The short version:
• OpusAg never stores your drawings or CAD data. DraftX processes them locally on your machines. We hold no copy.
• The AI drawing sorting feature runs on AWS Bedrock in the London region (eu-west-2), brokered by OpusAg. Drawing images are processed in-memory only — nothing is stored, logged, or used to train models — see section 3.
• We collect the minimum needed to run licensing: contact details, licence keys, machine fingerprints and validation logs.
• We don't sell data, we don't advertise, and the app contains no tracking.
DraftX is made by OpusAg Ltd, registered in England and Wales (company no. 15790886), registered office: 6 George House, 40 Huntingdon Street, St. Neots, Cambridgeshire, PE19 1BB. OpusAg Ltd is the data controller for the personal data described below. Contact: sales@opusag.co.uk. ICO registration: pending (this page will be updated with the registration number once issued).
| Data | Where it lives | Why (lawful basis) |
|---|---|---|
| Contact name, business email, company name | OpusAg licence server | Issuing and administering licences and trials (performance of contract) |
| Licence key, type, expiry | OpusAg licence server | Licence administration (performance of contract) |
| Machine fingerprint (hashed hardware ID) and machine name | OpusAg licence server | Enforcing per-machine limits, preventing misuse (legitimate interest) |
| Validation logs (key, machine, timestamp, IP) | OpusAg licence server | Security and support troubleshooting (legitimate interest) |
| Aggregate usage counts (number of jobs processed, total part count) | OpusAg licence server | Supporting you during trials and improving the product (legitimate interest). Counts only — no job names, file names, paths or drawing content are transmitted |
| Operator usernames in job records | Locally only — your machines and network | So your team can see who processed which drawings. Not transmitted to OpusAg; your organisation controls this data |
DraftX does not store with OpusAg: drawings, CAD models, PDFs, job data, customer lists, pricing, or any file contents. The one case where drawing content transits our infrastructure is the AI sorting call described in section 3 — in memory, for the duration of the request only, never written to disk or logs.
DraftX includes an AI classification feature for sorting drawings, provided as a managed service. How it works and where the data goes:
The licence server is hosted on Railway's cloud platform. Installer downloads are served via GitHub Releases, which may log standard web-request data (such as IP addresses) under GitHub's own privacy policy.
We never sell or rent personal data. We share it only with the processors below (under contract), professional advisers where necessary, and authorities where required by law.
| Processor | Purpose | Location |
|---|---|---|
| Railway | Licence server hosting (contact details, licence records, validation logs) | EU/US — see section 7 |
| Amazon Web Services (Bedrock) | AI drawing classification — transient inference only, nothing retained | London (eu-west-2) / EU regions |
| GitHub | Installer downloads and update delivery | United States |
| Stripe | Payment processing and invoicing (if you purchase) | EU/US under its own safeguards |
Where our hosting providers (Railway, GitHub) process data outside the UK/EEA (for example in the United States), transfers rely on the UK International Data Transfer Agreement, the UK–US Data Bridge, or equivalent safeguards in those providers' terms.
Under UK GDPR you can ask us to access, correct, delete, restrict, object to, or port your data. Email sales@opusag.co.uk and we'll respond within one month. You can also complain to the Information Commissioner's Office.
Licence server access is restricted and authenticated, data in transit is encrypted (HTTPS/TLS), and machine fingerprints are one-way hashes that cannot be reversed into hardware details.
Changes to this policy will be posted here with a new effective date. Material changes will be notified to licence contacts by email.