Confidentiality

Your surveys remain yours

Anyone working on behalf of public bodies, heritage authorities and private clients handles documentation subject to confidentiality obligations. CVCAD is built for that context: private storage, per-user isolation, expiring links and automatic file deletion.

Technical measures

How the files you upload are protected

Private storage, no public access

Uploaded photographs, intermediate line art and SVG/DXF archives are stored in private buckets. There is no public URL: no file can be reached by guessing an address, and nothing is indexed by search engines.

Per-user isolation at database level

Each account reads and writes exclusively within its own folder, with access rules enforced by the database (row level security) rather than by the interface. Another platform user, authenticated or not, can never list or download your files.

Temporary signed links

Previews and downloads use signed links with a short expiry, generated on request and tied to your session. A link shared by mistake stops working on its own once it expires.

Automatic deletion after 5 days

Photos, line art, crops and vector archives are permanently deleted by an automatic process 5 days after conversion. The conversion remains visible in your history but marked as expired. Less retained data means less exposure of confidential material.

No training on your material

Uploaded images and generated drawings are never used to train or fine-tune models, never resold, never published as examples and never shared with third parties for commercial or promotional purposes.

You own the outputs

Generated drawings belong to you and can be used without restriction in professional assignments, expert reports and public contracts. CVCAD claims no rights over the deliverables.

Early deletion on request

You can request the immediate deletion of a single conversion, or of all material associated with your account, at any time, without waiting for the 5-day expiry.

Transparency

What we don't promise

We prefer to state our limits precisely, because a commitment that cannot be verified has no value for anyone who must answer for technical documentation.

Processing happens on the server

To extract geometry, the photograph must be readable by the computer vision engine. We therefore do not implement zero-knowledge encryption: during conversion the file is accessible to the service's automated processes and, technically, to personnel with administrative privileges over the infrastructure, who access it only when necessary for maintenance or a support request. No server-side image processing system can claim otherwise.

No compliance certification claimed

This page describes technical measures actually adopted and does not constitute a certification issued by a third party nor a declaration of compliance with audit standards. For specific contractual needs — data processing agreements, reduced retention periods, processing without storage — contact us: we consider dedicated configurations.

Personal data processing is described in the Privacy Policy, and the terms of use in the Terms of Service.

Try CVCAD on one of your surveys

A free trial conversion on sign-up, no payment details required.

Get started