Privacy Policy

Your privacy is our priority

We believe in transparency — this document clearly explains what we collect, how we use it, and your rights

Last updated: 7 October 2026

Overview

J Nac (Thailand) Co., Ltd. (“we”), the provider of CNC Costify AI, recognizes the importance of your personal data and is committed to complying with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

This policy explains what data we collect, how we use it, how it's stored, retention periods, and your rights as the data subject.

STEP geometry and pricing formulas run locally. When you request AI, required images/PDF content and prompts go to your selected provider/model, without automatic switching. Check permission to share customer drawings before using AI

Data We Collect

We collect only data necessary for service operation, in three categories:

Account Data

  • •Email (registration/login)
  • •Name (if provided)
  • •Company name (if provided)
  • •Hardware ID (bound to your license)
  • •Password (bcrypt-hashed — never visible to staff)

Usage Data

  • •Files processed in each quota window
  • •File type, filename and size recorded in the usage log — not geometry content
  • •Usage timestamps + device token
  • •IP address (for security)

Payment Data

  • •Payment slip (temporary, for order verification)
  • •Order number + amount
  • •No credit card / bank info stored
Quota records are not drawing content. STEP geometry and formulas run locally; images/PDF content and text used for AI go to the user-selected provider as explained below

How We Use Data

  • 1
    Authenticate and provide services per your purchased plan
  • 2
    Manage usage quotas (Free: 15 STEP files/month, Monthly: 30 files/day)
  • 3
    Issue invoices and process payments
  • 4
    Send critical email notifications (license expiry, updates, security)
  • 5
    Improve usability and develop new features (aggregate, non-identifiable stats)
  • 6
    Comply with applicable laws
We do NOT use your data to sell ads, train our AI models, or share with third parties for marketing

AI Processing

CNC Costify AI uses external AI services to analyze drawings. You should understand what happens:

Google Gemini

Selected in Settings
Data sentPrompt and drawing image/PDF content required for analysis
PurposeExtract Material, Stock, Coating, Tolerance
RetentionPer Google AI Privacy Policy
Privacy Policy

OpenRouter

Selected in Settings
Data sentPrompt and image/PDF content required for the request
PurposeAnalyze drawings using the user's saved model
RetentionPer OpenRouter Privacy Policy
Privacy Policy

OpenAI

Selected in Settings
Data sentPrompt and image/PDF content required for analysis
PurposeDrawing analysis or manufacturing chat through the saved model
RetentionPer OpenAI API terms and data policy
Privacy Policy
Requests keep your saved provider/model and never automatically switch services after an error. AI sends required drawing content and prompts to that service; retention and data use depend on its account/model terms. Check drawing-sharing permission first. Use your own key, which is excluded from installers and guides
Multi-Assembly matching prompts may include required STEP/BOM row metadata: part codes/names, product IDs/labels, quantities, filenames and PDF page references. This is not a raw STEP geometry upload for volume measurement. Check permission to share this metadata too

Data Sharing

We share your data only in the following circumstances:

  • AI Providers (selected Google Gemini, OpenRouter or OpenAI) — prompts and drawing content required for the request
  • Email Provider (Hostinger SMTP) — to send verification and notification emails
  • Hosting Providers (Vercel, Hostinger VPS) — to serve website and API
  • Government Agencies — only when compelled by court order or law

Storage & Security

Passwords

bcrypt (12 rounds) — staff cannot see your password

Session Tokens

JWT in HttpOnly cookies — XSS/CSRF protected

License Files

Ed25519 cryptographic signatures — offline verifiable

Database

SQLite on Linux VPS — daily backups

HTTPS Only

All connections use TLS 1.3 — no plaintext data

Slip Cleanup

Payment slips deleted after order confirmed (max 30 days)

Data Retention

Data TypeRetention
User accountsLifetime of account + 2 years after closure (per PDPA)
Daily usage records12 months (for stats and customer service)
Payment slipsMax 30 days after order confirmed
Invoices / Receipts10 years (per Thai tax law)
Device tokens365 days idle → auto-deleted
Server logs90 days, then destroyed

Cookies & Tracking

We use cookies and similar technologies only as necessary:

cnc_sessionHttpOnly cookie for login authentication — 1-30 days
languageRemembers your language choice (th/en) — stored in Browser localStorage
We do NOT use Google Analytics, Facebook Pixel, or marketing tracking cookies

Your Rights (PDPA)

Under Thailand's PDPA, you have the following rights:

Right to Access
Request to see all data we have about you anytime
Right to Rectify
Correct inaccurate information (email, name, etc.)
Right to Erasure
Request deletion of your account and data (Right to be Forgotten)
Right to Object
Refuse our use of your data in certain cases
Right to Withdraw
Withdraw consent at any time
Right to Portability
Request your data in machine-readable format
Submit rights requests to info@cnccostify.cloud — we respond within 30 days as required by law

Minors

Our service is designed for professional use in the CNC industry. Users must be 18 years or older — we do not knowingly collect data from anyone under 18.

If you are a parent and discover your child registered without permission, please contact us for account deletion.

Policy Changes

We may update this policy periodically to reflect service changes, legal updates, or technology

  • ▸Material changes will be notified via email 30 days in advance
  • ▸Minor changes (typos, formatting) update without notice
  • ▸Last-updated date shown at the top of this document

Contact

For questions about this Privacy Policy or to exercise your PDPA rights, contact:

J Nac (Thailand) Co., Ltd.
84 Moo 2, Soi Soontornvipark, Bangplee-Tamru Rd.
Praeksamai, Mueang, Samut Prakan 10280, Thailand
info@cnccostify.cloud 08 1144 2000Contact page