Privacy Policy

1. The short version

• We collect what we need to run your subscription: your email address, your account ID and your subscription status.
• Your designs, toolpaths, G-code, machine profiles and settings stay on your tablet. They are never sent to us.
• The app sends no usage analytics and no crash reports, and it contains no advertising trackers. The website has no analytics or advertising trackers.
• Paddle handles your payment. We never see your card number.
• We don't sell your personal information, and we don't share it for advertising.

2. Who is responsible for your data

PrimeMotionCNC, LLC ("we", "us") is the controller of the personal information described here. Contact us about privacy through the contact form or at support@primemotioncnc.com.

Paddle is the merchant of record for purchases. For the payment and tax information it collects at checkout, Paddle is a controller in its own right, under Paddle's privacy policy.

3. What we collect and why

• Account. Your email address, a unique account ID, and either a password or the fact that you sign in with Google. Google Firebase Authentication stores this for us. We never see your password; Firebase keeps only a protected (hashed) form of it. We use the account to identify you and to connect your subscription to the app.
• Subscription status. One record per account: plan (annual or monthly), whether you are in the trial, active or not, period end date, any payment-failure grace date, Paddle's raw status, the Paddle customer and subscription IDs, and the time of the last payment event. Paddle's notifications write it, and it lives in Google Cloud Firestore. Only you (signed in) and we can read it. The app and the account page read it to decide whether your subscription is active.
• Payment. Paddle collects your card or other payment details, your billing address, and any tax details at checkout. We never receive your card number. Paddle tells us the status of your subscription and gives us a customer reference, and we can see your purchase history in Paddle's dashboard.
• Server logs. When Paddle notifies us of a payment event, or the app or website checks your subscription, Google records technical logs. These include your account ID, the event, the time and network details such as an IP address. We use them to run and fix the service. Google Cloud keeps these logs for about 30 days by default.
• Support messages. If you email us or use the contact form, we receive your name, email address and whatever you write. We use it only to answer you. Our email runs on Google Workspace. [[OWNER: name the service the contact form sends through, if it isn't Google Workspace]]

4. What stays on your tablet

Prime Motion stores your work as files and a database on the tablet itself. This includes designs (.pmd files), toolpaths, G-code, tool libraries, macros, machine profiles, job history and settings. It also keeps a copy of your last subscription check so it can work offline. None of this is sent to us. It leaves the tablet only when you export or share it yourself.

The G-code the app sends to your machine goes over the USB cable to your controller, and nowhere else.

If Android backup is turned on for your device, Android may include Prime Motion's app data in your device backup to your own Google account. Your device settings control that, and Google's terms cover it. We have no access to those backups.

5. Google Drive and Dropbox

You can connect Google Drive or Dropbox to bring files in, and to save exports out. Nothing happens unless you choose to connect.

• You sign in with Google or Dropbox directly and approve access there. For Google Drive, the app asks to see your Drive files (so you can browse and pick one) and to create files (so it can save exports).
• When you pick a file, the app downloads it straight from Google or Dropbox to your tablet. When you export to one of them, the app uploads the file straight from your tablet. These files never pass through our servers.
• The access tokens are stored encrypted on your tablet and are never sent to us.
• You can disconnect at any time in the app, or by removing Prime Motion's access in your Google or Dropbox account settings.

Prime Motion's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Remote access on your local network

Remote access is off until you turn it on. When it's on, the tablet runs a small web server on your local network. A browser on the same network can pair with it by entering a code shown on the tablet, and then view the Control screen live and operate it.

• The connection goes directly between the tablet and the browser. Nothing goes to us or to any cloud service.
• It uses plain HTTP, so it is not encrypted. Only use it on a network you trust. Anyone on that network who can capture traffic could see the stream.
• While a browser is paired, the tablet keeps the browser's name (taken from its user-agent) in memory so it can show who is connected. Turning remote access off forgets all paired browsers.

7. Local diagnostic interface

The app runs a diagnostic interface for developer tools. It listens only on the tablet itself (address 127.0.0.1), so it can't be reached from your network or the internet, and it sends nothing to us.

8. This website

• Google Firebase Hosting serves the site. Like any web host, it handles your IP address and browser details to deliver pages.
• We use no analytics, advertising or tracking scripts, and our own pages set no cookies.
• On the sign-in, account and checkout pages, the Firebase sign-in library loads from Google's servers (www.gstatic.com) and keeps you signed in using your browser's local storage. Signing out removes it. If you choose Continue with Google, Google handles that sign-in.
• The checkout page loads Paddle's checkout (cdn.paddle.com). Paddle may use cookies or similar technology for checkout and fraud prevention, as described in Paddle's privacy policy.

9. Who we share it with

We share personal information only with the providers that run the service for us, and only for that purpose:

• Google: Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting and Google Workspace email.
• Paddle (Paddle.com Market Ltd and its affiliates): merchant of record, for payments, tax, invoices and refunds.

Google Drive and Dropbox are only involved if you connect them. In that case you deal with them directly, and we receive nothing.

We may also disclose information if the law requires it, or to protect people's safety or our legal rights. We don't sell personal information. We don't "share" it for cross-context behavioral advertising, as California law uses that term.

10. Legal bases (EU and UK)

• Contract: to provide your account and subscription.
• Legitimate interests: to keep the service secure, prevent fraud and abuse of trials and refunds, enforce licenses, and answer your messages.
• Legal obligation: to keep tax and accounting records, which Paddle mostly does as merchant of record.

11. How long we keep it

• Your account and subscription record stay as long as your account exists. When you ask us to delete your account, we delete both.
• Google Cloud keeps server logs for about 30 days by default.
• We keep support emails as long as we need them to help you, and then delete them.
• Paddle keeps transaction records for as long as tax and financial laws require.

12. Your rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it, including your account;
• give it to you in a portable format.

In the EU and UK, you can also object to, or ask us to restrict, how we use it. You can complain to your local data-protection authority.

In California and other US states with privacy laws, you have the right to know, correct and delete, and to opt out of sale or targeted advertising. We do neither. We won't treat you differently for using your rights.

To make a request, use the contact form or email support@primemotioncnc.com. Write from your account's email address so we can confirm it's you. We'll answer within 30 days. If you want Paddle's billing records deleted too, we'll pass your request to Paddle, or you can contact Paddle directly.

Deleting your account doesn't touch the files on your tablet. Those are yours to keep or remove.

13. International transfers

We are based in the United States, and Google and Paddle process data in the United States and other countries. If you are in the EU or UK, your information is transferred under the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework.

14. Security

All traffic between the app or website and our services is encrypted (HTTPS). Only the account owner and we can read the subscription record. Cloud-storage tokens are encrypted on the device. Payment details never reach our systems. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

15. Children

Prime Motion is a professional tool. It isn't meant for children, and we don't knowingly collect information from anyone under 16. If you think a child has given us information, contact us and we'll delete it.

16. Changes to this policy

If we change how we handle personal information, we'll update this page and its effective date. If the change matters, we'll email account holders before it takes effect.

17. Contact

PrimeMotionCNC, LLC: contact form or support@primemotioncnc.com.