01What this policy covers
Castable, Inc. (“Castable”) runs the Castable service at castable.io. You upload a sketch or photo of a ring plus a short description, and Castable turns it into factory-ready CAD with a validation report. This policy covers the website, the workbench, and the studio agent, which currently runs as a closed beta. It applies to everyone who visits the site or signs in.
02What Castable collects
- Account data. You sign in with Google through Firebase Authentication. Castable stores the name on your Google account, your email address, and a Firebase user ID. Castable never sees your Google password.
- Content you give Castable. The images you upload, the descriptions you write, and everything Castable generates for you: CAD files, renders, validation reports, and the history of your workbench sessions.
- Technical data. Google Cloud keeps server request logs for Castable. Each log line records an IP address, a timestamp, and a browser user agent. Your browser also holds a small amount of local storage and cookies, used only for your sign-in session and UI preferences such as the light or dark theme.
Castable runs no advertising, no third-party analytics, and no tracking pixels. The site loads no ad networks and sets no marketing cookies.
03Why Castable uses it
- To provide the service. Castable reads your sketch, builds the CAD, measures it, and shows you the report. It keeps your session history so you can return to a design.
- To keep the service secure. Castable uses request logs to detect abuse, limit excessive load, and investigate incidents.
- To support you. When you email Castable, an engineer may look at your account and content to answer your question or fix a bug.
- To meet legal obligations and to enforce the Terms of Service.
Castable does not use your data for advertising and does not build marketing profiles of you.
04Who processes it
Castable relies on three subprocessors to run the service:
Castable does not sell your personal data and does not share it with data brokers, advertisers, or analytics vendors. Beyond these subprocessors, Castable discloses your data only when the law requires it or when you ask Castable to.
05How long Castable keeps it
Castable keeps your uploads, descriptions, CAD files, renders, reports, and session history until you delete them or ask Castable to delete them by emailing privacy@castable.io. When you ask, Castable deletes your account data and your content from its systems.
Google Cloud keeps request logs under its default retention periods, and Anthropic keeps API data for its own limited period. Castable does not extend either.
06Your rights
Wherever you live, you can ask Castable to:
- Access the personal data it holds about you.
- Correct anything that is wrong.
- Delete your account and your content.
- Export a copy of your content and account data in a usable format.
Email privacy@castable.io from the address on your account. Castable answers within the time the law sets and never charges for a reasonable request.
If you are in the EEA, the UK, or Switzerland (GDPR). Castable processes your data to perform its contract with you and for its legitimate interests in security and support. You can also object to or restrict processing, and you can complain to your local data protection authority.
If you live in California (CCPA). You have the right to know what personal information Castable collects, to delete it, to correct it, and to equal service when you exercise these rights. Castable does not sell or share personal information as the CCPA defines those terms, so there is nothing to opt out of.
07How Castable protects it
Castable stores your data on Google Cloud, which encrypts it at rest and in transit. Sign-in runs through Firebase Authentication, so Castable never handles your password. Only the people who run the service can reach production data, and only when they need it to operate or support it. Castable reviews request logs to spot abuse.
No system is perfectly secure. If Castable learns of a breach that affects your data, Castable tells you and any regulator the law requires.
08Children
Castable does not intend the service for children under 13 and does not knowingly collect data from them. If you believe a child under 13 has given Castable data, email privacy@castable.io and Castable deletes it.
09International transfers
Castable processes and stores your data in the United States, where privacy law may differ from the law in your country. When you use Castable from elsewhere, your data travels to the United States for processing. Castable relies on the transfer safeguards its subprocessors provide.
10Changes to this policy
Castable may update this policy. When it does, it changes the effective date at the top of this page. For material changes, Castable notifies signed-in users by email or with a notice in the workbench before the change takes effect.
11Contact
Castable, Inc. is the controller of the data described here. Send questions, requests, and legal notices to privacy@castable.io.