Privacy policy
Last updated 24 September 2026. This notice explains how Spark IT Ltd, trading as BlazeCAD, processes personal data.
Data we process
- Account data: identifiers and profile information supplied through sign-in, including information provided by Google when Google sign-in is used.
- Project and model data: CadSpec source, project and revision metadata, generated CAD/preview artifacts, provenance and build results associated with your projects.
- Operational and security data: request, audit, diagnostic, network and security information needed to operate, protect and troubleshoot the service.
- Payment data: product, purchase, entitlement, transaction and payment-status identifiers. Stripe processes card and payment details used at checkout; BlazeCAD does not need your full card number.
- Support data: messages you send us, optional reply details, and project/model references you choose to provide.
Why we use it
We use personal data to create and secure accounts, store and generate projects, provide previews and exports, administer purchased entitlements, provide support, prevent abuse, diagnose service problems, exercise or defend legal rights, and meet tax, accounting and other legal obligations. Depending on the processing, our basis is performance of the service you request, our legitimate interests in operating and securing BlazeCAD, compliance with legal obligations, or consent where the law requires it.
Service providers and sharing
We share data only where needed to provide or protect the service, process payments, comply with law, or exercise legal rights. Current infrastructure and service providers include Google for sign-in and CAD-generation infrastructure, Cloudflare for web delivery/security/storage, Neon for managed PostgreSQL database infrastructure, and Stripe for payment processing. Those providers process information under their own terms and privacy arrangements. We do not sell personal data.
Retention and deletion
- Account, project, model and provenance data are kept while needed to provide your account and projects. A verified deletion request will remove account-linked project/model data unless we have a lawful reason to retain particular records.
- Routine operational/security logs are intended to be short-lived and normally retained for no more than 90 days unless they are needed for an active security, abuse, reliability or legal investigation.
- Support correspondence is normally retained for up to 24 months after the matter is closed, unless a longer period is needed for an unresolved dispute or legal obligation.
- Payment and accounting records may be retained for at least the period required by tax/accounting law; UK company tax records may need to be kept for six years from the end of the relevant company financial year.
Deletion from live systems may not immediately remove copies held temporarily in provider backups or records a provider must retain independently. We do not keep personal data indefinitely merely in case it becomes useful.
Cookies and browser storage
BlazeCAD currently uses only storage needed for requested functionality such as sign-in/session security, anti-forgery protection, project claiming and user-requested preferences. We do not intentionally use advertising or behavioural-tracking cookies. Because no non-essential cookies are currently used, BlazeCAD does not show a consent banner. If non-essential cookies or similar technologies are introduced, consent will be requested before they are used where required.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to processing of your personal data, or request portability. Email support@blazecad.com to exercise a right or ask a privacy question. You can also complain to the UK Information Commissioner's Office.
Controller
Spark IT Ltd, company 05694511, registered in England and Wales. Registered office: 24 Belsize Close, St Albans, AL4 9YD, United Kingdom. Contact: support@blazecad.com.