Legal
Privacy Notice
The short version
- Tesselform runs on your computer. Your scans, models and drawings are never sent to us.
- We collect what we need to run your account, licences and billing, and nothing for advertising.
- Payments go through Paddle; we never see your card number.
- You can download or delete your data yourself from your account page.
This summary is to help you. The notice below is what applies.
1. Who we are
Tesselform Ltd ("we", "us") is the controller of the personal information described in this notice. Our registered office is Unit 14 Bunns Bank, Old Buckenham, Attleborough, England, NR17 1QD, and we are registered with the Information Commissioner's Office under number ZC272753. For anything about your personal information, email helpdesk@tesselform.com.
This notice covers this website, your Tesselform account, and the licence checks the Tesselform software makes.
2. What we do not collect
- Your scans, models and drawings. The software processes them on your computer and never uploads them to us.
- Your card details. Payments are taken by Paddle on its own secure pages.
- Advertising or analytics tracking. This site uses no advertising, analytics or social media trackers. See our cookie notice.
3. What we collect and why
| Information | What we use it for | Our lawful basis |
|---|---|---|
| Account details: your name, email address, company (if you give it) and password (stored only as a one-way hash) | Creating and running your account, your trial and your licences; contacting you about them | Contract |
| Subscription and billing records: plan, seats, prices, invoices, billing address, VAT number, and payment status from Paddle | Taking payment, keeping accounts and meeting tax law | Contract; legal obligation |
| Licence information: licence keys, a code derived from each activated computer's hardware, the computer's name, the software version, the dates and network address of licence checks | Activating and checking licences, showing you your computers, and preventing licence misuse (including allowing one free trial per computer) | Contract; legitimate interests (protecting our software from misuse) |
| Update checks: the software version, its update channel, a code derived from the computer's hardware (turned into a one-way code before we use it) and the network address. The software checks for updates automatically, including the free Viewer with no account, and you can turn this off in the software's settings | Telling you when an update is available, and releasing updates to a share of computers at a time | Legitimate interests (keeping the software up to date and secure) |
| Sign-in and security information: when and from which network address and browser you signed in, account activity, failed sign-in attempts | Keeping your account secure, and detecting and preventing fraud | Legitimate interests (security) |
| Records of what you agreed to: the terms, their version, when, and from which network address | Showing what was agreed, for example that you asked to start straight away when you bought as a consumer | Legal obligation; legitimate interests |
| Messages you send us, through the contact form or by email | Answering you and providing support | Legitimate interests (replying to you); contract, where it is about your subscription |
| Your marketing choice | Sending occasional product news, only if you ask for it | Consent, which you can withdraw at any time |
| Web server logs: network address, date and time, the page requested and browser details | Running the website securely and fixing faults | Legitimate interests (operating the site) |
| Visit counts: the page, the day, the site that linked to it, whether a phone or a computer was used, and a code made from your network address and browser that changes every day and cannot be turned back into either. No cookies are used. | Knowing how many people use the site and which pages help them | Legitimate interests (improving the site) |
Where we rely on legitimate interests, we have weighed them against your interests and rights; you can object, as section 7 explains. We do not make decisions about you by automated means that have legal or similarly significant effects.
4. Who we share it with
We do not sell your personal information. We share it only with:
- Paddle (Paddle.com Market Limited), our payment provider and the merchant of record for our orders: it takes your payment, charges any tax due, handles refunds and chargebacks, and issues your receipt and invoice. Paddle is a controller in its own right of the personal information it needs for that, and for preventing fraud and meeting its own legal duties; see Paddle's privacy policy. We receive from it the details of your order, your billing country and address, your tax number if you give one, and the payment status.
- Our hosting provider (DigitalOcean, LLC, with our servers in London, United Kingdom), which runs the servers this website and our licence service use.
- Our email provider (Brevo (Sendinblue SAS), France), which delivers the emails we send you.
- Professional advisers, such as accountants and lawyers, under a duty of confidentiality.
- Authorities such as HMRC or the police, where the law requires it.
- A buyer of our business, if we sell it, who would have to treat your information as this notice describes.
Our service providers act on our instructions under contracts that require them to protect your information.
5. Transfers outside the UK
Some of our providers, including Paddle, process information outside the UK, for example in the United States. Where they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or by the International Data Transfer Addendum approved by the Information Commissioner. Email us for details of the safeguards for a particular transfer.
6. How long we keep it
| Information | How long |
|---|---|
| Account details | While your account is open. Deleting your account removes them straight away. |
| Subscription and billing records, and what you agreed to at checkout | Six years after the end of the financial year they relate to, as UK tax law requires. After you delete your account, they are no longer linked to it. |
| Licence information | While the licence exists. Deleting your account removes it. |
| Sign-in sessions | Until you sign out, or 30 days after you last use them. |
| Account activity records | While your account is open; anonymised when you delete it. |
| Messages you send us | Two years after we receive them. |
| Web server logs | Up to 30 days. |
| Visit counts | 13 months. The value that makes each day's codes is deleted at the end of that day. |
7. Your rights
Under UK data protection law you have the right to (and if you are in the European Union or European Economic Area, the same rights apply to you under the EU General Data Protection Regulation):
- ask for a copy of your personal information (you can download most of it yourself from Profile and security);
- have inaccurate information corrected (you can edit your profile yourself);
- have your information deleted (you can delete your account yourself), subject to what we must keep by law;
- restrict how we use your information, or object to our using it on the basis of legitimate interests;
- object to direct marketing at any time, which we will always respect;
- receive information you gave us in a portable format; and
- withdraw consent where we rely on it, without affecting what we did before.
To use any of these rights, email helpdesk@tesselform.com. There is normally no charge, and we will reply within one month. We may need to confirm who you are first.
8. Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113. If you live in the European Union or European Economic Area, you may instead complain to the data protection authority in your country.
9. Security
We protect your information with encrypted connections, passwords stored only as salted one-way hashes, secure session cookies, limits on repeated sign-in attempts, and access limited to the people who need it. No system is perfectly secure; if a breach puts your rights at high risk, we will tell you without undue delay.
10. Children and changes
Tesselform is for adults, and accounts are for people aged 18 or over. We may update this notice; the version and date at the top show when it last changed, and we will tell account holders by email about significant changes.