Privacy Policy

1. Introduction and scope

This Privacy Policy explains how Texadera (“Texadera”, “we”, “us” or “our”) collects, uses, discloses, retains and otherwise processes Personal Data in connection with the TexaCAD web application, desktop binaries, this website and associated higher-education services (collectively, the “Services”). It applies to institutional administrators, professors, students and visitors (each, a “Data Subject”).

Where an educational institution licenses the Services, that institution determines the purposes and means of processing of student coursework and provenance records (the “Controller”), and Texadera acts as its service provider or processor, processing such data solely on the documented instructions set out in the applicable order form, proposal or data processing addendum.

2. Categories of Personal Data

Account and institutional data: name, role, institutional email address, telephone number, institution, department and licence scope supplied through proposal requests, student passes or account provisioning.

Authorship and provenance data: entity-level creation events, timestamps, contributor identifiers, export and plot events, and construction replay logs that enable an authorised instructor to evaluate how a drawing was built.

Technical and usage data: device type, browser, operating system, approximate location derived from IP address, session identifiers, performance metrics and error diagnostics.

Communications data: correspondence with our higher-education team, support requests, survey responses and preferences.

3. Sources of collection

We collect Personal Data directly from you, automatically through your use of the Services, from your institution in the course of provisioning licences, and from publicly available professional or institutional sources where reasonably necessary to verify eligibility for institutional or student pricing.

4. Purposes and legal bases

We process Personal Data to provide, secure, maintain and improve the Services; to administer licences, invoicing and entitlements; to generate provenance reports and replay records at the direction of the Controller; to verify academic eligibility; to communicate service, security and contractual notices; to comply with legal obligations; and to establish, exercise or defend legal claims.

Where the General Data Protection Regulation or an equivalent regime applies, our legal bases are, as applicable, performance of a contract, compliance with a legal obligation, our legitimate interests in operating a secure and reliable service (balanced against your rights and freedoms), and consent where we expressly request it. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Provenance and academic integrity records

The authorship and replay features are designed to support academic integrity. Provenance records are made available only to authorised personnel designated by the licensing institution and to the student to whom the work relates, in accordance with the institution’s configuration and instructions.

Texadera does not independently adjudicate academic misconduct. Provenance indicators are decision-support information and do not constitute a finding of fault; any disciplinary determination remains the sole responsibility of the institution under its own policies and due-process procedures.

6. Disclosure and sharing

We do not sell Personal Data and we do not share it for cross-context behavioural advertising outside the advertising disclosures described in Section 12. We disclose Personal Data only to (a) the licensing institution; (b) vetted sub-processors and service providers (such as hosting, payment, communications, advertising and analytics providers) bound by written confidentiality and data protection obligations; (c) professional advisers; (d) competent authorities where disclosure is required by applicable law, legal process or to protect rights, safety and security; and (e) a successor entity in connection with a merger, acquisition, financing or sale of assets, subject to continued protection consistent with this Policy.

7. International transfers

Personal Data may be processed in jurisdictions other than the one in which it was collected. Where required, we rely on recognised transfer mechanisms such as Standard Contractual Clauses, adequacy determinations or equivalent safeguards, together with supplementary technical and organisational measures proportionate to the risk.

8. Retention

We retain Personal Data only for as long as necessary to fulfil the purposes described in this Policy, to meet contractual commitments to the licensing institution, and to satisfy legal, accounting and reporting requirements. Institutional provenance records are retained in accordance with the retention schedule agreed with the Controller and are deleted or de-identified upon expiry or termination, subject to a reasonable backup-purge period.

9. Security

We maintain a risk-based information security programme comprising administrative, technical and physical safeguards, including encryption in transit, access controls based on least privilege, logging and monitoring, vendor due diligence and incident response procedures. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. In the event of a Personal Data breach, we will notify affected Controllers and, where required, competent authorities without undue delay.

10. Your rights and choices

Subject to applicable law, you may have the right to access, correct, delete, restrict or object to the processing of your Personal Data, to data portability, and to lodge a complaint with a supervisory authority. Residents of certain jurisdictions, including under the California Consumer Privacy Act and India’s Digital Personal Data Protection Act, may hold additional rights such as the right to know, to nominate a representative, and to grievance redressal.

Where we process data on behalf of an institution, requests relating to coursework or provenance records should be directed to that institution in the first instance, and we will reasonably assist the Controller in responding. To exercise rights relating to data we control, contact us using the details below. We may need to verify your identity before acting on a request.

11. Students and minors

The Services are intended for post-secondary learners and institutional users. We do not knowingly collect Personal Data from children below the age of digital consent in their jurisdiction without appropriate institutional or guardian authorisation. If you believe such data has been provided inappropriately, please contact us so that we can take corrective action.

12. Cookies, analytics, and Google AdSense

We use strictly necessary storage technologies to operate the Services and, where permitted, limited analytics to understand aggregate performance. You can manage browser storage and cookies through your device or browser settings; disabling certain technologies may affect functionality.

13. Changes to this Policy

We may update this Policy from time to time to reflect changes in the Services, legal requirements or our practices. Material changes will be notified through the Services or by email to the relevant institutional contact, and the “Effective” date above will be revised. Continued use of the Services after the effective date constitutes acknowledgement of the updated Policy.

14. Contact

For privacy enquiries, data subject requests or to reach our data protection contact, write to hello@texadera.top or info@texadera.top with the subject line “Privacy”. Please include your institution and a description of your request so that we can respond efficiently.