Slab Automation Suite

Privacy Policy

Version 2026-10-01 · Controller: CADEO LIMITED, a company incorporated in Ireland (company number 826841), registered office Unit 9 E&F Ladytown Business Park, Naas, Kildare, Ireland · Contact: hello@usecadeo.com

Cadeo is built data-minimal by design: we collect the least we can, encrypt or hash what we must keep, and delete what we no longer need. This page describes exactly what happens with your data — it matches how the system is actually built.

1. Your engineering work stays on your machine

The Slab Automation Suite processes your project files — slab models, drawings, calculations, schedules — locally on your computer. They are never uploaded to Cadeo. The only data the app transmits is licensing telemetry: your licence key identifier, a machine fingerprint, and the app version, sent to our licensing provider to validate your licence. The one exception is the diagnostics upload described in section 3, which only ever happens when you click the button yourself.

2. What we collect on this website

When	What	Why
Trial signup	Name, email address, company — stored encrypted	To verify your email and issue your trial licence (performance of a contract). These details are held only until the trial is issued or rejected, then deleted.
Marketing checkbox (optional)	Name, email — stored encrypted	Product news, only with your consent. Withdraw any time by emailing us.
Licence-agreement acceptance	Timestamp, agreement version, hashed licence key / hashed email, hashed IP	Legal record that the agreement was accepted (legitimate interest).
All form submissions	Hashed IP address	Rate limiting and abuse prevention (legitimate interest). Raw IPs are not stored; hashes expire from the rate-limit store automatically.
Trial reminder emails	—	Shortly before and at trial expiry we email you a courtesy notice using the address held by our licensing provider; nothing new is stored.

Signups from personal or free email providers are held for a manual check by us before a trial key is issued; the details above are deleted once we decide, or after 30 days if we do not.

3. Diagnostics uploads from the app

The app's Settings tab has a Send diagnostics to Cadeo button. It uploads nothing until you press it — there is no automatic or background reporting — and a confirmation dialog states what will be sent before anything leaves your machine.

What	Details	Why
Recent session log files	The app's own run logs, gzipped and size-capped. They record pipeline steps and errors, so they can contain project folder names and file paths from your own drawings — including client or job names you have used in those paths. No drawings, models, schedules or other project files are uploaded.	To diagnose a problem you are reporting (legitimate interest — supporting and debugging the software you licence).
Your optional note	Free text you type into the dialog, up to 2,000 characters	Context for the report — please avoid putting confidential detail in it.
Licence key	Stored as a keyed hash plus the last 9 characters only — never the full key	To match the report to your licence.
Machine fingerprint, app version, operating-system string	As sent by the app	To reproduce the fault on the right version and platform.
IP address	Stored as a hash only	Rate limiting and abuse prevention (legitimate interest).

Diagnostics uploads are held in our own database and are deleted automatically 90 days after upload. You can ask us to delete one sooner — see section 8.

4. How your email is protected

While a signup awaits email verification, your address is stored AES-256-GCM encrypted, with the key held separately from the database.
The moment your trial licence is issued, the encrypted email and name are deleted from our database. What remains is a keyed hash, used only to enforce one trial per person — it cannot be reversed into your address.
Unverified signups are automatically scrubbed after the 24-hour verification link expires.

The durable record of your email lives with our licensing provider (Keygen), which needs it to manage your licence and let us contact you about it. We look it up there when needed rather than keeping our own copy.

5. Who processes data for us

Processor	Role
Cloudflare	Hosts this website and, on Workers and D1, our API and database — rate-limit hashes, trial records and diagnostics bundles — and provides the Turnstile bot check on our forms.
Keygen	Licence management — holds your name, email and licence records.
Resend	Sends our transactional emails (verification, licence key, trial reminders) and keeps delivery logs.
Our merchant of record (when purchasing)	Payment processing — their own terms and privacy policy apply to the transaction; we never see your card details.

6. Cookies and tracking

This website sets no advertising or analytics cookies and runs no third-party trackers. The Cloudflare Turnstile bot check on our forms may set a strictly-necessary cookie to complete its challenge.

7. Retention

Encrypted signup data: deleted at licence issue, or scrubbed within ~24 hours if never verified.
Hashed identifiers and acceptance records: kept for the life of the product for abuse prevention and legal evidence.
Diagnostics uploads: deleted automatically 90 days after upload.
Marketing contacts: until you withdraw consent.
Licence records at Keygen: for the life of your licence relationship with us.

8. Your rights

Under the GDPR you can ask us for access to, correction of, deletion of, or a copy of your personal data, object to or restrict our processing of it, and withdraw consent at any time. Email hello@usecadeo.com and we will respond within one month. You can also lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

9. Changes

If we change this policy we will update the version date above; material changes will be flagged on this page. Questions — hello@usecadeo.com.

Changed in version 2026-10-01: the data controller is now CADEO LIMITED (previously Kieran Lloyd trading as Cadeo). What we collect and how we handle it are unchanged.