LEGAL

Your data, your rights, and the terms

This page holds four texts. All of them were written to answer one question: which information sits where, what gets sent, and what is never collected at all? They have to be legal texts, but they have to be understandable first — so each heading gives the plain answer before the detail.

Version 0.3 In force: 29 July 2026 Pilot release Printable
Contents

01Data-protection notice

Under article 10 of Turkish law no. 6698 on the protection of personal data (Kişisel Verilerin Korunması Kanunu).

SHORT ANSWER

Your drawings, your customer book and your price list never leave your computer. If you open an account we know your e-mail address; if you activate a licence we know a hashed identifier for your machine. Everything else — including design-data sharing — is off by default and does nothing until you turn it on.

Data controller

MobiCAM is currently distributed as a free pilot release, and there is no registered company behind it yet; there is therefore no published trading name, tax registration or postal address. All applications under this notice go to the e-mail address published in the contact section of the Support page, and are concluded within thirty days at the latest. When the company is registered, its identity and address will be added in the same place and this text kept up to date from there.

First, the distinction that matters most: whose data, whose responsibility

You type your own customers' names, telephone numbers and addresses into the program. That information stays in files on your computer; we do not see it, we do not take a copy of it, and we do not move it to a server. So for that personal data, the data controller is you — the duty to inform your own customer, and to keep or delete their details, is yours. This text describes the data we process.

Which data, in which situation

The four situations below are independent of one another. If you merely install the program and use it, nothing beyond the first row of the table happens.

Situation Data processed Purpose and legal basis
Installing and using the program None. Your projects, your customer book, your price list, the autosaves and the log file sit on your own disk only. The program does not connect to any server unless you ask it to.
Opening an account / using the portal E-mail address, your name if you give one, your password (not in the clear — hashed with scrypt), your company/organisation name and your role. In the session records: a hash of the session key, browser information and IP address. In the audit records: the action taken, its target and the IP address. On a password-reset request: the IP the request came from. If you send a team invitation: the e-mail address you invited. Setting up the account and keeping it secure; licence and seat management. Performance of a contract (art. 5/2-c) and legitimate interest (art. 5/2-f — detecting abuse).
Activating a licence The licence key, a hashed identifier for your computer (a one-way digest beginning mcam1.…), the computer's name (only as a label, so you can tell which PC holds a seat), the operating system and the app version. The raw hardware identifier never leaves your computer — it cannot be recovered from the digest that is sent. Checking how many computers a licence is used on. Performance of a contract (art. 5/2-c).
Turning on design-data sharing Anonymised design data and the G-code produced from it. The list below states one by one what is stripped; a sample that is sent is not linked to your computer or your account by any record. Training the design AI. Explicit consent (art. 5/1) — the setting is off by default and nothing is collected until you turn it on.

Design-data sharing: what stays, what is stripped

This setting lives under Settings ▸ Data sharing and is off by default. If you turn it on, an anonymised copy of the project you draw is first written to a folder on your own computer — what gets sent is exactly the file you can see in that folder, not a preview of it.

  • What stays: room dimensions and walls, cabinets and their parameters, material names and thicknesses, cutting and machining settings (kerf, tolerance) and the G-code produced. That is, everything that describes what gets built.
  • What is stripped: the project name, the preparer's and the customer's names, dates, the proposal text and its logo, the customer card and the stage the job is at, the room name, your price book (VAT, prices, labour, installation), material and stock costs, supplier names and stock codes, appliance prices, the names of files you imported and texture file paths.
  • And on the storage side: the table holding the samples has no company, no licence, no machine identifier and no IP in it. The table that counts how much each licence has sent holds nothing whatsoever about what was in it. The two tables deliberately cannot be joined.
IMPORTANT

There is a price for that and we are not hiding it: because the two tables cannot be joined, we cannot carry out a request to "delete everything this workshop has ever sent" on the server side — there is no record of which sample came from whom. In exchange, when you turn the setting off every sample waiting on your computer is deleted immediately, and nothing is collected from that day on.

The AI panel — with your own key

The AI panel runs on your API key. The key stays on this computer and never enters the program's interface layer; we do not see it. When you use the panel, the sentence you wrote goes to your own provider (Anthropic, USA) together with a summary of the project. That summary consists of: the cabinets' id numbers, their type, their width-height-depth, their front type, which one is selected, and whether a room has been drawn. The project name, customer details, price list and proposal text are not in that summary. The transfer is made abroad and happens only when you use the panel.

