Privacy Policy

EdgeWright
Effective Date: August 15, 2026
Contact: service@edgewright.ai

1. Introduction

EdgeWright ("we", "us", or "our") is committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use EdgeWright's web-based CAM platform at app.edgewright.ai and related services (collectively, the "Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Password (stored as a cryptographic hash — we never store your plaintext password)
  • Authentication provider information if you sign in via Google OAuth

2.2 Project and Design Files

When you use the Service, we store the files and data you create or upload, including:

  • DXF files, SVG files, and other design files you import
  • Cabinet designs, part geometries, and toolpath data you generate
  • G-code output files
  • Images you upload or generate via the AI image feature (Image Carve / Signage)
  • Project metadata (names, dimensions, settings)

2.3 Usage Data

We automatically collect certain technical information when you use the Service:

  • Browser type and version
  • Operating system
  • IP address
  • Pages visited and features used
  • Timestamps of activity
  • Error logs

2.4 Payment Information

We use third-party payment processors. We do not store credit card numbers or full payment credentials on our servers. We may retain:

  • Subscription plan and status
  • Billing history and invoice records
  • For x402 protocol payments: public wallet addresses and on-chain transaction references (these are public by nature of blockchain technology)

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Authenticate you and secure your account
  • Store and retrieve your project files and designs
  • Process subscription payments and manage your billing
  • Send transactional emails (account confirmation, password reset, billing receipts)
  • Respond to your support requests and inquiries
  • Monitor and improve the performance, security, and reliability of the Service
  • Comply with legal obligations

We do not use your information to serve advertising, and we do not sell or rent your personal information to third parties.

4. How We Share Your Information

We share your information only in the following limited circumstances:

4.1 Service Providers

We share data with third-party vendors who help us operate the Service:

Provider Purpose Location
Supabase Authentication, database, and file storage USA (AWS)
Fly.io Backend application hosting USA / global edge
Cloudflare CDN, DNS, DDoS protection, bot management Global
OpenAI AI image generation (Image Carve / Signage features) USA
x402 facilitators (e.g. Coinbase CDP) Cryptocurrency payment verification USA

Each service provider is contractually required to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of EdgeWright, our users, or the public.

4.3 Business Transfers

If EdgeWright is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before any such transfer.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Storage and Security

Your data is stored on servers operated by Supabase (database and file storage) and Fly.io (application backend). These services maintain industry-standard security practices including encryption at rest and in transit (TLS).

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of internet transmission or electronic storage is 100% secure.

File storage: Project files and uploaded images are stored in private Supabase Storage buckets. Access is restricted to your account only unless you explicitly share a project.

Data retention: We retain your account and project data for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Cookies and Tracking

The Service uses cookies and similar technologies to:

  • Maintain your authentication session
  • Remember your preferences
  • Collect usage analytics

We use Cloudflare for CDN and security services. Cloudflare may set cookies for bot detection and performance purposes. These are necessary for the security and proper functioning of the Service.

We do not use third-party advertising cookies or behavioral tracking cookies.

7. Your Rights

Under PIPEDA and applicable Canadian privacy law, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Withdraw consent to certain uses of your information (subject to legal or contractual restrictions)
  • Request deletion of your personal information, subject to applicable legal requirements
  • Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca

If you are located in the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to processing. Please contact us to exercise these rights.

To exercise any of your rights, please contact us at service@edgewright.ai. We will respond within 30 days.

8. International Data Transfers

EdgeWright is based in Canada. Our service providers process data in the United States and other jurisdictions. When we transfer your data outside Canada, we take steps to ensure it receives a comparable level of protection, including entering into data processing agreements with our service providers.

9. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at service@edgewright.ai and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 30 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

EdgeWright
Email: service@edgewright.ai
Website: https://edgewright.ai

For privacy complaints that we have not resolved to your satisfaction, you may contact the Office of the Privacy Commissioner of Canada: