Privacy
policy.

SyncCAD collects the following information when you use our services:

• Account information: name, email address, and password (stored as a hash — we never store plaintext passwords).
• CAD files you upload, including metadata: file name, format, size, tags, and description.
• E-Learning data: courses enrolled in or taught, submitted assignments, grades, and certificates.
• Notifications: in-app notification history related to platform activity.
• Public profile data: name, avatar photo, profile information you choose to display.
• Usage data: workspace activity, files viewed/downloaded, team activity logs.
• Partnership requests: institution name, partnership type, and contact information submitted via the /partners form.
• Technical information: IP address, browser, and standard access logs.

• Provide, operate, and improve SyncCAD services.
• Display personalized content (workspace, courses, notifications, and library).
• Send transactional emails: account confirmation, e-learning notifications, workspace invitations, and password resets.
• Respond to partnership requests and support from the SyncCAD team.
• Analyze platform usage in aggregate (without identity data) for feature development.
• Detect, prevent, and address abuse and suspicious activity on the platform.

Your data is stored on XESS CDN infrastructure with AES-256 encryption for data at rest and TLS 1.3 for data in transit. CAD files are stored on Object Storage (XESS CDN) with server-side encryption. Automatic backups are performed daily with 30-day retention.

Files you set as public can be accessed, viewed, and downloaded by anyone through the SyncCAD public library. Private files are only accessible by you and invited workspace members.

E-learning grades and submissions are only visible to the student involved and the course instructor.

We do not sell or rent your personal data. Data may be shared with:

• Vultr (server & object storage) — infrastructure where data is stored and processed.
• MXroute — email provider for transactional email delivery.
• Anthropic — for AI chat features (messages do not include CAD file contents or other account data).
• Indonesian legal authorities, if required by applicable law.

Active account data is retained for as long as the account is active. After account deletion:

• Profile data and private files are deleted within 30 days.
• Public content (public files, community threads) may remain available unless explicitly requested for deletion.
• Technical logs are deleted after 90 days.

You have the right to:

• Access and download your personal data through the dashboard.
• Update your account information (name, email, profile photo) at any time.
• Delete files, community content, or your entire account.
• Request data deletion from our system via difta@synccad.com.

SyncCAD uses a session cookie (scd_session) required for authentication. We do not use third-party tracking cookies, advertising, or external analytics.

If there are significant changes to this policy, we will notify you via email or platform announcement at least 7 days before the changes take effect.

Privacy policy questions can be sent to difta@synccad.com or via the contact page.

PT XESS DIGITAL SOLUSI
Menara Palma Lantai 15, Unit 15-03
Jl. H.R. Rasuna Said Kavling VI No.9 Blok X2
RT 9/RW 4, Kel. Kuningan Timur, Kec. Setiabudi
Jakarta Selatan, DKI Jakarta 12950