Privacy Policy

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you purchase or use ChipSense:

• Contact Information: Email address (required for license delivery and support)
• Payment Information: Processed securely through Stripe (we do NOT store credit card details)
• License Information: License key, activation dates, tier/subscription status

1.2 Operational Data

ChipSense processes the following operational data locally on your computer:

• Audio Recordings: Microphone input from CNC equipment for sound analysis
• Visual Data: Camera/video feed for grain detection (Pro tier)
• Machine Parameters: G-code files, cutting parameters, tool information
• Job Data: Job history, analytics, optimization suggestions

1.3 Usage Analytics

We may collect anonymous usage statistics to improve the software:

• Software version and operating system
• Feature usage patterns (which features are used most)
• Error reports and crash logs
• Performance metrics (startup time, memory usage, etc.)

This data is anonymized and does NOT include any personal information or proprietary manufacturing data.

2. How We Use Your Information

2.1 License Management

We use your email address and payment information to:

• Generate and deliver your license key
• Validate license status when you use the software
• Process payments and manage subscriptions
• Send transactional emails (purchase confirmation, license expiration notices)

2.2 Customer Support

We use your information to:

• Respond to support requests and technical questions
• Troubleshoot software issues
• Provide updates about your license or subscription

2.3 Product Improvement

We use anonymous usage analytics to:

• Identify and fix bugs
• Understand which features are most valuable
• Optimize software performance
• Plan future feature development

2.4 We Do NOT

ChipSense will NEVER:

• Sell your personal information to third parties
• Share your proprietary manufacturing data
• Use your operational data for any purpose other than providing the service
• Send unsolicited marketing emails (unless you opt-in)
• Track your behavior outside of the ChipSense application

3. Data Storage and Security

3.1 Local Data Storage

Most operational data is stored locally on your computer:

• Audio recordings are analyzed in real-time and NOT uploaded to our servers
• Visual grain detection happens locally on your device
• G-code files and machine parameters remain on your computer
• Job history and analytics are stored in a local database

3.2 Cloud Storage

The only data stored on our servers includes:

• Your email address and license information (stored in Supabase PostgreSQL)
• Payment records (stored by Stripe, not by us)
• Optional: Anonymized error reports and crash logs (if you opt-in)

3.3 Security Measures

We implement industry-standard security practices:

• Encryption: All data transmitted between your computer and our servers uses HTTPS/TLS encryption
• Database Security: Our database (Supabase) uses encryption at rest and role-based access control
• Payment Security: All payments processed through Stripe (PCI DSS Level 1 compliant)
• Limited Access: Only authorized personnel have access to customer data
• Regular Backups: Database backups are encrypted and stored securely

3.4 Data Retention

• Active Licenses: Retained for the lifetime of your license or subscription
• Expired Licenses: Retained for 7 years for tax/accounting purposes, then deleted
• Support Tickets: Retained for 2 years after resolution
• Anonymous Analytics: Retained indefinitely (no personal information)

4. Third-Party Services

4.1 Service Providers

ChipSense uses the following third-party services:

• Stripe: Payment processing (see Stripe Privacy Policy)
• Supabase: Database hosting (see Supabase Privacy Policy)
• Fly.io: Application hosting (see Fly.io Privacy Policy)

4.2 No Third-Party Analytics

We do NOT use:

• Google Analytics or similar tracking tools
• Social media pixels or trackers
• Advertising networks or data brokers

5. Your Privacy Rights

5.1 Access and Portability

You have the right to:

• Request a copy of all personal data we have about you
• Export your data in a machine-readable format
• Verify the accuracy of your information

5.2 Correction and Deletion

You have the right to:

• Correct any inaccurate personal information
• Request deletion of your personal data (subject to legal retention requirements)
• Close your account and remove all associated data

5.3 Opt-Out Rights

You can:

• Opt-out of non-essential emails (unsubscribe link in every email)
• Disable anonymous usage analytics in Settings
• Request that we stop processing your data (may affect software functionality)

5.4 GDPR Rights (EU Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right to data portability
• Right to restriction of processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

5.5 CCPA Rights (California Users)

If you are a California resident, you have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do NOT sell your data)
• Right to non-discrimination for exercising your rights

6. Cookies and Tracking

6.1 Website Cookies

Our website uses minimal cookies:

• Essential Cookies: Required for website functionality (e.g., session management)
• NO Tracking Cookies: We do not use advertising or analytics cookies

6.2 Desktop Application

The ChipSense desktop application:

• Stores your license key locally for validation
• Saves your preferences and settings locally
• Does NOT track your browsing or behavior outside the app

7. Children's Privacy

ChipSense is a professional industrial software intended for trained CNC operators. We do not knowingly collect information from anyone under 18 years of age.

If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@chipsense.app.

8. International Data Transfers

ChipSense operates globally. Your information may be transferred to and stored in:

• United States: Our primary servers are located in the US
• EU Data Protection: We comply with GDPR for EU users
• Data Transfer Mechanisms: We use Standard Contractual Clauses (SCCs) for international transfers

9. Data Breach Notification

In the unlikely event of a data breach affecting your personal information:

• We will notify affected users within 72 hours of discovery
• Notification will include the nature of the breach and steps taken to address it
• We will report the breach to relevant authorities as required by law

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

• Notification: We will notify users of material changes via email and in-app notification
• Effective Date: Changes take effect 30 days after notification
• Your Options: Continued use after changes indicates acceptance. If you disagree, you may terminate your license.