Privacy Policy

MCAD Web is provided by MET Mechatronics Designed Co., Ltd. This policy explains what data the service uses and how it is protected.

Information we collect

• Account information: name, email address, sign-in provider, provider identifier, account role, subscription status, and sign-in timestamps.
• For email accounts, we store a salted one-way password hash. We do not store the original password.
• Session records: a one-way hash of the session token, creation time, and expiry time.
• Trial requests: email address and any name or company details you choose to submit.
• Basic security and service logs needed to operate and protect the service.

Drawing data

DXF and DWG files opened in MCAD Web are read locally by your browser and are not uploaded; DWG decoding runs in local WebAssembly. Drafting edits remain in browser memory. When an entitled user chooses Save, the supported drawing geometry is sent securely to the MCAD license service only to generate the requested download; MCAD Web does not intentionally retain the submitted drawing payload after the response is produced.

How we use information

We use this information to authenticate users, enforce subscription and Save permissions, provide requested downloads, respond to access requests, maintain security, diagnose failures, and improve MCAD Web. We do not sell personal information.

Service providers

MCAD Web uses Google Identity Services when you choose Google Sign-In, Cloudflare to deliver the web application, and MET-operated infrastructure for account and license services. Those providers process limited data under their own privacy terms.

Retention and your choices

Browser sessions normally expire after 14 days. Account and subscription records are kept while needed to provide the service, meet legal obligations, or resolve security and billing issues. You may request access, correction, or deletion of personal information through the contact channel on the MET website. Some records may be retained where required by law.

Security and international processing

We use access controls, hashed credentials and session tokens, TLS, and server-side entitlement checks. No online system is completely risk-free. Service providers may process data outside Thailand subject to appropriate contractual and legal safeguards.

Changes

We may update this policy as MCAD Web evolves. Material changes will be reflected on this page with a new effective date.