Privacy policy

Deburr Inc. ("Deburr", "we", "us") is a US company that makes first article inspection software at getdeburr.com and app.getdeburr.com. This policy covers both, plus the free AI ballooner.

When your company uses Deburr, your company decides what inspection data goes in and who can see it. We process that data on its behalf. For your own account details and our website, we're responsible for the data.

• Account details: your name, email address and password (stored only as a hash). If you sign in with Google, we receive your name, email address and profile picture from Google. We don't get your Google password or access to anything else in your Google account.
• Organization details: your company name, team members, their roles and invitations.
• Inspection content: drawings, models, attachments, CMM output, readings, comments and reports you or your team upload or create.
• Signature and audit records: when you sign a report we record your name, the signature's meaning, the time, your IP address, your browser, and a hash of the report as signed. Edits and readings are logged with who made them and when.
• Billing details: your plan, subscription status and invoices. Card details go straight to our payment provider and never reach our servers.
• Technical data: server logs (IP address, browser, pages and API calls, errors) that we need to run and secure the service.
• Messages: what you send us by email or through demo requests.

• To provide Deburr: sign you in, store and process your inspection data, generate reports, and send the emails the product needs (invites, notifications, password resets).
• To read drawings and answer copilot questions with AI, as described below.
• To bill you and keep records we're legally required to keep.
• To keep the service secure, prevent abuse and fix problems.
• To reply when you contact us.

We don't sell personal data, and we don't use your drawings or inspection data for advertising.

To read a drawing, Deburr sends the drawing image and its text to an AI model provider. Copilot messages are sent the same way. We use API terms where the provider doesn't train on your data.

We don't use your drawings to build training or test sets without your written permission. Ask us which AI provider your workspace uses and we'll tell you.

Drawings you upload to the free ballooner are stored privately and handled the same way. Email us and we'll delete them.

We use these service providers. Each one gets only what it needs to do its job.

Deburr is based in the United States, and our providers may process data in the US and other countries. We may also disclose data if the law requires it, or to a buyer if Deburr is sold, in which case this policy keeps applying to your data.

The web app keeps your sign-in session and interface preferences (like theme and panel layout) in your browser's local storage. If you arrive through a partner link, we keep the referral code there too so the partner gets credit.

We don't use advertising cookies or third-party tracking on the website or the app.

We keep your data while your account or organization exists. When an organization owner deletes the organization, its records and stored files are permanently removed. Copies in our hosting provider's encrypted backups expire on the provider's backup schedule.

Signed reports and their audit trail are kept for as long as your organization keeps them, since quality records often have to be retained for years. Billing records are kept as long as tax law requires.

You can ask us to show you, correct, export or delete your personal data, or object to how we use it. Email hello@getdeburr.com from the address on your account and we'll respond within 30 days.

If your company's admin controls your account, some requests (like deleting inspection records) need their approval, and we may pass your request to them.

If you live in a US state with a consumer privacy law, such as California, you have these rights under that law too, and we won't treat you differently for using them. We don't sell personal data or share it for targeted advertising.

If you're in the EU or UK, you can also complain to your local data protection authority.

Data is encrypted in transit and at rest, access is checked on every request, and signatures and edits go into a tamper-evident log. The security page has the details.

Deburr is a business tool and isn't meant for anyone under 16. We don't knowingly collect their data.

If we change this policy, we'll update the date at the top. For significant changes we'll email account owners before they take effect.