Privacy Policy

Effective date: COUNSEL-PLACEHOLDER · Version: DRAFT-0

⚠ COUNSEL-PLACEHOLDER — Structural draft for legal review. The data inventory below reflects the actual system design and should be verified against the shipped implementation before publication. Sections marked [COUNSEL] require final language from counsel.

1. Summary

[COUNSEL] We collect the minimum needed to operate a paid subscription: an email address for your account, and subscription state written by our payment processor. This website sets no analytics or advertising trackers.

2. Data we collect

Account data — email address and a hashed credential, stored by Firebase Authentication (Google LLC) as our identity provider.
Entitlement data — subscription status (plan, trial flag, expiry, payment-failure grace), keyed to your account ID, stored in Cloud Firestore and written from payment events.
Payment data — handled entirely by Paddle.com, our merchant of record. We never receive or store card numbers. Paddle shares with us the subscription status and a customer reference, not payment instrument details.
Designs and G-code — files you create in the app stay on your device unless you export them. [COUNSEL: confirm against shipped cloud features at publication time.]

3. What we do not collect

[COUNSEL] No advertising identifiers, no analytics trackers on this website, no sale of personal data.

4. Processors and recipients

[COUNSEL] Google LLC — Firebase Authentication, Cloud Firestore, Cloud Functions (hosting and entitlement checks).
[COUNSEL] Paddle.com Market Ltd — merchant of record, payment processing, tax handling, billing support.

5. Legal bases

[COUNSEL] Contract performance (operating your subscription), legitimate interest (fraud prevention, license enforcement), legal obligation (tax, accounting via Paddle). Jurisdiction-specific bases to be drafted.

6. Retention

[COUNSEL] Account and entitlement records retained while the account exists and for PLACEHOLDER-PERIOD after deletion; payment records retained by Paddle per its own policy.

7. Your rights

[COUNSEL] Access, correction, deletion, portability, complaint to a supervisory authority — with the exercise mechanism (email to support@primemotioncnc.com) and jurisdiction-specific rights (GDPR, CCPA/CPRA) drafted by counsel.

8. International transfers

[COUNSEL] Google and Paddle process data in multiple regions; describe transfer mechanisms (SCCs, adequacy).

9. Security

[COUNSEL] Transport encryption everywhere; entitlement records readable only by the account owner; payment credentials never touch our systems.

10. Children

[COUNSEL] The Service is not directed at children; minimum age per jurisdiction.

11. Changes and contact

[COUNSEL] How policy changes are announced · support@primemotioncnc.com · COMPANY-POSTAL-ADDRESS-PLACEHOLDER.