Automatic updates

On start-up the program checks a public file address for a newer published release. That address is on GitHub, so GitHub sees your IP address and browser/app information during the request. The request carries nothing about your project.

Transfers

Your personal data is never transferred to anyone for advertising, marketing or data sales. Transfers happen only in the three situations named above and only as far as they need to: the hosting provider that runs the service, the server used to send e-mail, and — if you use the AI panel — the model provider you chose yourself. Data may also be shared with public authorities to the extent legislation requires, on a properly made request.

Retention

  • Account data: for as long as the account exists. Records are deleted when you have the account closed.
  • Session records: void when the session key expires or when you log out.
  • Licence activation records: for the term of the licence; the record goes when you release the seat from the portal.
  • Anonymised design samples: indefinitely — but these are not personal data and cannot be linked to anyone.

Your rights (art. 11)

Under article 11 of the law you may apply to us and ask:

  • whether your personal data is being processed, and if so for information about it;
  • for what purpose it is processed, and whether it is used in line with that purpose;
  • who the data has been transferred to, in Turkey or abroad;
  • that incomplete or incorrectly processed data be corrected;
  • that it be erased or destroyed, within the conditions the law sets;
  • that any correction, erasure or destruction be notified to third parties the data was transferred to;
  • to object to a result reached against you solely by automated analysis;
  • that any loss be compensated, if unlawful processing has caused you loss.

You can send applications to the address on the Support page. Your request will be concluded within thirty days at the latest. If you find the answer inadequate, your right to complain to the Kişisel Verileri Koruma Kurulu is reserved.

↑ BACK TO TOP

02Privacy policy

The text above, written without needing legal language — plus this website itself.

The founding principle: the data sits with you, not with us

MobiCAM is a desktop program. You do not need an internet connection to draw, and it does not make one. Your projects are .mcam files, your customer book is a separate record file, your price list lives inside the project file — all of it on your own disk. There is no cloud copy; we do not keep such a thing as "the projects in your account", because there is no such thing.

The practical consequence: even if our server were switched off tomorrow, your drawings, your cut lists and your customer records would still be there and the program would go on working.

The files on your computer

Files that carry personal information are not left to the operating system's default: they are written so that only your own user account can read them. That holds for the customer book and for the crash-recovery snapshot too — both of which can carry a customer's name, telephone number and address.

FileWhat is in itWhere it goes
.mcam project fileThe whole drawing, your price list, the proposal text, the customer linkWherever you save it. Sent nowhere.
Customer bookName, telephone, e-mail, address, notes, the stage each job is atThe app data folder. Sent nowhere.
AutosaveThe current state of the open project, every 15 secondsThe app data folder. Deleted once recovered.
Log fileDiagnostic records. File names may appear in it.The log folder. It does not reach us unless you send it.
Your API keyThe key you entered for the AI panelThe app data folder, with restricted permissions. Not sent to us.
Design samplesOnly if you turned sharing on; anonymisedTo a local folder first; sent from there verbatim.

When you report a problem, you are the one who sends us the log file; the program does not send it on its own. The Settings ▸ About screen shows where that folder is.

This website

  • No analytics, no tracking pixels, no third-party scripts. The site makes no request to any address other than its own server — and that is not a preference but something the page's security policy (CSP) blocks: default-src 'self'.
  • No cookies. See section 4 below for the detail.
  • The fonts are on our own server. Nothing connects to an outside service like Google Fonts, so your visit is not announced to a third party.
  • The server hosting the site may, like any web server, keep technical access records (IP, date, page requested). These are not used for anything beyond security and fault diagnosis.

Security measures

  • Passwords are stored irreversibly (scrypt). Even if the database were somehow taken, the passwords could not be read.
  • Session keys are not held in the clear; only their hashes are in the database. The same is true of password-reset and invitation links.
  • The program will not put a credential on an unencrypted connection. Licence and design data travel over https only; unencrypted http is allowed only to your own computer.
  • Backups are tested by restoring them. A weekly drill proves the backup really comes back, by loading it into an empty database.
  • An independent security review was carried out and the five holes it found were closed; every fix was proved with a test that fails against the old code.

Children

MobiCAM is professional production software. It is not aimed at anyone under 18 and does not knowingly collect data from them.

