Privacy policy

The controller of your personal data is Quantum AMS LLC, a limited liability company organised in New Mexico (USA), filing number 0002281797, 530-B Harkle Road, Ste 100, Santa Fe, NM 87505, USA. For any question about privacy, or to exercise your rights, write to info@stairgen.pro.

We have not appointed a representative in the European Union under Article 27 GDPR, because our processing is occasional, does not include large-scale processing of special categories of data or of data on criminal convictions, and is unlikely to result in a risk to the rights and freedoms of individuals (Article 27(2)(a) GDPR). You can contact us directly at info@stairgen.pro.

For users in Brazil, the same address is the communication channel with data subjects and with the ANPD under the LGPD (Law 13.709/2018).

• You can use StairGen Pro without an account and without giving us any personal data.
• If you sign in with Google, we store your name, email address, photo and the projects you save, only to provide your account.
• We use Google Analytics cookies only if you accept them.
• We do not sell your data or use it for advertising.
• Our server and database are in the European Union (France).

• Without an account: the projects you save and the editor draft are kept in your browser's local storage (localStorage), on your device. They do not reach our server.
• Google account (optional): if you sign in with Google, we receive from Google and store your name, email address and profile picture, the identifier of your Google account and the tokens Google issues for the sign-in. We never see your Google password.
• Session: while you are signed in, we store a session identifier, its expiry date, and the IP address and browser (user agent) from which it was opened.
• Saved projects: the projects you save to your account, with their name, stair type, dimensions, options and date of last change.
• Server logs: our server and its proxy record technical data for each request (IP address, date and time, page requested, browser and response code).
• Analytics, only with your consent: Google Analytics 4 collects how you use the site (pages viewed, device, browser, referring site, approximate location derived from the IP address, and events such as opening a calculator, downloading a DXF, printing, saving a project, signing in or changing language).

If you do not accept analytics cookies, Google Analytics runs in a restricted mode: no cookies are stored on or read from your device, and only cookieless signals are sent to Google (that a page was viewed, the time, the browser and your consent choice). Google uses them in aggregate to estimate statistics, without identifying you.

• Providing your account and saving your projects: performance of the contract you enter into when you use the account (Article 6(1)(b) GDPR; Article 7(V) LGPD).
• Security, abuse prevention and troubleshooting (sessions and server logs): our legitimate interest in keeping the service secure and working (Article 6(1)(f) GDPR; Article 7(IX) LGPD).
• Usage statistics with Google Analytics cookies: your consent (Article 6(1)(a) GDPR and the cookie rules of the ePrivacy Directive; Article 7(I) LGPD). You can withdraw it at any time.
• Cookieless measurement signals when you have not consented: our legitimate interest in knowing, in aggregate and without identifying anyone, how the service is used (Article 6(1)(f) GDPR).
• Complying with legal obligations and answering requests from authorities: legal obligation (Article 6(1)(c) GDPR; Article 7(II) LGPD).

We do not sell or rent your personal data, we do not use it for advertising and we do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

• OVHcloud (OVH SAS, France), our hosting provider: the server and the database are in its data centre in Gravelines (France, European Union).
• Google (Google Ireland Limited and Google LLC): it provides the Google sign-in, which it processes as an independent controller under its own privacy policy, and Google Analytics, which it processes on our behalf and only with your consent.
• Public authorities and courts, only when the law requires it.

Your data is stored in the European Union. Quantum AMS LLC is a US company and its team accesses the data from the United States to run and support the service; these transfers are covered by the standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR).

Google may process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023, with its UK and Swiss extensions) and also uses standard contractual clauses. For users in Brazil, transfers rely on the mechanisms of Article 33 LGPD.

• Account and projects: as long as your account exists. A deleted project is removed from the database. If you ask us to delete your account, we delete it with all its projects without undue delay and at the latest within one month.
• Sessions: they expire after 7 days without use or when you sign out.
• Server logs: 30 days, unless they are needed to investigate a specific security incident.
• Google Analytics: event data is deleted automatically after 14 months, and analytics cookies expire after 13 months.
• Data in your browser (projects without an account, draft and cookie choice): until you delete it or clear your browser's data.

You can ask for access to your data, its rectification or erasure, the restriction of its processing and its portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. Each project can also be exported to JSON from “My projects”.

To exercise your rights, write to info@stairgen.pro, if possible from the email address of your account. It is free of charge and we will reply within one month, which the law allows us to extend in complex cases.

Brazil: you have the rights in Article 18 LGPD, including confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about sharing and revocation of consent.

Other countries: if you live outside the European Union (for example in the United Kingdom, Switzerland, Russia or the United States), we will respect the rights your local data protection law gives you. Write to the same address.

If you think we have not handled your data properly, you can lodge a complaint with the data protection authority of the country where you live or work, or where the alleged infringement took place: in the United Kingdom, the Information Commissioner's Office (ICO); in the European Union, your national authority (list at edpb.europa.eu); in Brazil, the ANPD. We would appreciate the chance to sort it out first, so please write to us beforehand if you can.

StairGen Pro is not intended for children. You must be at least 16 years old to create an account, and we do not knowingly collect data from anyone younger. If you believe a minor has given us personal data, write to us and we will delete it.

All connections use HTTPS encryption, the database is not publicly accessible and only authorised staff can access the data, which they need to run the service.

The cookies and local storage we use, and how to change your choice, are explained in the Cookie policy.

If we change this policy, the date at the top will show it. If the change is important, for example because we introduce advertising or payments, we will announce it on the website and, if you have an account, by email, and we will ask for your consent again where it is required.