Privacy notice
Who we are
Designmatix Ltd is the controller of the personal data described here: a company registered in England and Wales under number 12697280, at 71-75 Shelton Street, London WC2H 9JQ, United Kingdom, registered with the Information Commissioner's Office under registration number ZB483460. For anything about your data, email support@designmatix.co.uk.
The DX-CAD program
- No telemetry. No usage statistics and no crash reports. Nothing is collected about you, your computer or your work.
- Your files stay where you put them. DX-CAD reads and writes only the files you open, save and export.
- Update check. Help > Check for Updates asks DX-CAD's public site on GitHub Pages for a small file naming the latest release and compares it with your version on your computer. Nothing is sent but the request itself. Checking at every start is off until you switch it on. GitHub sees the request come from your internet address, under its own privacy policy.
- The log stays on your computer (Help > Open Log Folder). It holds the version, the platform, the commands you used and any errors. It is yours to read, delete or attach to a bug report; nothing sends it.
- The agent door (
dxcad serve) works only on your computer. It listens on a network port only if started with--http, and then only on this computer, for a client holding its token.
The Assistant
The Assistant sends nothing until you switch it on; it asks once, saying what follows. Then each request you type goes to the AI provider you chose, under your own key for that provider: Anthropic (which runs Claude), OpenAI, Azure OpenAI in your company's own tenant, Google Gemini, or an OpenAI-compatible address you give, which for a local model such as Ollama or LM Studio is your own computer. With each request it sends the facts of the document in front of you (its parts, sizes and faces), its model script, the results of the tools the assistant uses, and pictures of the view when the assistant asks for one. Nothing of any other document is sent.
That data goes from your computer to your provider, not to us, under your agreement with that provider and its privacy policy. Your keys stay on your computer, encrypted for your Windows account by Windows' data protection, never in a settings file or the log. A company can limit the providers or switch AI off entirely, and DX-CAD then makes no connection to any AI service.
A hosted option, using a DX-CAD account instead of your own key, is planned. When it is available, this notice will say what it sends to us and to whom we pass it.
Buying and activating a licence
Buying. Our order process is conducted by our online reseller Paddle.com, the Merchant of Record for all our orders. Paddle collects your payment details, billing address and tax information and is responsible for them under its own privacy notice. Paddle tells our licence service your email address, Paddle's customer, subscription and transaction numbers, the products and number of seats you bought, and the dates of your paid period. We never see your card details.
Your licence key is emailed to you by our licence service. If you sign in with an emailed code instead of a key, we use your email address to send the code and find your licences.
Activating. When you activate (Help > Licence), DX-CAD sends our licence service at licence.designmatix.co.uk the key you typed (or your sign-in), a random install number it made for this installation (never a fingerprint of your computer), an optional computer name you choose so you can tell your seats apart, and its version. While a licence is active, DX-CAD sends the signed token the service gave it about once a week to renew it, and when you give a seat back. Nothing else is sent: no name, file or setting. The token is checked on your computer and works offline for up to 14 days.
Launch offer check. From 30 days before the free launch offer ends, DX-CAD asks for the same public file as the update check at start, to know whether the offer has been extended. Nothing is sent but the request.
What our licence service keeps, and for how long
Our licence service runs on a server we manage in the United Kingdom.
| Data | Why | How long |
|---|---|---|
| Your email address, Paddle's numbers for you and your purchases, your products, seats, status and paid period | To send your key, recognise your licence and support you | While your licence lasts. After it ends, your email address, activations and add-ons are deleted after 2 years; Paddle's numbers stay for our accounts. If a licence was ended by a refund or chargeback, the email address is kept for 7 years for accounting and disputes. |
| Your licence key | To recognise it when you activate | Never stored as such: only a one-way keyed hash and its last four characters. |
| Install numbers, optional computer names, DX-CAD version, first and last check-in | To count seats and show you which computers hold them | While the seat is in use; deleted 90 days after the seat is given back. |
| The key email in our sending queue (encrypted) | To send it again if it was lost | Wiped 30 days after it is sent. |
| Email address of someone who started a checkout but did not pay | To send the key if the payment completes | Deleted 30 days after the last notice from Paddle. |
| Records of Paddle's notifications (no personal data) | To apply each one once and in order | 400 days. |
| A record of changes we make by hand, with a licence number but no email address | To keep an account of support actions | Kept; computer names in it are blanked when the licence data is deleted. |
Your internet address is never written to the service's database or its logs; to limit abuse it is held in memory only, scrambled, for one minute. The server's web front end keeps a standard access log, including internet addresses, for no more than 30 days, for security.
Who else receives data
- Paddle (Paddle.com Market Ltd, London), our reseller and Merchant of Record, as an independent controller of your purchase.
- Postmark (ActiveCampaign, LLC, United States) sends our licence emails and sign-in codes on our behalf, as our processor. It receives your email address and the message.
- Our server host, as our processor, stores the licence service's data on our behalf in the United Kingdom.
- GitHub serves DX-CAD's public update file, documentation and downloads, and the Python Package Index serves
pip install dxcad, under their own privacy policies.
Where data goes outside the United Kingdom, as with Postmark in the United States, we rely on the UK's adequacy regulations for the UK Extension to the EU-US Data Privacy Framework, or on the UK's International Data Transfer Agreement or Addendum. We do not sell your data and we do not use it for advertising.
This website
This site sets no cookies, runs no analytics or tracking, and loads nothing from other sites. The web server keeps a standard access log, including internet addresses, for no more than 30 days, for security. When you buy, Paddle's checkout opens; it may set its own cookies, under Paddle's privacy notice.
Why we may use your data
- To perform our contract with you: issuing, checking and supporting your licence.
- Our legitimate interests: keeping the service secure, preventing abuse and fraud, and answering your messages.
- Legal obligations: keeping accounting records.
We do not make decisions about you by automated means that have legal or similarly significant effects.
Your rights
Under UK data protection law you may ask for a copy of your data, and ask us to correct it, delete it, restrict or object to its use, or give it to you in a portable form. Email support@designmatix.co.uk; we answer within one month. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would like the chance to put things right first.
DX-CAD and this site are not directed at children under 16. If this notice changes, we will update the date above and, for important changes, say so in DX-CAD and on this site.