Legal

Privacy & user policy

Last updated 16 October 2026

Who we are

BYTEWORKS DIGITAL SERVICES S.L. (NIF B56375082) runs Voloom. Email info [at] voloomcad.com. Full company details are in the legal notice. This page is the privacy notice (GDPR) and the rules for using the service.

What we collect

  • Your email, to send a one-time sign-in link and mail about your account, usage and billing.
  • Whether you get design ideas and news by email, and when you chose. It is off unless you tick “I consent to receive product updates” when you sign up, or turn it on on the account page. We keep a record of each choice and the words you saw, to show what you agreed to.
  • If you sign in with GitHub or Google: your verified email, that account's id, and a copy of its profile picture, unless you already set or removed one. We do not get your password or access to anything else.
  • A profile picture, if you upload one. Remove it on the account page at any time.
  • Prompts, reference images, parameters, and the files we generate for you.
  • How many credits you used this month, plus basic server logs (IP, time, browser) kept for security.
  • First-party audience counts: page path and a daily unique-visitor tally. We truncate the IP, mix it with the browser string and a salt that dies with the UTC day, and keep only the integer. The hash is dropped within 48 hours. We do not store your IP for this.
  • Free tools: files you open in a tool stay on your device. Without an account we count tool runs (3 a month) against a one-way hash of the truncated IP, browser string, and month. We store only that hash and the count, never the IP, and nothing on your device.
  • Home page prompt box: if you type a prompt and send it before signing in, your browser keeps it (local storage) so it is waiting in the prompt box once you have signed up. It is deleted when the prompt box takes it, or after a day, and never sent to us until you run it.
  • Machine preference: your browser keeps which machine you last picked or looked at (3D printer, laser cutter or CNC router, in local storage), with your stock settings, so the prompt box opens on it. It stays on your device and holds nothing about who you are.
  • Partner links: if you follow a partner’s link or code, your browser keeps that code (local storage) for up to 60 days so its discount is waiting when you sign up. It holds only the code and when you followed it. Once you sign in, the code is stored on your account so we can apply the discount and pay the partner their share of what you pay; the partner never sees who you are.
  • Contact form: your name, email, and message are emailed to our inbox through Mailgun so we can reply. We keep them as long as the conversation needs, and the form stores nothing on your device.
  • Generators: the sizes, text, and any SVG you upload are sent to our CAD server, built, and deleted when the preview or file is returned. To keep the service up, we cap builds per hour against a one-way hash of the truncated IP (or your account), held in memory only and gone within the hour.

Paid plans and top-ups are charged by Stripe. We do not store your card number. After you sign in we set one strictly necessary session cookie. If you accept, we set optional analytics cookies (including the Meta Pixel for ad measurement) and a first-party visitor id — see cookie policy.

Why, and who else sees it

We use that data to run your account and generate models (contract) and to keep the service secure (legitimate interest). Daily unique visitor counts are first-party audience measurement (legitimate interest). They do not follow you across days and are not joined to an account unless you sign in, or unless you accept analytics cookies. The free tool run count keeps a free service usable and its compute bounded (legitimate interest); if you object, sign in instead and it is not kept for you. If you accept, we also record page views, product events, heatmaps, and session replay in Google Analytics and PostHog, and conversion events in the Meta Pixel (consent). On a new account, the first successful prompt, and a paid plan, we may send a hashed email to Meta's Conversions API so a paid click can be attributed when the Pixel is blocked. If you accept, we also keep the Meta click ids on the account for that match. If you agree to product updates, we email you new features, tips and ideas for what to make with Voloom (consent). Every one has a one-click unsubscribe link. Prompts and images are sent to an AI provider (currently Anthropic) to draft the design. Hosting is DigitalOcean. Sign-in, account and news mail is sent by Mailgun. GitHub and Google confirm your email when you sign in with them. Payments are processed by Stripe. Cookieless traffic statistics (pages, referrers, country, device type, and that a visit led to a sign-up or download) are processed by Ahrefs Pte. Ltd. without setting anything on your device (legitimate interest). Optional analytics is processed by Google LLC, PostHog Inc. (EU Cloud), and Meta Platforms. Some of that processing is outside the EEA; we rely on Standard Contractual Clauses, the EU–US Data Privacy Framework, or another adequacy decision.

How long, and your rights

We keep account and project data until you delete the account, or any legal retention period ends. Deleting the account ends a paid subscription and removes your generations. Sign-in links expire quickly. Daily unique-visitor hashes expire within 48 hours; the counts remain. Free tool run counts are deleted the day after their calendar month ends. Google Analytics and PostHog cookies last up to two years unless you reject them sooner; Meta cookies about three months. You may request access, correction, deletion, restriction, or portability, or object to legitimate-interest processing, by writing to info [at] voloomcad.com. You can withdraw analytics consent in , and stop design ideas and news from the unsubscribe link in any of them or on the account page; that does not affect mail already sent. You can complain to the AEPD (Spain) or your local EU authority. The service is for people 18 or older.

Using Voloom

You describe a part, or a model to assemble from a sheet. We generate a parametric model you can revise and export. STL, GLB, and cut SVG are on every plan. STEP export and private projects are on Maker and Pro. Output is assistive — check dimensions and safety before you make anything. You keep the IP in what you create; we only process it to run the service. The Free plan is 75 credits per calendar month. Do not use the service for illegal work, weapons, or to attack the system. Spanish law applies; Barcelona courts, without limiting mandatory EU consumer rights. See the legal notice for company details.