Privacy policy

We keep this short and honest: we collect what we need to run the service, and we measure how our public pages are used only if you agree (Google Analytics, see below). Nothing is used for advertising. This policy covers the website faezor.ai and the faezor MCP connector (the MCP server at https://faezor.ai/mcp).

Who is responsible

The provider named in the imprint. Contact: info@faezor.ai.

What we store and why

Account: your email address and a salted hash of your password (PBKDF2), the time you signed up, confirmed your email and last signed in. Purpose: your account (Art. 6 (1) b GDPR).
Your boards: what you write to the agent, the files you attach, and everything the agent produces for you (schematics, layouts, order files, logs, the version history). Purpose: providing the service (Art. 6 (1) b GDPR).
Waitlist: your email address and whether you confirmed it, until you get an invite or ask us to delete it (Art. 6 (1) a GDPR, your consent).
Server logs and abuse protection: IP addresses, request times and paths, kept briefly to keep the service secure and to limit abuse (Art. 6 (1) f GDPR). Rate-limit counters expire within two days. Sign-in, sign-up, the waitlist and messages to the agent carry a robot check (ALTCHA, served from this site): your browser solves a small computing puzzle; it sets no cookies, collects no interaction data and sends nothing to anyone else.

The MCP connector

When you connect faezor to an AI app or agent (an MCP client such as Claude, Codex, OpenCode, Muse Code, GitHub Copilot or VS Code) and allow it on our consent page:

What we store: for each connected app, its identity (for apps that identify themselves by a web address, such as Claude, Codex or VS Code: that address and their name), the access you granted (read only, or read and design), when you connected it and when it was last used, and the app's access and refresh tokens as one-way hashes. For apps that register themselves, their name and the addresses they asked to be sent back to. Purpose: letting the app act for you as you allowed (Art. 6 (1) b GDPR).
What we receive from the app: only the tool calls it makes: which board and file it asks for, and the board requests and messages you ask it to send to the design agent. Requests and messages become part of that board, the same as text typed on the website. We do not receive your conversations with the app, its memory, or files from other connectors, and we keep no record of tool calls beyond the server logs (method, path, status, time; no tokens and no contents).
What the app receives from us: the data of your boards that the tools return (status, the agent's messages, check results, pictures, file contents and download links). In the app, this becomes part of your conversation and is processed by the app's provider (for example Anthropic for Claude, OpenAI for Codex, GitHub for Copilot) under its own terms and privacy policy, as that provider's service to you.
How long: access tokens 1 hour; refresh tokens up to 30 days and replaced on every use; a sign-in request 15 minutes; an authorization code up to 10 minutes; a connection until you disconnect it (Account → Connected apps), change or reset your password, or delete your account. Entries of self-registered apps that nobody connects are removed after 90 days; client descriptions fetched from an app's own address are cached for up to 7 days.

People you invite to a World

On a board's Simulation page the owner can share the running World (the test range where a car or a drone drives) by a link, and send the link by email. This is what that means for the owner and for the people who open the link (guests).

What a guest gives us: no account and no email address. A guest picks a display name. We keep that name with the time the guest first came and last was seen, so the owner can see who joined, until the link's guest list expires (31 days after the guest was last seen) or the owner deletes the board or the account. Nothing else about the guest is stored: not the address, not what they did in the World.
What the others in the World see: the display name, where the guest's avatar stands and looks, whether the laser pointer is on and where it points, and the lines the guest writes in the World's chat. This is shown live to the people in that session only. It is not stored: chat lines and positions are gone when the session ends, a session ends after its owner closes it, and the host can send a guest away at any time.
What the owner sees: the names of the people who joined, when, and who is in the World now. The owner can send a guest away, hand over or take back the control of the vehicle (a guest never has it unless the owner gives it), and switch the link off, which ends every session through it at once. The owner does not see a guest's address.
What a guest never gets: the board's files, the firmware, the owner's conversation with the agent, the owner's settings and readings. The World shows the vehicle, the people and four screens with the logo and the vehicle's speed and height.
The invitation mail: the owner types the email addresses (at most 10 at a time, with limits per account and per recipient). We send each address one plain-text mail naming the owner (name and email address), the board's title, the link, when it ends and, if the owner wrote one, a short note (read by the same request screening as other texts on faezor). We do not keep the recipients' addresses, only how many invitations went out for a link. If you receive one you do not want, ignore it: nobody can join without opening the link, and nothing happens to you. You can also write to info@faezor.ai.
The guest's cookie: one cookie (pcbw_guest) that holds a random secret, so the page knows it is the same guest. It is technically necessary, sent only to faezor.ai, not readable by scripts, and removed when the guest leaves or the link ends. The link's secret is part of the page's address, so it appears in the server's logs (kept for 14 days).
Purpose and legal basis: running a session the owner set up and the guest chose to enter (Art. 6 (1) b and f GDPR). The name is one the guest types themselves; nobody is asked for a real name.
Who else gets it: nobody. No analytics, no third parties: the World runs on our own server. Your browser talks to the site only.

