Privacy Policy
Last updated: October 2, 2026
Introduction
The operator of CutOptim ("cutoptim.com", the "Service") is committed to protecting your personal data. This privacy policy describes how we collect, use, store, and protect your data when you use our service. CutOptim is designed with privacy in mind: the rectangular cutting calculations (2D panels, 1D linear and wood) run entirely client-side in your browser, so that project data never leaves your device unless you explicitly choose to save it to your account. The exceptions are Nesting mode and the Engine API, which are solved on our servers — see "Client-side processing" below. If you are a shopper using the CutOptim Configurator embedded in a merchant's shop, the shopper privacy notice at cutoptim.com/configurator/privacy explains that use.
AI assistant
When you use our AI chat assistant, the messages you type are sent to our AI provider, Anthropic (Anthropic PBC, USA), to generate a reply, and are stored on our own server together with your language and, for logged-in users, your account identifier. We also store your IP address to prevent abuse. We use this to answer your questions, improve the assistant, and provide support. Please do not enter sensitive personal data into the chat. Anthropic processes the data under its own terms and does not use API data to train its models. You can hide the assistant at any time from the widget or your dashboard. Chat messages and the stored IP address are deleted automatically after 14 days. To have your chat history deleted sooner, contact us at [email protected].
What data we collect
When registering: email address and password hash. During application use (for logged-in users): saved project data (stock sizes, parts lists), usage statistics (monthly optimization count). We use Umami (self-hosted on our own server) as our primary analytics tool, which is cookie-free and collects no personal data. If you consent via our cookie banner, we may also load Google Analytics, which uses cookies to collect anonymized usage data. Automatically collected (without cookies): browser type, language preference, page view statistics via Umami (no personal data).
Cookies and local storage
CutOptim uses session cookies to maintain login state for authenticated users. Our cookie consent banner allows you to accept or decline optional analytics cookies (Google Analytics). If you decline, only Umami runs, which requires no cookies. We use localStorage in your browser to store: your theme preference (light/dark mode) and your cookie consent choice. These are not transmitted to any server.
Client-side processing
The rectangular cutting optimization calculations (2D panel, 1D linear and wood modes) are performed entirely in your browser. Your material dimensions, parts lists, and cutting plans are processed locally and are never sent to our servers unless you explicitly save a project to your account. This applies to both free and paid tiers. Two things are different. First, Nesting mode (true-shape nesting) is solved on our servers: the shapes, sheet sizes and options of a nesting run are sent to our backend, used to compute the layout and returned to you; they are not kept as a project unless you save one. Second, the Engine API is a server-side service by design: the parts and stock your software sends are processed on our servers to produce the result. In every mode, a signed-in account also records that a run took place (a counter, with no part dimensions) so that the plan allowance can be applied.
How we use data
We use collected data exclusively for: providing and improving the service, managing user accounts, processing subscriptions (via Lemon Squeezy), enforcing usage limits per tier, and customer support communication. We do not sell, rent, or share your personal data with third parties for marketing purposes.
Data security
Data is transmitted over encrypted connections (HTTPS). Passwords are stored only as bcrypt hashes. Access to the database is restricted to the operator, and administrative changes to customer accounts are recorded in an audit log. The database is backed up every night, with an off-site copy. How we protect your data is described on our security page: cutoptim.com/security.
Data processors
We use the following third-party data processors: Hetzner (hosting of our own server, including the database and sign-in, Germany/EU), Cloudflare (CDN, reverse proxy and off-site backup storage), Lemon Squeezy (payment processing, merchant of record), Anthropic (AI assistant, USA), Resend (email delivery), Google (only if you choose Sign in with Google; web fonts), Google Analytics (optional, only with your consent). Each processor handles data under its own privacy policy and data processing terms.
Your rights (GDPR)
For users in the European Economic Area, your rights under GDPR include: access to your personal data, data rectification, data deletion (right to be forgotten), data portability (export your data), restriction of processing, objection to data processing, and the right to withdraw consent at any time. You can export your data and delete your account yourself from your dashboard. To exercise your rights, contact us at [email protected].
CCPA notice (California)
If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to: know what personal data we collect, request deletion of your data, opt out of the sale of personal data (we do not sell personal data), and non-discrimination for exercising your rights. To exercise these rights, contact us at [email protected].
Data retention
We retain your account data for as long as your account is active. If you delete your account, the account and its saved projects are deleted immediately. Copies that already exist in our backups are removed as the backup rotation expires them: daily backups after 14 days, weekly backups after at most 90 days. Anonymized usage statistics may be retained for service improvement.
Changes to this policy
We may update this privacy policy from time to time. Significant changes will be communicated via email to registered users and/or a prominent notice on our website.
Contact
For privacy-related questions or to exercise your data rights, contact us at: [email protected]