Privacy Policy

Revisic is a tool for comparing revisions of engineering drawings. This page explains what happens to the files you upload and the limited data we collect. Plain language first; defined terms where the law needs them.

1Who we are

Revisic (“we”, “us”) is the tool operated at revisic.com and demo.revisic.com. It is currently run by its individual developer, who acts as the data controller (the person responsible for how your data is handled) for the processing described here. A registered legal entity will be named in this notice before paid subscriptions open.

For any privacy question or request, contact hello@revisic.com.

2The files you upload

When you compare two revisions, the PDF files are uploaded over an encrypted connection to our processing server, opened, and analysed to detect views and produce a side-by-side report. The same applies to the free demo.

• Where: processing happens on a server we rent in the European Union (hosted by Hetzner, Germany). Files are never shared between users or sessions.
• How long: uploaded files and generated results live only for the duration of your working session and are deleted automatically a few hours after you stop working — within 48 hours at most. You do not need to request deletion.
• Who can see them: access is limited to the automated pipeline. A maintainer may access a file only where necessary to fix a fault you have reported, and only with your knowledge.
• Training: your drawings are never used to train, fine-tune, or evaluate any machine-learning model, and are never disclosed to third parties.

Legal basis (EU GDPR): performance of the service you requested (Art. 6(1)(b)) — we cannot compare your drawings without processing them.

3Waitlist and notification emails

If you leave your email address to be notified when subscriptions or the standalone version become available, we store:

• your email address, the date, and what you asked to be notified about (e.g. a pricing tier or your operating system);
• your IP address and browser identification string, recorded once at sign-up purely to detect and filter abuse (spam sign-ups); they are not used for anything else;
• nothing else — no name, no company, no tracking profile.

This list is stored on our EU server, is used solely to send you the notification you asked for (and, at most, occasional major product updates until then), and is never shared or sold. We keep it until the notification purpose is fulfilled or you ask to be removed — email hello@revisic.com at any time and we will delete your address. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.

4Anonymised technical data

To keep the tool working and to improve it, we retain anonymised technical data that is not your drawings — for example, processing timings, sheet counts, view-detection statistics, and error traces. This data contains no file contents and is not linked to your identity.

Where such data is used to improve detection quality over time, it is used in aggregate, anonymised form. We will update this notice before introducing any processing that would fall outside this description. Legal basis: legitimate interest in operating and improving the service (Art. 6(1)(f)).

5Cookies and analytics

The comparison tool sets one functional cookie — a random session identifier that keeps your uploaded pair and results together while you work. It is strictly necessary for the tool to function, identifies a browser session rather than a person, and expires with the session. We set no advertising or cross-site cookies, which is why you see no cookie banner.

For visit statistics we use self-hosted, privacy-friendly analytics (Umami) running on our own infrastructure. It sets no cookies, collects no personal data, builds no cross-site profiles, and sends nothing to third-party analytics companies. If we ever add analytics that identify a person, we will request consent and update this notice first.

6Licences, devices and the customer cabinet

The free demo requires no account, and the desktop app without a licence key never contacts us. Once you are given or buy a key, we keep a licence record so that the key can be verified and supported:

• your email address — how a licence is tied to its holder, how we can reach you about it, and how you sign in to the cabinet;
• a name, if one was given — optional, unverified, used only to label your row for you and (in a company account) for your administrator;
• the key itself, its plan, seat count, status and dates (issued, paid through, last checked);
• the devices holding a seat: a random installation identifier generated on your computer, a label taken from its computer name and operating system, and when it last checked in. There is no hardware fingerprint — we do not read or send anything about your machine's components. The label exists so you can tell your own computers apart in the cabinet and unbind one.

If your licence comes through your employer, the person administering that company account sees the same rows for their people, and the account keeps a log of administrator actions (who added, revoked or unbound whom) so the company can answer that question itself.

Signing in to the cabinet is by email: we send a one-time link and code, and store a short counter of recent attempts per address to stop guessing. There is no password to lose. A sign-in session is a cookie tied to your account, and "sign out everywhere" invalidates all of them.

We keep licence data for as long as the licence exists and for a reasonable period afterwards for accounting and support; ask us and we will delete it (see section 8). Legal basis: performance of the contract for the licence (Art. 6(1)(b)), and our legitimate interest in preventing a key from being shared without limit (Art. 6(1)(f)).

Payment itself is handled by a payment provider, which collects what a transaction needs; we receive your email address and licence status, and we never receive or store your card details. The provider will be named here before the first sale.

7Service providers

A small number of providers process data on our behalf, strictly to run the service:

• Hetzner Online GmbH (Germany) — hosting; your files and our logs live on their servers in the EU.
• Cloudflare, Inc. — network security and content delivery; site traffic passes through Cloudflare's edge, and email to hello@revisic.com is routed by Cloudflare Email Routing.
• Resend (Plus Five Five, Inc.) — delivers the emails the cabinet sends you (sign-in links and licence keys); it therefore handles your address and the contents of those messages.
• Google LLC (Gmail) — receives email you choose to send to hello@revisic.com.

The licence registry itself runs on Cloudflare's infrastructure (Workers and D1) — it holds the records described in section 6 and never any part of a drawing.

We do not use advertising networks, data brokers, or third-party trackers of any kind.

8Your rights

If you are in the EEA or UK, you have the right to access, correct, or erase your personal data, to object to or restrict processing, to withdraw consent, and to data portability. Because uploaded drawings are deleted automatically within 48 hours, most file data is already gone by the time a request would be made; for everything else — a waitlist email, or the licence data in section 6 — write to hello@revisic.com from the address in question and we will act on it promptly. We can produce a complete copy of what a licence record holds, and delete it: erasing a licence means the key stops working, so we will confirm that with you first. Where a licence belongs to a company account, the record of administrator actions keeps its entries with the address removed, because it is the company's account history rather than ours to erase. You also have the right to complain to your local data-protection supervisory authority.

9Changes

This notice covers the current pre-launch period and will evolve as the product and its legal entity are finalised — in particular, section 1 will gain concrete legal details, and section 6 will name the payment provider, before subscriptions open. Material changes will be reflected by the “last updated” date above; if a change affects data we already hold about you (such as a waitlist email or a licence), we will notify you at that address.

This notice describes current practice in good faith during the pre-launch period. A finalised, jurisdiction-specific policy will replace it before paid subscriptions open.