Privacy Policy

1. Data Controller

Personal data processed in connection with the Cutter4D service is processed by OPL-AI Software, as data controller, under Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the GDPR. Cutter4D is a product of OPL-AI Software. This notice is our privacy notice under Article 10 of the KVKK.

Data controller: OPL-AI Software — Tax ID: 7420742839 — Address: Elmalıkent Mah. Özyavuz Cad. No: 46/1-1, Ümraniye, Istanbul, Türkiye — Email: info@cutter4d.com

2. Your Drawings and Optimisation Records

Cutting optimisation runs entirely in your browser. The DXF and spreadsheet files you load are NOT sent to our servers FOR COMPUTATION.

Optimisation records: for every optimisation you start while signed in, the part geometry, part names and the text on parts, sheet definitions, cutting settings and resulting plan are stored on our servers, tied to your account. If an optimisation does not finish (for example you leave the page while it runs, or an error occurs), its status and the technical reason are recorded instead of a result. Only authorised Cutter4D staff can view these records, to answer your support requests, find bugs and improve nesting quality. They are never shared with or sold to third parties. The newest 300 records per user are kept; older ones are deleted automatically, and all of them are deleted with your account — legitimate interest and performance of the contract.

Saving projects (paid plan): when you save a project, its part geometry, sheet definitions, cutting settings and the results of cuts you run while the project is open (cut history) are stored on our servers, tied to your account. This data is shown only to you, is not shared with other users and is not used for any purpose other than providing the service.

You can delete your projects and cut records from within the app at any time; deleted data cannot be recovered. When your account is deleted, all of your projects and cut history are deleted as well. At most 30 cut records are kept per project; older ones are deleted automatically.

3. Data We Process

Account data: the name, e-mail address and provider identifier we receive when you sign in with Google or Microsoft. We never see or store your password.

Payment data: your payment details are handled by Paddle. We do not see your card number. We receive only subscription status and invoice records.

Technical data: server logs such as IP address, browser type and access time, for security and error tracking.

How we collect it: electronically and by automated means — account data from Google or Microsoft when you sign in, payment and subscription records from Paddle (via payment notifications), drawings and records from your browser while you use the app, and technical data from server logs.

4. Purposes and Legal Basis

Creating your account and providing the service — performance of a contract.

Taking payment and issuing invoices — performance of a contract and legal obligation.

Ensuring security and preventing abuse — legitimate interest.

Meeting statutory retention duties — legal obligation.

5. Sharing

In Türkiye: our servers and database are in Türkiye, hosted by GNET İnternet Telekomünikasyon A.Ş. (Güzel Hosting). Your account data, projects and optimisation records are stored in Türkiye.

Sign-in (Google LLC and Microsoft Corporation, USA): when you press a sign-in button, your identity is verified directly between you and that provider, under its own terms; we never see your password. After verification the provider sends us your name, email address and account identifier.

Payment (Paddle.com Market Limited, United Kingdom): as merchant of record, Paddle takes payment, issues invoices and pays taxes; you enter your payment and billing details directly into Paddle's checkout and Paddle processes them under its own privacy policy. We do not send your email address to Paddle; you enter it on the checkout yourself. To match your purchase to your account, when you open the checkout we send Paddle only your account number (a number that contains neither your name nor your email); this does not happen unless you open the checkout.

To show prices for your country we send Paddle only a country code (from your browser's language setting); your IP address is not sent for this, and your browser does not connect to Paddle until you open the checkout.

Your drawings, projects and optimisation records are not transferred abroad.

We do not sell your data and do not share it for advertising.

6. Retention

Account data is kept while your account is open. You can delete your account yourself in the app under Settings > Delete account; your account data, projects and cut history are permanently deleted at that moment.

To prevent the free trial from being claimed repeatedly, we keep only an irreversible digest (SHA-256) of your sign-in provider identity and your former subscription number from a deleted account. These do not contain your name or email address; they are used only so that the free trial is not granted again if you sign in with the same account — legitimate interest.

Invoice and accounting records are kept for the statutory retention period (as a rule 10 years in Türkiye).

7. Your Rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed and to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request erasure or destruction under Article 7; to request that corrections and erasures be notified to those third parties; to object to an outcome against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing. If the GDPR applies to you, you also have the right to data portability.

Send requests by email to info@cutter4d.com or in writing to Elmalıkent Mah. Özyavuz Cad. No: 46/1-1, Ümraniye, Istanbul, Türkiye. We resolve requests free of charge within 30 days at the latest. You can also delete your account data and projects yourself in the app.

8. Cookies

We use a strictly necessary cookie to keep you signed in. Sign-in is not possible without it.

We do not use third-party tracking cookies for advertising or profiling.

The full list of cookies and browser storage we use, and how to change your choice, is in the Cookie Policy.

9. Security

Connections are encrypted with HTTPS; session cookies are signed and sent only over a secure connection.

No system is entirely without risk. In the event of a data breach we notify within the periods required by law.