Privacy Policy
Version 2026-10-07
the operator of ElixiCAD ("we") runs ElixiCAD and is the controller of the personal data described here. Contact: support@realised.io.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Account details: email, name, password hash, Google sign-in ID | To run your account and sign you in | Contract |
| Your projects: descriptions, chat messages, uploaded files and images, generated models, drawings and renders | To provide the service | Contract |
| Usage: credits used, builds, renders, error reports | Limits, billing, keeping the service working | Contract, legitimate interest |
| Security data: IP address, sign-in times, a Cloudflare human check at sign-up | Preventing abuse and keeping accounts safe | Legitimate interest |
| Billing: plan, subscription status and invoices from Paddle | Billing | Contract, legal obligation |
We never see your card details: Paddle, our merchant of record, collects payments and is its own controller for that data.
Improving the AI
We may use your projects to improve ElixiCAD's AI, including fine-tuning, on the basis of our legitimate interest. Before storing anything for this we remove names, email addresses and other personal details. You can object at any time with the opt-out in account settings; it stops all future use of your projects for this.
Who processes it
Your data is hosted in London, United Kingdom. To generate designs, your descriptions and project content are sent to AI model providers, some of them outside the UK and EU. The full list, with what each one does and where, is on the sub-processors page. Transfers outside the UK/EU rely on adequacy decisions or standard contractual clauses.
How long we keep it
- AI prompts and responses are kept for 30 days for debugging and abuse checks, then deleted.
- Projects and account data are kept while your account exists.
- When you delete your account, we delete your projects and AI history from the live system and remove your name and email. A closed account record with its billing history stays for accounting. Encrypted backups roll off over time: database backups within 90 days, project-file backups within 12 months.
Your rights
You can ask to access, correct, export or delete your data, to restrict or object to how we use it, and for a copy in a portable format. Most of this is in the app (account settings and project download); for anything else, email support@realised.io. You can also complain to your data protection authority (in the UK, the ICO).
Cookies
We use one strictly necessary session cookie to keep you signed in, and the sign-up page loads Cloudflare Turnstile to check you are human. We don't use advertising or analytics cookies.
Changes
We will email you before a significant change to this policy.