DATA PROTECTION & PRIVACY COMPLIANCE

Privacy Policy

Effective Date: October 26, 2026 • Compliant with GDPR & NDPR • Avilonai Inspire

Never Sold or Trained On

Your custom CAD prompts, floor plans, and cut-lists are never sold, rented, or used to train third-party public models.

Every project is cryptographically bound to your authenticated user ID at the database engine level via Supabase RLS.

All payment transactions are tokenized via Bachs.io. GearBox never touches, sees, or stores raw card numbers or CVVs.

GearBox Studio collects only the data necessary to provide professional CAD generation, project storage, and billing:

Account Information: Your email address, encrypted password hash (managed via Supabase Auth), account display name, and credit balance.
Workspace CAD Assets: Parametric assembly trees, 3D split-box dimensions, materials selected, BOM cut-lists, and custom labels you assign to projects.
Architectural Scans & Prompts: Uploaded blueprint images (PNG, JPG, SVG, PDF) and natural language prompts submitted to the CAD engine. These are processed in ephemeral memory and saved only to your private cloud vault.
Technical Telemetry: Anonymized WebGL rendering diagnostics, API response latencies, and browser error logs to maintain system uptime.

We adhere to a strict policy regarding your design IP:

STRICT COMMERCIAL CONFIDENTIALITY:

• We DO NOT use your proprietary joinery designs or client floor plans to train general generative AI models.

• We DO NOT share your project files with other users or competitors.

• We DO NOT sell personal or telemetry data to advertising networks or data brokers.

We partner exclusively with enterprise-grade infrastructure providers that comply with SOC 2 Type II and ISO 27001 standards:

Supabase Inc.PostgreSQL Database, Auth & Row-Level Security

AWS US-East

Bachs.ioPCI-DSS Level 1 Tokenized Payment Gateway

Tokenized Vault

Google Cloud PlatformGemini Argon Vision API (Ephemeral Processing)

Zero-Retention

Regardless of your geographic location, GearBox Studio provides universal data privacy controls:

Right of Access & Portability: Export all your CAD projects, cut-lists, and account records in standard JSON/CSV format at any time.
Right to Rectification: Update your profile, billing details, or project data directly inside the Studio.
Right to Erasure ("Right to be Forgotten"): Request immediate permanent deletion of your account, database records, and stored assets.
Right to Restrict Processing: Opt out of non-essential performance telemetry via Cookie Preferences.

To exercise your data protection rights, request account deletion, or discuss our compliance policies:

Data Protection Officer • Avilonai Inspire