Privacy Policy

This policy explains what Rapid Manufacturing (ABN 81 994 894 143) collects when you use ToolpathCloud, why, who sees it, and what control you have. It covers machine shops that send us jobs and programmers who program them.

We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

From shops

• Business name, contact email, ABN if given, country, region and time zone.
• Sign-in details. Our authentication provider stores a hashed password, never the password itself.
• Your machines, post processors, machine definitions, tool libraries, fixtures, and your preferred tool suppliers.
• Each job: the model, drawing and specs you upload, messages with us, answers to the programmer’s questions, and the ratings you give.
• Payment records: amounts, currency and status. Card details go straight to Stripe and never reach us.

From programmers

• Name, email, the Autodesk account email we share job folders with, country, region and time zone.
• Your application, the machine types you program, and your vetting job and its results.
• Your work on each job, delivery times, review outcomes and the ratings shops give your programs, without the shop’s name.
• Payout records.

If you sign in with Autodesk

Autodesk tells us your Autodesk account ID, email address and name. We use them to sign you in and, for programmers, to share job folders with the right Autodesk account. We ask Autodesk only for your profile, never your files, and we don’t keep your Autodesk sign-in tokens.

If you import from Fusion

With your permission, we read your Autodesk hub for one hour so you can choose a job’s files. We copy only the files you pick, never change anything in your hub, and don’t keep the connection afterwards.

Automatically

Standard server logs (IP address, time, page requested, browser), and a record of each call we make to Autodesk for a job. We keep these for security, troubleshooting and preventing abuse.

We don’t collect sensitive information as the Privacy Act defines it. Please don’t send it to us.

2. Why we use it

• To quote, program, check and deliver jobs: the core service.
• To match each job to a vetted programmer, and to pay programmers.
• To take payment and keep financial records.
• To sign you in, keep the service secure, and investigate faults and misuse.
• To meet our legal, tax and record-keeping obligations.

We don’t sell personal information or files, and we don’t use your files to train models. We send service emails about your account and jobs. Any marketing email we send will have an unsubscribe link, as the Spam Act 2003 (Cth) requires.

3. Keeping shops anonymous

Programmers never learn which shop a job is from:

• they see only a job code and a client code;
• files are renamed to the job code;
• hidden names inside STEP models and PDF drawings (author, company, part name, document properties) are stripped automatically before a programmer gets a copy;
• questions between programmer and shop are passed on anonymously, and held for us to check if they appear to contain a name or contact details.

We can’t remove names drawn on a drawing, such as a title block, or names inside native Fusion, Parasolid or IGES files. Shops are asked to remove their customer’s name from those before uploading. Shops never see who programmed their job either.

4. Your files

Part files are commercially sensitive and we treat them that way. They’re stored in private storage that browsers can’t reach directly. Download links are short-lived and only issued to someone allowed to see the file.

To program a job, its files are copied into a job folder in ToolpathCloud’s Autodesk Fusion workspace. The programmer assigned to the job gets access to that one folder only, and loses it when the job closes. Programmers agree to keep job files confidential, to work on them only in that folder, and to delete anything they hold when their access ends.

5. Who we share it with

• The programmer of a job gets that job’s files and specs, as described above, but not your business name or contact details.
• Autodesk (Fusion and Autodesk Platform Services) hosts the job folders programmers work in, and the programmer’s Autodesk email is shared with Autodesk to give them access.
• Stripe processes payments. Card data goes to Stripe directly.
• Supabase provides our database, sign-in and file storage.
• Vercel hosts the website.
• Resend sends our emails.
• Authorities, where the law requires or allows us to disclose, or to establish or defend a legal claim.

6. Overseas disclosure (APP 8)

Programmers may be based outside Australia, so a job’s files and specs may be accessed from the country where its programmer works. Our providers also store or process information outside Australia, including in the United States. Before sharing, we take reasonable steps to make sure overseas recipients handle personal information consistently with the APPs: programmers agree to confidentiality terms, and we rely on our providers’ contractual data-protection commitments.

7. How long we keep it

• Accounts: while the account is open, then deleted or de-identified within a reasonable time after it closes, except where the law requires us to keep records.
• Jobs and payments: financial records are kept for at least five years, as tax law requires.
• Part files and delivered programs: kept while needed for the job, any revision or dispute, and our records. A closed job’s hub folder is archived. You can ask us to delete a closed job’s files.
• Server logs: kept for a short operational period.

8. Security

Traffic is encrypted in transit. Files are in private storage, and each shop and programmer can only reach their own jobs. Our Autodesk sign-in tokens are encrypted at rest. No system is perfectly secure, and we can’t guarantee it.

If a data breach is likely to cause serious harm, we’ll notify the people affected and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.

9. Access and correction

You can ask for the personal information we hold about you, and ask us to correct it if it’s wrong, out of date or incomplete. Contact support@toolpathcloud.com. We’ll normally respond within 30 days, and explain our reasons if we refuse.

10. Complaints

If you think we’ve breached the APPs, contact us first at support@toolpathcloud.com and we’ll investigate and respond. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

11. Cookies

We use only the cookies needed to run the service, such as keeping you signed in. We don’t use advertising or cross-site tracking cookies.

12. Children

ToolpathCloud is a business service and isn’t directed at children. We don’t knowingly collect information from anyone under 16.

13. Changes

We’ll update this policy as the service changes, and change the date at the top when we do.

14. Contact

Privacy questions or complaints: support@toolpathcloud.com, or write to us at PO Box 209, Toronto NSW 2283, Australia.