Plain English. No legalese. Here's exactly what LensCAD collects, how we protect it, and what control you have over it.
Your email address and password (stored as a one-way hash — we can't read it). We also record when you confirmed your age at sign-up.
Photos are processed on our servers to produce corrected, scaled DXF files, and are used for your session only. They are stripped of metadata and face-blurred before being written to disk, are never copied anywhere for training or dataset use, and are deleted from working storage whenever the app is redeployed — and within 30 days regardless.
Used to verify you're in the United States (LensCAD is US-only for now) and to keep the service secure. We don't use it to identify or track you personally.
Basic interaction data like which tools you use. This helps us improve the app. It is never used for advertising, profiling, or sold to anyone.
Nothing you do in LensCAD is collected for AI training, and no dataset is built or licensed from your work. Here is what happens to a photograph you upload, from the moment it arrives to the moment it is gone.
The moment your photo arrives, embedded metadata is removed — GPS coordinates, serial numbers and timestamps are never kept. Camera make, model and focal length are read first and kept as session settings, because lens correction needs them. This happens before the image is written to disk.
A face detector locates faces and blurs them irreversibly, before the image is saved rather than after. It is best-effort — it can miss one, or flag something that is not a face — and it exists to reduce incidental capture of people in the background of a workshop photo. No facial geometry or biometric identifier is extracted or kept.
Perspective correction, scale calibration, edge detection, tracing and DXF export all run on our own servers. Your photograph goes nowhere else for any of it.
Job storage is temporary and is cleared whenever the app is redeployed or its container recycled, which happens routinely — and within 30 days regardless. We keep no archive of your photographs. Saved project files are downloaded to your device; we hold no copy.
You have meaningful control over your data. Here's what you can request at any time:
The LensCAD Rhino 3D plugin is in development. It will carry the same commitments as the rest of LensCAD: the geometry you draw is yours, none of it is captured for training, and nothing is monitored.
Your password is stored using a secure one-way hash — we cannot read it, and neither can anyone else. Even in a breach, your actual password would not be exposed.
All connections to LensCAD use HTTPS/TLS. Data in transit is encrypted end-to-end.
Stored only as salted hashes. We cannot read your password, and a copy of our database would not reveal it.
In the event of a data breach affecting your personal information, we will notify you within 45 days as required by Oregon law (ORS 646A.604).
Have a question about your data, or want a copy of it or your account deleted? Reach out directly.
For privacy questions, data requests, and opt-out requests:
[email protected]
We respond to all data requests within 45 days. Oregon, United States.