Privacy policy
Last updated 10 November 2026
Canyon converts your CAD files and needs only a little personal data to do that. This page explains what we collect, why, and what you can ask us to do with it.
Who is responsible
Canida Software GmbH
Mühlenstraße 8A
14167 Berlin, Germany
Email: hello@canida.io · Phone: +49 (0) 30 166 362 95
Write to us at this address with any question about your data.
What we collect
- Account data. Your name, email address and a hashed password, plus the sessions that keep you signed in.
- Your files. The STEP files you upload, the STL meshes we produce, and the job details: resolution, duration and status.
- Billing data. Your compute balance, free minutes used and the credit packs you bought. Card and payment details go straight to our payment provider; we never see them.
- Technical data. IP address, browser type and timestamps in our server logs, used to keep the service secure.
Why we use it
- To run conversions, keep your account and track your compute balance (Art. 6(1)(b) GDPR, performance of a contract).
- To keep invoices and payment records as tax law requires (Art. 6(1)(c) GDPR).
- To protect the service against abuse and fix errors (Art. 6(1)(f) GDPR, our legitimate interest in a secure service).
Your files
Uploaded models are used only to run the conversion you asked for. We do not share them, sell them or use them to train models, and nobody at Canida opens them unless you ask us to help with a specific job.
Files and meshes are deleted [retention period] after the conversion. You can ask us to delete them earlier.
Service providers
We use a small number of providers, each bound by a data processing agreement where they process data for us:
- [Hosting provider], servers and file storage.
- Polar Software Inc., merchant of record for credit pack purchases. Polar handles payment, invoicing and VAT and processes your payment data under its own privacy policy. Transfers to the US rely on the EU Standard Contractual Clauses.
How long we keep data
- Account data: until you delete your account.
- Uploaded files and meshes: [retention period] after the conversion.
- Billing records: 10 years, as required by German commercial and tax law.
- Server logs: [log retention period].
Your rights
You can ask for access to your data, correction, deletion, restriction of processing and a copy in a portable format, and you can object to processing based on our legitimate interest. Email us and we will reply within a month.
You can also complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Changes
If we change how we handle data, we update this page and the date above. For significant changes we tell account holders by email first.