from a link on Facebook or Instagram, _fbc (90 days, the reference of the click). It records the pages you view on speakcad.com and app.speakcad.com, and we send it payments: when you buy credits or a plan, the amount and what was bought, so Meta can credit the purchase to the ad. Meta may link this to your Facebook or Instagram account if you are signed in there; Meta's privacy policy applies to that data.

Sharing

We share data only with the processors needed to run the service: Supabase (database, auth, storage, EU region), Anthropic and xAI (AI generation), Stripe (payments), Vercel (hosting), Google (advertising measurement, when enabled) OpenAI (measurement of ads shown in ChatGPT) and Meta (measurement of ads on Facebook and Instagram). We do not sell personal data.

When you order a printed part, the independent print service that makes and ships it receives what that order needs: the part's file, and your name, delivery address and phone number.

Retention

Account and content data are kept while your account exists. You can delete models at any time; deleting your account removes your data within 30 days, except billing records we must retain by law.

Your rights

You can access, export, correct or delete your data by writing to us through the contact form from the address on your account. EU/UK users have the rights described in the GDPR, including lodging a complaint with a supervisory authority.

Changes

We will post changes here and update the date above.