If this text changes

If it changes, the date it comes into force is updated. For the data-sharing consent inside the program, changing the text is not enough on its own: when the consent wording changes materially the program asks you again, and sends nothing until you have agreed to the new text. That is exactly what was done when the upload feature was added.

↑ BACK TO TOP

03Terms of use

By installing and using the program you accept these terms.

SHORT ANSWER

The pilot release is free and is given as is. What you draw is yours. Before you send anything to be cut, check the dimensions yourself — that is the responsibility no CAD program can take on your behalf.

Scope and pilot status

This is a pilot release. It is distributed free of charge, no fee is asked for it and no invoice is issued. Its purpose is to gather feedback from real workshops. Features may change and the file format may develop; so that your project files keep opening in newer releases, version migrations are carried out inside the program.

Right of use

  • You may use the program in your work and your business for an unlimited number of projects. There is no restriction on selling the furniture you produce.
  • The licence is tied to the number of computers you activate. When you stop using a computer you can release its seat from the portal.
  • You may not copy and distribute, sell or rent the program; nor attempt to reverse-engineer it or disable its licence checks.
  • Sharing your licence key is your own account's responsibility.

Your drawings are yours

Everything you produce with the program — drawings, cut lists, G-code files, quotes, renders — belongs to you. We claim no rights over any of it, take no copy of it and make no use of it. The single exception is design-data sharing, which you turn on explicitly; and even there what is shared is an anonymised copy, with what is stripped listed above.

Production responsibility — do not skip this part

IMPORTANT

The program produces cut lists, drilling programs and CNC code. These must be checked before they go to a machine. Board thickness, machine profile, tool diameter, kerf and the fixturing are your settings; a wrong setting produces output that looks right and is not. Before you cut an expensive board or run a CNC program, look the dimensions over and try the first part.

Machine safety, protective equipment and operator training are entirely your responsibility. The software does not stand in for the safety systems of the machine you use.

Warranty and the limit of liability

The program is provided "as is". No warranty of any kind is given, express or implied, including fitness for a particular purpose; it is not undertaken that it will run uninterrupted or error-free. To the fullest extent the applicable law allows, we are not liable for indirect damage, loss of profit, loss of material or loss of business arising from use of the program. This limitation does not apply to heads of liability that cannot be limited by law (intent and gross fault). Your rights as a consumer are reserved.

What the AI panel produces

The AI panel produces a suggestion; nothing is applied to the project until you approve it. The cabinets it produces go through the same calculation path as the ones you add by hand — there is no separate "AI-drawn" kind of cabinet. Even so, looking the dimensions over before applying a suggestion is down to you. Your relationship with the model provider the panel uses is established through your own API key and is subject to that provider's own terms.

Uses that are not permitted

Overloading our servers with automated tools, attempting to reach another person's account or licence, attempting to circumvent security measures, and using the program contrary to applicable legislation are prohibited. In such cases the account and the licence may be suspended.

Governing law

These terms are governed by the law of the Republic of Türkiye. The courts and enforcement offices of Türkiye have jurisdiction over disputes; for users who are consumers, the right to apply to consumer arbitration committees and consumer courts is reserved.

↑ BACK TO TOP

04Cookie policy

A short section, because there is very little to say.

SHORT ANSWER

This site does not use cookies. Not ours, not a third party's. Which is why no cookie consent banner appears — there is nothing to refuse.

So how is my language and theme remembered?

Not with a cookie, but with your browser's local storage (localStorage). The difference matters: cookies are sent to the server on every request; values in local storage are not. So these preferences never leave your browser — we cannot see them.

NameWhereWhat forHow long
mobicam-langLocal storageYour TR / EN preferenceUntil you clear it
mobicam-themeLocal storageYour light / dark theme preferenceUntil you clear it
mobicam-orgLocal storagePortal only: if you have more than one company, the last one you looked atUntil you clear it
Session keySession storagePortal only: so that refreshing the page does not drop your sessionDeleted when you close the tab

The portal's session key is deliberately kept in session storage rather than persistent storage: for an administration screen you visit rarely, closing the tab closing the session is the right behaviour.

How do I clear them?

Your browser's "clear site data" option clears all four; nothing about the site breaks, only the language and theme go back to their defaults. In a private window none of them persists anyway — and if storage is disabled the site still works fine, it just does not remember your preference.

The desktop program

There are no cookies in the desktop program either. Your settings (language, theme, price list, AI key) are kept directly in files on your own computer.

↑ BACK TO TOP