Privacy policy

Signing in with Google

The app is in early access, by invitation: you can sign in once your email address is on our invitation list, and only with a Google account.

When you sign in, Google asks you to approve its basic sign-in permissions (openid, email, profile) and then gives us:

• your name
• your email address
• your profile picture
• an id that stays the same for your Google account

We use these to sign you in, to show which account is signed in, and to keep your parts and files yours. That is all we use them for.

We do not ask for, and cannot see, your Gmail, Drive, contacts, calendar or anything else in your Google account, and we never see your Google password.

What Google gives us is stored with your account (see where it lives) and goes to nobody else. We don't use it for advertising, don't sell or transfer it, and don't use it to train AI models.

What the app stores

All of it is kept under your account. Other people who use VibeSCAD cannot open it.

• Your parts. Each part's OpenSCAD program and project files, every saved version, drafts in progress, and the models and print files built from them.
• Files you add. Photos, videos, PDFs and 3D models (STL, STEP) you attach or import.
• Conversations. What you write to the agent, what it answers and does, and the pictures and build results it was shown along the way. Clearing a chat starts the agent fresh but keeps the earlier conversation for you to read; deleting the part deletes it.
• Measurements and print notes. The numbers and photos you enter on a measuring sheet, and what you mark as bought or done in the Print tab.
• Inventory. The list of hardware and filament you say you have.
• Bug reports. When VibeSCAD itself gets something wrong, the agent can send us a report. It shows in the chat as a card you can open and discard. A report holds what happened, your words about it, how to see it again, and which part, version and model it concerns. We read reports to fix VibeSCAD.
• Records of use. For each turn: the model that ran, how long it took, how much it used and how it ended. For each version: which app or connected tool built it. And counts of renders, slicing and storage, because each account has limits.
• Connected tools. If you let an outside agent such as Claude Code or Codex work on your parts, we keep which tool you approved, what you allowed it to do, when, and the tokens that let it in.
• Sign-in sessions. One cookie keeps you signed in. For each session we keep when it started, when it expires, and the IP address and browser it came from. The app sets no advertising or tracking cookies.

Kept in your browser, not on our servers: your model provider's address and key (next section) and display preferences such as the panel layout.

The AI model

VibeSCAD has no AI account of its own. You give it an OpenAI-compatible provider (OpenRouter, a model maker's own API, or another such service) as an address and a key.

• The address and key are kept in your browser. They travel with each turn, our server holds them in memory only while that turn runs, and we store them nowhere.
• To do its work, a turn sends your provider what it needs: your messages, the photos and files you attached, the program, and pictures and reports of the part being built.
• What your provider does with that is covered by its own terms and privacy policy, not this one.
• VibeSCAD does not train AI models on your content.

An outside agent you connect runs its own model on its side: what it reads from your parts goes where that tool sends it.

Looking things up

With Web switched on, the agent can search the web and read pages for your part: a product's dimensions, a standard, a drawing. Its search words go to a search engine and the pages are fetched by our servers, so those sites see a request from VibeSCAD, not from your device.

Where it lives, and who else sees it

The app and this site run on Cloudflare: hosting, the database, file storage and server logs. Connections use HTTPS, and Cloudflare encrypts what it stores. As for any website, Cloudflare handles the technical details of each request (IP address, browser, time) to deliver pages and stop abuse.

Besides Cloudflare, your data reaches only:

• Google, which signs you in and so knows you use VibeSCAD;
• your model provider, with what a turn sends;
• the websites the agent searches and reads, when Web is on;
• an outside agent, if you connect one.

We don't sell or rent your data, show ads, or give data to advertisers or data brokers. If a law or a court order required us to hand data over, we would have to.

The people who run VibeSCAD can reach stored data to keep the service working and to fix what a bug report describes.

This website

vibescad.com collects one thing: the waitlist. If you join, we keep your email address, the role you picked if you picked one, the country Cloudflare estimates from your connection, and the time. It is stored in a database at Cloudflare, separate from the app, and a copy arrives in our own inbox. We use it to write to you when there is something to try, and for nothing else.

The form uses Cloudflare Turnstile to tell people from bots. It loads from Cloudflare, looks at signals from your browser and your IP address, and tells us only whether the check passed.

The site has no analytics script and no ads, and sets no cookies of its own. Fonts, pictures and videos come from vibescad.com itself.

Your data, your choices

• Export. Download any part as a ZIP of its project, or as 3MF, STL or .scad.
• Delete a part. Deleting a part in the app removes its versions, files and conversation. You can also remove inventory lines and discard a bug report.
• Delete your account. Write to main@vibescad.com from the address you sign in with, and we will delete your account and everything stored under it. There is no button for this in the app yet.
• Get a copy of everything, or leave the waitlist. Write to the same address.
• Revoke Google access. Remove VibeSCAD under “Third-party apps & services” in your Google Account. That stops sign-in; it does not delete what is stored here, so ask us for that too.

We keep your data until you delete it or ask us to. A waitlist address stays until you ask us to remove it.

Changes

When this policy changes, we update this page and its date. If a change affects how we use your Google account details or your content, we tell you in the app and ask you to agree before it applies to you.

Contact

VibeSCAD is run by Aner Cohen, in Israel. Questions about this page or your data: main@vibescad.com.