Privacy Policy

1. About CutNavi and this policy

CutNavi is a browser-based design, cutting-layout and production preparation service operated by ART WOOD LAB LLC, a Florida, United States limited liability company. You may contact us at info@cutnavi.com. This policy describes information processed when using CutNavi and contacting its operator.

Legal and privacy correspondence: ART WOOD LAB LLC, 7901 4TH ST N, STE 300, ST. PETERSBURG, FL 33702, UNITED STATES. This is a correspondence address, not a staffed customer-service office. Support and privacy contact: info@cutnavi.com.

2. Anonymous work, accounts and preferences

You can try CutNavi without registering. An anonymous workspace cookie allows the same browser to recover eligible private saved work. Clearing this cookie before linking work to an account can prevent access to that anonymous workspace. Account sessions support authenticated access and recovery across browsers. Workspace ownership checks also apply to saved designs, projects, materials, presets, mappings and private production links.

Language, units and currency are separate preferences. Switching millimeters and inches changes the display and supported input format; it does not change the physical geometry of saved work. Preference storage is used to remember your choices.

For email/password accounts, CutNavi processes account information and password hashes. Verification and recovery use protected, expiring links. Passwords are not sent in authentication emails. Google authentication, when enabled, processes identity/profile information and Google's stable account identifier using openid, email and profile scopes. It does not request access to your Google Drive, Gmail or Calendar.

3. Projects and production information

Saved information can include project and part names; dimensions and quantities; design inputs and revisions; sheet/linear settings; optimizer results, layouts and run history; material and edge-band libraries; your prices and currencies; remnants; presets; import mappings; and source/cost snapshots. This information supports the tools, production outputs, private storage and later recovery that you request. Historical revisions and saved runs preserve their original information rather than being recalculated whenever current settings or prices change.

Private QR part links enforce the applicable account/workspace authorization. Knowing such a URL does not grant public access to its production details. Users who download or share their own files control their subsequent handling of those files.

4. Spreadsheet imports and exported files

The Import Center reads XLSX, CSV and supported pasted rows locally in the browser. It does not upload or store the original workbook or cut-list file through that workflow. Normalized, validated records become server-side project data when you explicitly save the project. Mapping profiles save structural configuration rather than file bodies. Exports such as SVG, DXF, CSV and print plans are generated for the requested workflow and downloaded or printed by the user.

If you voluntarily send a file or production information to support by email, it is part of that separate correspondence. The browser-local import statement does not mean that material voluntarily emailed to support stays only on your device.

5. Emails, logs and purposes

Transactional emails deliver verification and password-recovery links. Support emails contain the information you voluntarily provide. Do not send passwords, authentication tokens or unnecessary sensitive production information by email.

The application and hosting systems process technical request metadata and operational/security events to run the service, diagnose failures and prevent misuse. Application safeguards avoid logging passwords, raw workbooks, OAuth tokens and private production payloads. This does not assert that every infrastructure provider uses identical logs or retention rules.

6. Providers and processing locations

The current application and PostgreSQL services use Hostinger infrastructure in Boston, United States. Local database backups currently remain on the same VPS. Hostinger provides the configured email service. Google participates in identity processing when Google sign-in is activated. Their applicable independent policies and contractual roles must be considered alongside this policy. No third-party advertising, payment processing or Google Analytics is currently activated in CutNavi.

Hosting and email providers process information under their applicable service arrangements. Processing may involve countries other than your own. Contact info@cutnavi.com for information about the providers and arrangements relevant to your request. This policy does not assert a GDPR/KVKK certification or that every international transfer has the same legal basis.

7. Retention, closure and requests

Saved revisions, layouts and cost snapshots contain historical information. Removing a current setting or archiving a library item does not automatically remove historical references. Backups may contain earlier versions of records. Existing record-level delete controls do not constitute a complete self-service account closure/export workflow. Immediate removal from every backup or an unimplemented account-wide workflow is not promised.

Contact info@cutnavi.com to request information about your records, correction, export or account closure. We verify your authority, review applicable legal obligations and explain what can be removed, including how backup expiry affects older copies.

There is no automatic age-based expiry of saved account or anonymous workspace records. Account-wide requests are handled with identity/authority checks through info@cutnavi.com. Local database backup archives are retained for 30 days; older validated archives are removed by the dedicated backup retention process. Backup copies are not edited when a current record is deleted. There is currently no off-host backup. Logs and support correspondence do not have a verified common fixed retention period; applicable obligations and the individual request are considered. If no newer validated backup is available, removal pauses to preserve the remaining recovery copy.

8. Security, rights and changes

Implemented safeguards include trusted HTTPS, private access checks, restricted secret configuration, isolated service/database resources, password hashing, explicit account linking and rate limits. These safeguards reduce risk but do not guarantee absolute security. Do not share account credentials or private workspace access information.

Depending on applicable law, you may have rights concerning access, correction, deletion, portability, restriction or objection. Contact info@cutnavi.com; we will assess the request under applicable law and verify authority. Where applicable, you may complain to a competent supervisory authority. We will update this policy when material practices change and provide notices required by law.