ARZS Tools Privacy Policy

Effective date: 2 November 2026

This Privacy Policy (the "Policy") is issued by ARZS Co., Ltd. (阿爾斯有限公司, Taiwan, Business ID 62120613; "ARZS", "we", "us" or "our") in accordance with the Personal Data Protection Act of the Republic of China (Taiwan) (the "PDPA") and, where applicable, the EU and UK General Data Protection Regulation ("GDPR"). By registering an account, signing in, or using any part of the Service, you acknowledge that you have read, understood and agree to this Policy.

1. Scope and Definitions

1.1 This Policy applies to arzsdesigns.com and its subdomains (including app., auth., nest. and studio.arzsdesigns.com) and to the online pattern-file conversion, nesting and 3D showcase (ARZS Studio) services we provide through them (collectively, the "Service").

1.2 In this Policy:
(a) "User" means any natural person, or representative of a legal entity, who visits or uses the Service, including guests and Members;
(b) "Member" means a User who has registered an account;
(c) "Merchant" means a business that has entered into an ARZS Studio service agreement with us;
(d) "Merchant Customer" means a natural person who provides data through a Merchant's ARZS Studio pages;
(e) "Personal Data" has the meaning given in the PDPA and, where applicable, the GDPR;
(f) "Uploaded Files" means pattern files (including DXF files) and other files uploaded to the Service.

1.3 Third-party websites or services linked from the Service are not governed by this Policy.

2. Purposes of Processing

We collect, process and use Personal Data only for the following purposes:
(a) performance of our contract with you, including providing the Service, account management and credit records;
(b) customer service and account and service notices;
(c) authentication, system operation, information security and abuse prevention;
(d) research to support new file formats, solely as consented to under Section 9; and
(e) retention of accounting and tax records as required by law.

3. Categories of Personal Data

3.1 We collect only the following:
(a) Account Data: email address, display name set by you, sign-in method, Google account identifier (if you sign in with Google), and account creation time;
(b) Usage Data: Uploaded Files, output files, job records (settings, result figures, time and credits used) and the credit ledger;
(c) Technical Data: IP address (stored only as a salted hash) and session identifiers (stored only as a hash or signature).

3.2 If you sign in with Google, we receive only your email address and name (scope limited to openid email profile). We do not receive your Google password, contacts, files or any other Google data.

3.3 We do not collect national identification numbers, dates of birth, telephone numbers, postal addresses or payment card numbers.

4. Retention Period, Location, Recipients and Manner of Use

4.1 Period: as set out in Section 8, unless a longer period is required by law.

4.2 Location: Data is stored and processed on services provided by Cloudflare, Inc. (a United States company). Uploaded Files and output files are stored in the Asia-Pacific region; account, credit and sign-in data are kept in Cloudflare's data services, normally located in the Asia-Pacific data center nearest to first use; conversion compute may run on Cloudflare's global network, and files are deleted upon completion of processing; ARZS Studio Merchant data is currently stored in Eastern North America. We do not restrict data to any specific country or jurisdiction. You consent to the processing of your Personal Data in these locations.

4.3 Recipients: ARZS and the service providers acting on our behalf listed in Section 10; and competent judicial or administrative authorities where required by law.

4.4 Manner: by automated and non-automated means, solely within the purposes set out in Section 2. We will not use Personal Data beyond those purposes except as permitted by Article 20(1) of the PDPA or other applicable law.

5. Our Commitments

5.1 We do not sell, rent or exchange your Personal Data with third parties, nor use it for marketing lists.

5.2 We do not use your Uploaded Files or output files to train any artificial intelligence model, nor provide them to any artificial intelligence service for analysis.

5.3 We do not use your Uploaded Files for any purpose other than providing the Service, except as you separately consent to under Section 9.

5.4 We will not delete a Member's account or saved pattern files on the ground of inactivity.

6. Shared Accounts for ARZS Studio

6.1 Merchant staff may sign in to ARZS Studio using the same account as the Service.

6.2 For Merchant staff we retain the email address, name, Merchant and role, solely for account management, invitations and system notices, and not for marketing.

6.3 Where a Merchant removes a staff member, we will delete that person's email address, or convert it into an irreversible hash, within ninety (90) days; audit logs retain only the account identifier.

6.4 To provide technical support, we may access a Merchant's ARZS Studio administration console with the Merchant's knowledge. Every such access is logged and may be reviewed by the Merchant at any time.

7. Personal Data of Merchant Customers

7.1 Personal Data provided by Merchant Customers through a Merchant's ARZS Studio pages is controlled by that Merchant as the data controller, and is governed by that Merchant's privacy notice. Merchant Customers should direct requests to the Merchant.

7.2 With respect to such data, ARZS acts solely as a processor on the Merchant's behalf (Article 4 of the PDPA; Article 28 of the GDPR), limited to hosting, storage and sending sign-in code emails on the Merchant's behalf (displayed as "<Merchant brand> via ARZS"). We do not use such data for any other purpose or combine it with other Service data.

8. Retention

8.1 IP address hashes: twenty-four (24) hours from creation.

8.2 Sessions: the platform sign-in remains valid for thirty (30) days from last use, up to a maximum of ninety (90) days; each tool's own session lasts no more than thirty (30) days (twenty-four (24) hours for the converter). Sessions end immediately upon sign-out, account deletion or "sign out everywhere".

8.3 Guest uploads: seven (7) days from upload, then deleted automatically; if the guest signs in within that period, the files are transferred to the Member account.

8.4 Member pattern files: retained until deleted by the Member; deletion takes effect immediately.

8.5 Output files: thirty (30) days; previews: seven (7) days. Expired outputs may be regenerated from the job record.

8.6 Account deletion: Members may delete their account at any time. We will delete account data and all files, including backups, within thirty (30) days, save that credit and transaction records required to be kept under the Business Accounting Act or other laws will be retained for the statutory period (five (5) to ten (10) years) in de-identified form.

9. DXF Files That Cannot Be Processed

9.1 Where an Uploaded File cannot be converted, or its CAD software format is not yet supported, the Service may ask whether the Member consents to provide the file to ARZS for research.

9.2 Such provision is limited to signed-in Members who affirmatively tick the consent box. Declining does not affect the Member's use of conversion and does not consume credits.

9.3 We will use such files solely to study and support the relevant file format. They will not be published, disclosed to third parties, used for production or sale, or provided to any artificial intelligence service.

9.4 Such files are retained for no more than ninety (90) days (and deleted within thirty (30) days after support is completed), then deleted automatically. Where the Member additionally ticks "keep as a software test sample", the file is retained until the Member requests its deletion.

9.5 We will notify the Member by email once support for the format is completed. We do not guarantee that support will be provided or commit to any timeframe.

9.6 Members may delete such files at any time on their account page, or request deletion by emailing hello@arzsdesigns.com with the upload ID; we will delete the cloud copy and internal working copies within three (3) business days. If a Member deletes their account, such files will be unlinked from the account and author information within the file will be removed.

10. Security and Processors

10.1 We implement reasonable technical and organisational measures to protect Personal Data, including HTTPS encryption in transit, encryption at rest, non-public storage of files and restricted staff access. Where our staff need to view a User's file (for example, for customer support), we obtain the User's prior consent and keep a record.

10.2 We engage the following processors, who process data only to the extent necessary to provide the Service:
(a) Cloudflare, Inc.: hosting, data storage, conversion compute, Turnstile bot protection, and Email Service for sign-in codes and account notices (sender: no-reply@arzsdesigns.com; no marketing emails);
(b) Google LLC: only where the User chooses to sign in with Google.

10.3 The Service is currently provided free of charge. Before we begin charging, we will amend this Policy to identify our payment processors. We never receive Users' full payment card numbers.

10.4 International transfers: we are established in Taiwan and our processors may process data in other countries, subject to the safeguards described in this Policy.

10.5 In the event of theft, disclosure, alteration or other infringement of Personal Data, we will notify affected Users by appropriate means after investigation, and notify the competent authorities, in accordance with Article 12 of the PDPA and, where applicable, Articles 33 and 34 of the GDPR.

11. Your Rights

11.1 Under Article 3 of the PDPA you may: (a) inquire into or request to review your Personal Data; (b) request a copy; (c) request supplementation or correction; (d) request cessation of collection, processing or use; and (e) request deletion.

11.2 If you are located in the European Economic Area or the United Kingdom, you additionally have the rights to data portability, to object to processing, to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), and to lodge a complaint with your local supervisory authority. Our legal bases are: performance of a contract (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c)), consent (Art. 6(1)(a), Section 9), and legitimate interests in security and abuse prevention (Art. 6(1)(f)).

11.3 You may exercise these rights on your account page or by emailing hello@arzsdesigns.com. After verifying your identity, we will respond within the period prescribed by Article 13 of the PDPA or other applicable law. Where we may lawfully refuse or are required to retain data, we will notify you of the reasons.

11.4 You may choose not to provide Personal Data and use preview features as a guest; however, an email address is required to save files and to use or purchase credits.

12. Cookies and Similar Technologies

12.1 The Service uses only the cookies below, all of which are strictly necessary for its operation or store a preference you have selected. We do not use analytics, advertising or third-party tracking cookies, and therefore do not request separate cookie consent.

12.2 Bot protection (Cloudflare Turnstile) runs only when you upload a file, sign in or submit a form, to distinguish automated programs; it is not used for tracking.

12.3 You may refuse cookies through your browser settings; however, refusing sign-in cookies will prevent you from signing in.

13. Credits

13.1 Newly registered Members receive thirty (30) trial credits.

13.2 Credits (including trial and purchased credits) do not expire. Purchased credits are not redeemable for cash.

13.3 To prevent repeat claims of trial credits, we may use the email address and IP address hash to determine whether Users are the same person.

14. Minors

Users under the age of eighteen (18) may register for and use the Service only after their legal representative has read, understood and consented to this Policy.

15. Amendments

We may amend this Policy. Amendments take effect upon publication on this website. For material changes, we will publish notice on this website and notify Members by email before they take effect. Continued use of the Service after an amendment takes effect constitutes acceptance of the amended Policy.

16. Governing Law and Jurisdiction

This Policy is governed by the laws of the Republic of China (Taiwan). The Taiwan New Taipei District Court shall be the court of first instance for any dispute arising from this Policy, except as otherwise required by mandatory law, including any non-waivable rights you may have under the laws of your country of residence.

17. Contact

ARZS Co., Ltd.
Address: No. 15, Ln. 97, Zhongshan 1st Rd., Luzhou Dist., New Taipei City, Taiwan
Email: hello@arzsdesigns.com