Legal & Compliance
Privacy Policy
Last Updated: September 30, 2026 • Effective Date: September 30, 2026
BalloonPlot AI ("BalloonPlot", "BalloonPro", "we", "our", or "us") is dedicated to safeguarding the privacy and security of engineering teams, aerospace manufacturers, quality inspectors, and individual users across our web platform (balloonplot.com) and our desktop application (BalloonPro for Windows). This Privacy Policy explains our data collection, handling, and protection practices.
CORE PRIVACY PRINCIPLE
Local-First & Proprietary CAD Security
BalloonPlot is designed from the ground up as a local-first architecture. Your technical blueprints, CAD drawings, AS9102 First Article Inspection reports, and proprietary dimensions remain on your physical workstation and are never uploaded or indexed by our servers unless you explicitly trigger a cloud-assisted feature.
1. Information We Collect
We only collect the minimum information required to authenticate users, manage licenses, and operate the service securely:
- Account Information: Name, email address, password hash (salted using bcrypt; plain-text passwords are never stored), and registration timestamp.
- Single Sign-On (Google Authentication): When you sign in via Google, we receive your Google verified email address, full name, and avatar URL provided by Google Identity Services via Firebase Authentication.
- Subscription & Licensing: Plan tier (Trial, Pro, Enterprise), payment transaction reference from our payment gateways (Cashfree / Dodo Payments; we never collect or store credit card numbers), license key, and software activation tokens.
- Desktop Version & Health Diagnostics: Current app version, operating system release, and crash logs to deliver update notifications and software patches.
2. Google User Data & OAuth Policy
When you choose to authenticate via Google Single Sign-On:
- We access only basic identity profile data: your primary email address and display name.
- We do not request access to your Google Drive, Gmail, Contacts, or sensitive files.
- Google user data is used solely to authenticate your account and securely associate your desktop license.
- We never sell, lease, or transfer Google user data to data brokers or third parties, nor do we use Google personal data to train artificial intelligence models.
- You may revoke BalloonPlot's access to your Google account at any time via your Google Account Security Settings.
3. Protection of Engineering Drawings and CAD Data
We recognize that engineering drawings may contain sensitive IP, ITAR-regulated specifications, or defense trade secrets:
- Local Processing: BalloonPro renders PDF drawings, calculates dimension coordinates, and plots balloon overlays locally on your CPU/GPU.
- No Unprompted Cloud Uploads: Opening, annotating, and exporting drawings does not transmit file contents to BalloonPlot servers.
- Optional Cloud AI Scanning: If you opt-in to cloud-assisted OCR or GD&T extraction features, drawing crops are transmitted over TLS 1.3 encrypted connections and processed in-memory for the duration of the request only. Crop images are immediately discarded and never stored.
4. How We Use Information
The information collected is used exclusively for:
- Providing access to the BalloonPlot web platform and BalloonPro desktop software.
- Issuing, verifying, and renewing desktop software licenses.
- Sending critical transactional communications (license keys, password resets, release notes, security alerts).
- Detecting and preventing fraudulent activation or abuse of software licenses.
- Processing subscription billing and generating tax invoices via Cashfree and Dodo Payments.
5. Third-Party Service Providers
We work with trusted infrastructure providers who meet rigorous security standards:
- Firebase Authentication (Google Cloud): Identity management and secure OAuth handling.
- Cashfree & Dodo Payments: Secure, PCI-compliant payment gateway processing for domestic and international subscription transactions.
- Turso (ChiselStrike): Distributed, encrypted database infrastructure for account metadata.
- Render & Vercel: Secure backend API and web hosting with global edge delivery.
- Microsoft Store: Application packaging and distribution for Windows clients.
6. Cookies & Web Tracking
Our website utilizes necessary session cookies and browser storage (such as localStorage) to maintain your login session and theme preferences. We do not use invasive third-party tracking scripts. Any analytics used are aggregated and privacy-focused.
7. Data Retention & Account Deletion
Account records and license allocations are retained as long as your account remains active. You maintain full ownership and control over your personal data. You may request complete account deletion and data erasure at any time by contacting our support team at support@balloonplot.com. Upon request, all personal identifiers are purged from our active databases within 14 business days.
8. GDPR & CCPA Compliance
Under applicable international privacy regulations (including GDPR and CCPA), you have the right to:
- Request a portable copy of all personal information we hold about you.
- Request immediate correction of inaccurate account records.
- Object to or restrict specific data processing activities.
- Request permanent deletion under the "Right to be Forgotten".
9. Contact Us
If you have any questions, compliance inquiries, or data requests regarding this Privacy Policy, please reach out to our team: