Privacy

Who is responsible

Machsizer is run by Johannes Levin, Sweden, who is the controller of the personal data described here. Write to [email protected] about anything on this page.

What we collect

When you request early access: your email address, name and company, and what you choose to tell us in the form (role, what you make, what you want to try, the tools you use today). We use it to review your request and to support you during the trial.

When you sign in: your email address, a user id, your trial dates and plan, and your sessions (when they started and were last used, and the browser they belong to; never the session key itself, only a fingerprint of it). If you connect an assistant such as Claude, its connection is a session of the same kind, listed in your account menu.

When you use the engine: one line per job: what kind of job, when, how long it took and how large the request was. This is how the trial's engine minutes are counted.

Your projects are not stored by us. They stay in your browser and in the files you save. When you build a layout or run a simulation, the project is sent to the engine for that job, worked on in memory and not kept afterwards. The same holds for projects an assistant sends.

Email: the emails we send you (sign-in links, the answer to your request) and your replies.

Why we may use it

To provide the account and the trial you asked for (a contract with you), and to review requests, keep the service secure and count usage (our legitimate interest in running the service). We do not sell personal data, show advertising or send marketing email.

This website

The pages on this site load no third-party fonts, scripts or analytics, and set no cookies. The app sets only the cookies it needs to keep you signed in.

Where your data is stored

The service and its database run in the EU: the app on Render (Frankfurt, Germany), accounts and requests on Supabase (Frankfurt, Germany), and email is sent through Resend (Ireland). Cloudflare delivers this website and our domain's DNS. Each of them processes the data on our behalf under their data processing terms. Our own service logs record what was requested and when, never what your projects contain; our providers keep their own technical logs, including IP addresses, for a limited time for security.

How long we keep it

Your account, its sessions and its usage lines are kept until you delete the account. A session lasts 30 days, or until you sign out. A declined request is deleted 90 days after the decision; other requests are kept until the account is deleted, or until you ask us to delete them.

Your rights

You may ask what we hold about you, have it corrected, have it deleted, and receive it in a portable form. You can delete your account yourself in the app (account menu, Delete account): this erases the account, its sessions, usage lines and access request at once. For anything else, write to [email protected]. You may also complain to the Swedish Authority for Privacy Protection (IMY).