Privacy Policy

Last updated 29 October 2026

This policy explains how Cadsy handles personal data about the people who use it. The data controller is Anjaneya AB (org. no. 559580-5531), Sweden. For any privacy question or request, email uttejh.reddy@cadsy.se.

What we collect

• Account data: your name, email address, a hashed password if you sign up with email, and when you signed up, signed in and accepted our terms. If you continue with Google, Google shares your name, email address and profile picture with us; we never receive your Google password.
• Content: what you add to or create with Cadsy, and records of your usage.
• Technical data: IP address, browser details and request logs kept by our service providers to operate and secure the service.

Why we use it and our legal basis

• To provide and operate Cadsy under our agreement with your organisation (GDPR Article 6(1)(b), and Article 6(1)(f) where you use Cadsy on behalf of your employer).
• To keep the service secure, prevent abuse and fix faults (our legitimate interest, Article 6(1)(f)).
• To understand how Cadsy is used and improve it, which can include our team reviewing chats and projects (our legitimate interest, Article 6(1)(f)).
• To meet legal obligations (Article 6(1)(c)).

We do not use your content to train AI models. We do not use analytics, advertising or tracking tools, do not send marketing email, do not sell personal data and do not make automated decisions with legal or similarly significant effects about you.

Our AI providers do not use your content to train models without permission. They may retain content temporarily for caching, security and abuse prevention under their service terms.

Who processes it

These providers process personal data only on our instructions under a data processing agreement.

• Supabase Pte. Ltd.: sign-in, account emails and database.
• Amazon Web Services: hosting, storage, computing and AI inference.
• Modal Labs, Inc.: computing and AI inference.
• OpenRouter, Inc.: AI inference.
• OpenAI: AI inference.
• Cloudflare, Inc.: AI inference and delivery of cadsy.se.
• Google Cloud: AI inference.
• Zoho Corporation B.V.: our email and the early-access form on cadsy.se.

Some providers process data outside the EU/EEA, including in the United States. Transfers are protected by adequacy decisions or the European Commission’s Standard Contractual Clauses. You can ask us for a copy.

If files or content you add to a project contain personal data about other people, your organisation is the controller of that data and we process it on its behalf.

This website

cadsy.se is hosted by Cloudflare, Inc., which processes visitors’ IP addresses and request details to deliver and protect the site. The site sets no cookies and uses no analytics.

If you request early access, the form is loaded from Zoho when you open it and sends us your name, email address, organisation and message. We use them only to reply to you about early access (our legitimate interest, Article 6(1)(f)) and delete them within 12 months unless you become a customer.

How long we keep it

We keep your data while your account is active. When you ask us to delete your account or your organisation’s pilot ends, we delete your account and project content within 30 days. Copies in our providers’ logs and backups expire within their standard retention periods. If we must keep a record by law, for example accounting records, we keep only that record for the required period.

Your browser

Cadsy stores your sign-in session and small interface preferences in your browser’s local storage. They are needed for the service to work, so we do not ask for consent. We use no other cookies.

Your rights

You can ask to access, correct, delete or receive a copy of your personal data, and to restrict or object to how we use it. Email uttejh.reddy@cadsy.se and we will reply within one month. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or the authority where you live or work.

Cadsy is for people aged 18 or over who use it for work. We may update this policy and will ask you to accept the new version when you next sign in.