Privacy Policy — Fusion 360 Add-ins

• Autodesk user ID (app.userId) — your Autodesk account’s internal identifier.
• Autodesk account email (app.currentUser.email).
• Application ID — the Add-in’s Autodesk App Store identifier.
• Activation passcode — only if you voluntarily type one into the Add-in’s “Info” dialog.
• Update check (add-ins with the update feature; currently Steel Frame & Weldments) — the Application ID and your platform (Windows or macOS) only; no account data is sent when the Add-in looks for a newer build.
• Download request — only when you click “Download latest version” in the Add-in’s “Info” dialog, or use the download form on this website: your Autodesk user ID and account email (website: the email you type), the Application ID, the platform, and your browser’s user-agent string when the file is fetched.

We do NOT collect machine or hardware IDs, your IP address (beyond what any HTTPS request inherently reveals to the receiving server; the website download form uses a one-way hash of the IP address for rate limiting only, which is not stored with your data), file names or paths, or the content of your designs/models.

• Verify your purchase/entitlement through Autodesk’s official Entitlement service (apps.autodesk.com).
• Record activations (which Autodesk account activated which app) for license bookkeeping.
• Grant a free trial, validate an activation passcode, or apply a manual access grant.
• Tell you when a newer build is available and deliver it to licensed users (Autodesk Entitlement, or an access grant on our records) through a short-lived (15-minute) download link.
• Record each download (user ID, email, app, version, time, user-agent) for support and statistics.

• Autodesk — your user ID and App ID are sent to Autodesk’s Entitlement endpoint to confirm ownership.
• Our licensing server, hosted on Google Firebase / Google Cloud (region us-central1) — receives your user ID, email, App ID (and a passcode if you enter one) to perform activation, trial, or grant, and the download request data above to issue and log a download. Google acts as our hosting/processing provider.

We require any such third party (Autodesk; Google) to protect your data to at least the standard described here; Google processes it under its own security and privacy commitments. We do not sell your data and do not share it with any other third party, advertiser, analytics or ad network.

• Revoke consent: stop using or uninstall the add-in (it then sends nothing further), and delete the folders named in section 5.
• Access or delete your data: email vanthan92e1@gmail.com and we will action it.

We comply with applicable data-protection laws, including the GDPR and CCPA, and act as an independent data controller for the data described here.

• The email address you type — used only to reply to that report. It is never published, sold, or added to a mailing list.
• The report itself — the type (bug or feature), your summary and message, and the add-in version you optionally type in.
• A salted hash of your IP address and your browser’s user-agent string — kept only to rate-limit and clean up spam. The IP address itself is never stored; the hash is a short pseudonymous identifier for the connection, readable only by the publisher and never published or shared.

Reports are stored in Google Firebase (Firestore) and can be read only by the publisher. Ask at vanthan92e1@gmail.com and your report will be deleted. Nothing on that form is required except the email address, the summary, and the message — please do not include anything confidential in it.

• Check the email address you type against our license records (App Store purchases reported by Autodesk, activations, and access grants issued by the publisher). The address is not stored unless a download is issued.
• Issue a one-time download link valid for 15 minutes, and record the download (email, app, version, time, browser user-agent string) for support and statistics — the same record the Add-in’s own “Download latest version” button creates.
• Rate-limit the form with a one-way hash of your IP address that is kept only in an abuse counter and never stored with your data.

If the address is not on record, nothing is stored and you are pointed to the App Store page instead.