GEARSUITEby Materializa
Sign inOpen GearSuite

PRIVACY / MATERIALIZA

Privacy Policy

This policy explains what personal data GearSuite processes, why it is used, the legal bases under the GDPR, and the choices available to you.
Last updated: 3 September 2026

1. Who is responsible for your data

GearSuite is a product of Materializa, operated from Portugal. Materializa is the controller of personal data processed through this website and the GearSuite application.

For privacy questions, consent withdrawals or data-subject requests, contact geral@materializa.pt.

2. Data we process

  • Account information, such as your name and email address.
  • Contact-form submissions: name, email, subject and message, when you write to us through the site.
  • Basic profile information supplied by Google or Facebook when you choose social sign-in.
  • Cloud projects and the engineering parameters you choose to save.
  • Billing records needed to provide paid plans and STEP credits: Stripe customer and subscription identifiers, plan, period dates and export-credit purchases. Card details are handled by Stripe and are not stored on GearSuite servers.
  • Technical and security logs needed to operate, diagnose and protect the service.
  • Browser storage used for guest sessions, preferences, locally saved projects and cookie choices.
  • If you opt in, aggregated usage data collected by Google Analytics (for example pages visited, approximate location derived from IP, device and browser type).

3. Why we process data and on what legal basis

Under the GDPR we only process personal data where a legal basis applies:

  • Contract (Art. 6(1)(b)): creating and securing your account, providing the design tools, saving cloud projects, delivering exports you request, and processing paid subscriptions or STEP credits. The same basis covers answering a contact-form enquiry you send us.
  • Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing abuse, diagnosing faults and using strictly necessary cookies. You may object to processing based on legitimate interests.
  • Consent (Art. 6(1)(a)): optional analytics cookies and Google Analytics. You can refuse or withdraw this at any time via Cookie settings, without affecting access to GearSuite.
  • Legal obligation (Art. 6(1)(c)): where we must keep or disclose records to comply with law.

4. How we use data

  • To create and secure your account and keep you signed in.
  • To save, reopen and synchronise cloud projects you ask us to store.
  • To provide calculations, CAD exports, paid plans and other GearSuite functionality.
  • To prevent abuse, investigate faults and improve reliability.
  • To answer support, privacy, commercial and account requests, including messages sent through the contact form.
  • If you consent, to understand how the public site and generators are used so we can improve them.

5. Service providers and international transfers

GearSuite uses specialist processors for authentication, database, infrastructure, content delivery, payments and, if you opt in, analytics. These currently include Supabase, Stripe (for subscriptions and STEP credits) and the hosting and network providers used by Materializa. If you choose Google or Facebook sign-in, that provider processes the login according to its own privacy policy.

If Google Analytics is enabled with your consent, Google Ireland Limited (and, where applicable, Google LLC in the United States) processes usage data. Transfers outside the EEA rely on appropriate safeguards such as Standard Contractual Clauses.

We do not sell personal data. We share it only where needed to provide the service, protect users, comply with law or follow your instructions.

6. Cookies

Strictly necessary cookies and similar storage keep you signed in, remember guest mode and store your cookie preference. Optional analytics cookies are used only after you opt in. Details, retention and how to change your choice are in the Cookie Policy.

7. Retention and security

We keep account and cloud-project data while your account is active or as needed to provide the service. Contact-form messages are kept as correspondence for as long as needed to handle the enquiry and any follow-up. Some records may be retained for a limited period for backups, security, dispute handling or legal obligations. Analytics data, if collected, is retained according to the Google Analytics property settings. We use access controls, encrypted transport and infrastructure safeguards, but no online service can guarantee absolute security.

8. Your rights

You may request access, correction, deletion, restriction, portability, or object to certain processing. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out. Contact geral@materializa.pt from the email associated with your account. You may lodge a complaint with the Portuguese data-protection authority, the CNPD (www.cnpd.pt).

9. Automated decisions

GearSuite does not make solely automated decisions that produce legal or similarly significant effects about you.

10. Changes to this policy

We may update this policy as GearSuite develops. Material changes will be communicated through the service or another appropriate channel, and the date above will be updated.