Privacy Policy

Last updated 18 October 2026

This policy explains how Cadsy handles personal data about the people who use it. The data controller is Anjaneya AB (org. no. 559580-5531), Sweden. For any privacy question or request, email [email protected].

What we collect

• Account data: your name, email address, a hashed password if you sign up with email, and when you signed up, signed in and accepted our terms. If you continue with Google, Google shares your name, email address and profile picture with us; we never receive your Google password.
• Project content: project names, chat messages, files you provide, scenes, dataset programs, previews, generated images and annotations, and usage credit records.
• Technical data: IP address, browser details and request logs kept by our service providers to operate and secure the service.

Why we use it and our legal basis

• To provide Cadsy under our agreement with your organisation: your account, your projects, AI-assisted scene configuration, rendering and downloads (GDPR Article 6(1)(b), and Article 6(1)(f) where you use Cadsy on behalf of your employer).
• To keep the service secure, prevent abuse and fix faults (our legitimate interest, Article 6(1)(f)).
• To meet legal obligations (Article 6(1)(c)).

We do not use your content to train AI models or improve Cadsy. If we later offer a setting for this, it will be off unless you turn it on. We do not use analytics, advertising or tracking tools, do not send marketing email, do not sell personal data and do not make automated decisions with legal or similarly significant effects about you.

Chat messages are processed by an AI model that we run on our own Modal account; they are not sent to a third-party AI provider, and Modal does not store them.

Who processes it

These providers process personal data only on our instructions under a data processing agreement. Your data is stored and processed in the EU/EEA.

• Supabase Pte. Ltd. (Singapore): sign-in, account emails and our database, hosted in Stockholm, Sweden.
• Modal Labs, Inc. (United States): the AI model and 3D rendering, run in EEA data centres.
• Amazon Web Services EMEA SARL (Luxembourg): application hosting and storage of scenes and datasets in the EU.
• Zoho Corporation B.V. (Netherlands): our email and the early-access form on cadsy.se, hosted in the EU.

Supabase, Modal and Zoho’s group companies are established outside the EEA and may access data from there, for example for support or security. Those transfers are protected by the European Commission’s Standard Contractual Clauses in their data processing agreements. You can ask us for a copy.

If files or content you add to a project contain personal data about other people, your organisation is the controller of that data and we process it on its behalf.

This website

cadsy.se is hosted by Cloudflare, Inc. (United States), which processes visitors’ IP addresses and request details to deliver and protect the site, under its data processing agreement and the Standard Contractual Clauses. The site itself sets no cookies and uses no analytics; its fonts are served from cadsy.se.

If you request early access, the form is loaded from Zoho when you open it and sends us your name, email address, organisation and message. We use them only to reply to you about early access (our legitimate interest, Article 6(1)(f)) and delete them within 12 months unless you become a customer.

How long we keep it

We keep your data while your account is active. When you ask us to delete your account or your organisation’s pilot ends, we delete your account and project content within 30 days. Copies in our providers’ logs and backups expire within their standard retention periods. If we must keep a record by law, for example accounting records once we charge fees, we keep only that record for the required period.

Your browser

Cadsy stores your sign-in session and small interface preferences in your browser’s local storage. They are needed for the service to work, so we do not ask for consent. We use no other cookies.

Your rights

You can ask to access, correct, delete or receive a copy of your personal data, and to restrict or object to how we use it. Email [email protected] and we will reply within one month. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or the authority where you live or work.

Cadsy is for people aged 18 or over who use it for work. We may update this policy and will ask you to accept the new version when you next sign in.