Last updated: 15 June 2026
CADBOX is a browser-based 3D/CAD viewer that lets you open models and share them as a link. We keep data collection minimal and we never sell your data. This policy explains what we collect, why, and the choices you have.
CADBOX ("we", "us") operates the website at cadbox.app. For any privacy question or request, contact hello@subjectxyz.com.
CADBOX runs almost entirely in your browser. When you open a CAD file just to view it, that file is processed locally on your device and is not uploaded to us. Data leaves your device only in the specific cases below.
a. Models and annotations you choose to share. When you click Share, the model file plus any notes, drawings, and exploded-view positions you added are uploaded to our storage provider so the recipient can open them from a link. Anyone with the link can view that content, so treat share links as you would a shared document. Do not share models containing trade secrets or sensitive information unless you intend recipients to access them.
b. Your email address. If you enter your email to unlock additional sharing, or include it with feedback, we store it so we can manage access and send you occasional product updates about CADBOX. You can unsubscribe at any time.
c. Feedback you submit. If you use the Feedback feature, we store your rating, message, optional email, and basic technical context (the model name if one is open, and your browser's user-agent string) to help us fix issues and improve the product.
d. Local browser storage. CADBOX uses your browser's localStorage to remember things on your device — for example your share count, whether you've unlocked unlimited sharing, your display preferences, and unsaved notes. This data stays in your browser and is not transmitted to us. We do not use advertising or tracking cookies.
We do not collect names, payment information, precise location, or any special-category personal data.
| Purpose | Data | Basis (GDPR) |
|---|---|---|
| Generating and serving share links | Shared models & annotations | Performance of a service you requested |
| Managing sharing access | Email, share count | Legitimate interests / your consent |
| Product updates & announcements | Consent (withdrawable anytime) | |
| Improving CADBOX | Feedback & technical context | Legitimate interests |
We rely on a small number of vendors to run CADBOX. They process data only to provide their service to us:
These providers may process data on servers outside your country, including the United States. Where required, such transfers rely on appropriate safeguards (e.g. Standard Contractual Clauses).
Depending on where you live (e.g. under the EU/UK GDPR or California's CCPA/CPRA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. We do not sell or "share" personal information for cross-context behavioral advertising. To exercise any right, email hello@subjectxyz.com and we'll respond within the timeframe required by law.
We use reputable providers and transport encryption (HTTPS) to protect data in transit. No method of transmission or storage is perfectly secure, but we take reasonable measures to safeguard the limited data we hold.
CADBOX is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy as CADBOX evolves. We'll revise the "Last updated" date above and, for material changes, provide a more prominent notice.
Questions or requests: hello@subjectxyz.com.