Plain English. No legalese. Here's exactly what LensCAD collects, how we protect it, and what control you have over it.
Your email address and password (stored as a one-way hash — we can't read it). We also record when you confirmed your age at sign-up.
Photos are processed on our servers to produce corrected, scaled DXF files, and are used for your session only. They are stripped of metadata before being written to disk (faces are not blurred, so keep people out of the frame), are never copied anywhere for training or dataset use, and are deleted from working storage whenever the app is redeployed — and within 30 days regardless.
Kept in our server logs for up to 90 days, to keep the service secure and to find faults. We don't use it to identify or track you personally.
Basic interaction data like which tools you use, kept with a job and deleted with it. And, tied to your account, the first and latest day you used the app, on how many days, and how many parts you started, so we know how many people use LensCAD. None of it holds what you photograph or draw, and none of it is used for advertising or profiling, or sold to anyone.
Nothing you do in LensCAD is collected for AI training, and no dataset is built or licensed from your work. Here is what happens to a photograph you upload, from the moment it arrives to the moment it is gone.
The moment your photo arrives, embedded metadata is removed — GPS coordinates, serial numbers and timestamps are never kept. Camera make, model and focal length are read first and kept as session settings, because lens correction needs them. This happens before the image is written to disk.
Apart from its metadata, the photo is kept as it arrived. We do not look for faces or people in it, blur them, or analyse them, and no facial geometry or biometric identifier is extracted. So keep people out of the frame, or crop them out before you upload.
Perspective correction, scale calibration, edge detection, tracing and DXF export all run on our own servers. Your photograph goes nowhere else for any of it.
Job storage is temporary and is cleared whenever the app is redeployed or its container recycled, which happens routinely — and within 30 days regardless. We keep no archive of your photographs. Saved project files are downloaded to your device; we hold no copy.
You have meaningful control over your data. Here's what you can request at any time:
The LensCAD plugin for desktop CAD programs is in development. It will carry the same commitments as the rest of LensCAD: the geometry you draw is yours, none of it is captured for training, and nothing is monitored.
Your password is stored using a secure one-way hash — we cannot read it, and neither can anyone else. Even in a breach, your actual password would not be exposed.
All connections to LensCAD use HTTPS/TLS. Data in transit is encrypted end-to-end.
Stored only as salted hashes. We cannot read your password, and a copy of our database would not reveal it.
In the event of a data breach affecting your personal information, we will notify you within 45 days as required by Oregon law (ORS 646A.604).
Have a question about your data, or want a copy of it or your account deleted? Reach out directly.
For privacy questions, data requests, and opt-out requests:
[email protected]
We respond to all data requests within 45 days. Oregon, United States.