Privacy

Last updated 30 September 2026

Upcut is a CAD/CAM tool for CNC routers. This page describes what the product stores, why it stores it, and how long it keeps it.

Your account

When you sign in we store your email address, and the name and profile picture your identity provider gives us. We use them to identify you to yourself and to the other members of your workspace.

Your work

Drawings, components, and the details of your shop — machines, tools and materials — are stored so that the product can show them back to you and share them with the workspace you put them in. They are visible to members of that workspace, and to nobody else using Upcut.

The assistant

The editor includes an assistant you can ask to make changes to a drawing. When you send it a request, we record that turn: your message, the actions the assistant took, its reply, and the drawing as it stood when you asked. We record it whether the turn succeeded or failed.

We do this because the assistant is wrong sometimes, and a transcript is the only way to find out how and fix it. A recorded turn is readable by you and by Upcut staff. Sharing a workspace with you does not give anybody access to your conversations.

This content is deleted after 30 days. A scheduled job removes your message, the drawing, the assistant’s actions and its reply. What remains afterwards describes the turn without describing you or your work: which version of the assistant answered, how long it took, what it cost us, and whether it succeeded.

Your request is sent to a model provider in order to be answered. It is not used to train their models.

Agents you connect

You can connect an AI agent — ChatGPT, Claude, Codex or another client — to your account from Settings → Agents, or by signing in from the agent itself. For each agent we store its name and picture, the workspaces and permissions you gave it, when its access began and ends, when it was last used and what it last worked on, and a count of its recent requests so that we can limit their rate.

We never store an agent’s key or sign-in tokens themselves, only a one-way fingerprint of each: enough to recognise them, and no use to anybody who reads it. An agent’s access ends after seven days, or at once when you turn it off.

When an agent saves a change, we keep a receipt of it: which request it was, a fingerprint of what was asked, what the change produced, and when. Receipts let an agent retry safely after a lost connection without making the change twice. The change itself is saved as a version of the document, marked as the agent’s, and members of the workspace see the agent beside the document the way they see a collaborator.

What an agent reads or writes passes through the service that runs it — OpenAI for ChatGPT and Codex, Anthropic for Claude — under that service’s own terms and privacy policy. That includes the names, dimensions and text of the designs it works on, and pictures of them. We send the service nothing else, and nothing while the agent is not using its connection.

These records last as long as your account does. Turning an agent off ends its access and keeps its history; deleting your account deletes both.

Billing

Subscriptions are handled by Stripe, who process your payment details. We store which plan a workspace is on and the identifiers needed to keep that in step with Stripe. We never see or store your card number.

Staff access

A small number of Upcut staff can read account and workspace records in order to answer support questions. Every such read is recorded — who looked, at what, and when. Staff cannot change your work, and the support tools have no ability to do so.

Deleting your account

Deleting your account removes your profile, your assistant conversations and the workspaces you alone own. Records of staff access are kept, because an audit trail that a deletion can erase is not an audit trail.

Getting in touch

Questions about any of the above go to privacy@upcut.ai.