Visitor statistics on our own server (Umami)

On every page of faezor.ai we count visits with Umami, an open-source statistics tool that runs on our own server: which pages are opened, where visitors come from (the referring site), the browser, operating system, device type, screen size, language and country.

No cookies, nothing stored on your device: Umami recognises a visit by a one-way value computed on our server from your IP address and browser with a secret that changes regularly; your IP address itself is not stored.
No secrets in it: the addresses it records leave out everything after "?" and "#" (where confirmation, invite and unsubscribe links carry their tokens).
Nobody else gets it: it runs on our server; the data is not shared and not used for advertising.
How long: the statistics are kept without a fixed deletion date, for comparing over time; they contain no IP addresses, names or email addresses.
Legal basis: our legitimate interest in knowing how the site is used and improving it (Art. 6 (1) f GDPR); since nothing is stored on or read from your device, no consent is needed (§ 25 TDDDG). You can object at any time (info@faezor.ai), or block it in your browser (it is the script faezor.ai/u/script.js).

On our public pages (the start page, the example board, the documentation and the legal pages - never inside the app, your projects or shared links) we ask whether we may use Google Analytics 4 to see how the pages are used: which pages are visited, where visitors come from (for example a search engine or a link), the device type, browser and country.

Only after "Accept": until you accept, Google's script is not loaded, no cookie is set and nothing is sent to Google. "Decline" is just as easy, and you can change your choice at any time with "Cookie settings" at the bottom of every public page. Declining after accepting deletes the analytics cookies.
Cookies: _ga and _ga_F45VV14XJE, which tell repeat visits apart, for up to two years.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be processed by Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Google Analytics 4 does not store IP addresses.
With an account: at sign-up, and later in your account settings, you can separately allow Google Analytics while you use faezor (optional and unticked; nothing depends on it). Then it also runs in the app; the addresses it reports have the ids of your boards and links removed and app pages carry a generic title, so Google never learns a board's name or link. Switch it off in your account settings at any time.
Legal basis: your consent (Art. 6 (1) a GDPR, § 25 (1) TDDDG). You can withdraw it at any time with effect for the future. Signed out, your choice is stored in your browser's local storage, not in a cookie; signed in, with your account.

If you tick the newsletter at sign-up (optional and unticked) or switch it on in your account settings, we send you the faezor newsletter: new features and the occasional tip, to the address of your account. At sign-up your subscription starts only when you click the confirmation link we send you (double opt-in). We store when you subscribed and confirmed. Every newsletter has an unsubscribe link (also as the one-click unsubscribe your mail program offers), and you can switch it off in your account settings at any time; we then stop at once. Legal basis: your consent (Art. 6 (1) a GDPR, § 7 (2) UWG). Emails about your account and your boards (confirmations, finished runs) are part of the service and are not affected.

Cookies

One cookie, set when you sign in: a random session identifier. It is technically necessary and needs no consent. A guest of a shared World gets a cookie of its own (see above) instead. With your consent, Google Analytics sets its cookies on the public pages (see above); otherwise there are no analytics or advertising cookies. Umami (above) sets no cookies. Apart from Google Analytics after your consent, every file of this site comes from our server. The connector does not use cookies; apps authenticate with their access token.

Who processes data for us

Anthropic (Claude): the design agent runs on Anthropic's Claude models. Your board description, your attachments and the work in progress are sent to Anthropic to generate the design, and the agent's web searches run at Anthropic. TODO: operator: confirm the contract with Anthropic for this processing (commercial terms / data processing addendum) before the public launch
Spaceship / Spacemail: our email provider sends confirmation and notification emails.
Google (Google Analytics, only with your consent on the public pages; see above).
JLCPCB / LCSC / EasyEDA and part manufacturers: the agent looks up part numbers, stock, footprints, 3D models and datasheets. These requests contain part numbers and search terms, not your personal data.

The site itself, your boards and the connector's data are stored on our own server.

How long

Your account and boards stay until you delete them. You can delete single boards, or your whole account with all boards and connections, at any time in the app (Account → Delete account). Share links stop working immediately when you turn them off. Connections to apps end when you disconnect them. Web server logs are deleted after 14 days.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent at any time. Write to info@faezor.ai. You can also complain to a data protection supervisory authority.

TODO: review by the operator before the public launch