Legal
Privacy policy
What we collect, why we collect it, who else sees it, how long we keep it, and what you can ask us to do about it. Written to be read, not to be survived.
Last updated 11 August 2026. This is the version that applies while PointForge Pro is in pre-release.
Who we are
PointForge Pro is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS], company number [COMPANY NUMBER]. We are the data controller for the information described here.
For anything in this policy, write to support@pointforgepro.com.
What we collect
Everything below is something the software or the website actually records. There is no separate marketing profile, no advertising identifier and no tracking of you across other websites.
When you create an account
- Your email address
- A username, if you choose one – it is optional
- Your password, stored only as a cryptographic hash. We cannot read it, and neither can anyone who steals the database
- Whether and when you confirmed your email address
- A count of failed sign-in attempts and, if there are too many, the time your account is locked until
When you sign in, from the website or the application
- The IP address the request came from
- Your browser or application user-agent string
- An identifier for the installation you signed in from, so a licence seat can be tied to one machine at a time
- A label for that machine – for the desktop application this is the computer name
- The time of your last activity, refreshed roughly every five minutes while the application is open, so an abandoned seat can be released
The five-minute signal is how the seat system knows an installation is still in use. It carries no information about your work – not what file you opened, not what you measured, not what you exported.
When you activate a machine
- A device identifier and label you supply
- A hash of a device fingerprint – a one-way value, not the underlying hardware details
- Operating system type and version, and the application version
- When the machine was activated and when it was last seen
When you buy a licence
- Your email address, the order number, what you bought, the quantity and the amount
- The licence and entitlement records that result – the plan, its start and end dates, and how many seats it grants
We do not process card details. No payment provider is connected yet, so no card number, expiry or security code has ever reached our systems. When a payment provider is added, the card details will go to them and not to us, and this policy will be updated to name them before that happens.
Security and audit records
We keep an audit trail of security-relevant events – sign-ins and sign-outs, successful and failed, session renewals, seat changes, licence changes and purchases. Each entry records the event type, the account, the IP address, the user-agent and the time. Our web servers also keep request logs.
What we never collect
- Your point clouds. Scans, projects, measurements, sections and meshes stay on your own disk. The application does not upload them, and there is no cloud storage to upload them to
- No file names, folder paths or project contents
- No analytics or advertising trackers on our marketing pages
- No special category data – nothing about health, beliefs, politics or biometrics
Why we are allowed to
| What | Legal basis |
|---|---|
| Account, licence and seat records | Performance of our contract with you – without them we cannot give you the software you paid for |
| Order and payment records | Performance of the contract, and our legal obligation to keep accounting records |
| Transactional email – verification, password reset, licence notices | Performance of the contract |
| Security and audit records, lockout counters | Our legitimate interest in keeping accounts and licences secure against misuse |
| Strictly necessary cookies | Performance of the contract – you cannot stay signed in without them |
We do not rely on consent for any of the above, because none of it is optional to the service. If we ever want to do something that does need consent – a newsletter, say – we will ask separately and you will be free to say no.
Cookies
We set two, and both are strictly necessary:
| Session cookie | Holds your place during sign-in and checkout. Marked HttpOnly, so scripts cannot read it |
|---|---|
| Authentication cookie | Keeps you signed in to your account pages. If you tick "remember me", it lasts longer; if you do not, it ends with your browser session |
There are no advertising, analytics or profiling cookies, from us or from anyone else. That is why you are not being asked to dismiss a cookie banner – under the ePrivacy rules, strictly necessary cookies do not need consent, and we have nothing else to ask about.
Who else sees it
We do not sell your data and we do not share it for anyone else's marketing. We use these service providers:
| Provider | What they do | What they see |
|---|---|---|
| Microsoft | Sends our transactional email, through Microsoft 365 | Your email address and the contents of those messages |
| [HOSTING PROVIDER] | Hosts the server | Everything stored on it, as the operator of the infrastructure |
| Let's Encrypt | Issues the certificate that encrypts this site | Only our domain name – no personal data |
Every file this website loads – stylesheets, images, scripts, icons – comes from our own server. There is no content delivery network and no third-party script anywhere on the site, including at checkout, so browsing here does not disclose your IP address to anyone but us.
We will also disclose data where the law requires it, or to establish or defend a legal claim.
Where it is held
Everything is held on a single server in [SERVER LOCATION – COUNTRY]. Our email provider, Microsoft, may process message data outside that country under its own standard data-protection terms.
How long we keep it
| Account records | Until you ask us to delete the account |
|---|---|
| Licence, order and accounting records | [RETENTION PERIOD – commonly 6–10 years, set by your tax law], because we are required to keep them |
| Sessions and refresh credentials | Until they expire or are revoked |
| Security and audit records | [RETENTION PERIOD] |
| Server request logs | [RETENTION PERIOD] |
Being straight with you: there is currently no automated job that deletes expired sessions, old audit entries or old request logs. They are removed on request and during maintenance. Setting these periods and automating them is outstanding work, not a description of something already running.
How we protect it
- Passwords are stored only as hashes, never in a form anyone can read
- All traffic to this site and to the licensing service is encrypted, and plain HTTP is redirected to HTTPS
- Your session is checked against the database on every authenticated request, so signing out or revoking a session takes effect immediately rather than waiting for a token to expire
- Credentials are bound to the installation that obtained them, so one lifted from a machine is not usable elsewhere
- Accounts lock temporarily after repeated failed sign-ins
- The internal purchase and refund endpoints are cryptographically signed and reachable only from the local network, not from the internet
- Sign-in details held by the desktop application are encrypted using Windows' own per-user protection, so another account on the same computer cannot read them
- Administrative access to the server is restricted to specific private networks
No system is perfectly secure. If you find a weakness in ours, please tell us at support@pointforgepro.com – we would much rather hear it from you.
Your rights
If you are in the UK or the European Economic Area, you have the right to:
- Ask what we hold about you, and get a copy
- Have anything inaccurate corrected
- Have your data deleted, where we are not legally required to keep it – accounting records being the main exception
- Ask us to restrict what we do with it while a dispute is resolved
- Receive the data you gave us in a portable form
- Object to processing we justify by legitimate interest
- Complain to a data-protection authority
Write to support@pointforgepro.com and we will respond within one month. We will not charge you, and we will not make the service worse for you because you asked.
Children
PointForge Pro is professional software sold to businesses and professionals. It is not intended for children, and we do not knowingly create accounts for anyone under 16. If you believe a child has an account with us, tell us and we will remove it.
Changes
When this policy changes we will update the date at the top. If a change materially affects you – a new provider seeing your data, or a new purpose – we will email account holders rather than relying on you to notice.
Contact and complaints
Email support@pointforgepro.com. If we have not put something right, you can complain to the data-protection authority in your country – in ours that is [SUPERVISORY AUTHORITY].