Privacy statement

Controller
Tax ID
Address
Email
Website	https://modelsolid.com

ModelSolid is design automation software for SOLIDWORKS, sold to companies. This statement covers both this website and the personal data the installed software sends to our licence server.

The site is static HTML and CSS served from our own server. It has no cookies, no analytics, no advertising, no tracking pixels and no third-party fonts, scripts or resources. There are no forms: contact happens by email.

• Server logs. Every request is recorded by the web server: IP address, date and time, requested path, response code, bytes served, browser user agent and referrer. Purpose: keeping the service running, security and diagnostics. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Kept for no longer than 30 days, then rotated out.
• Installer downloads. Downloading the trial needs no account and no form; the request appears in the server logs above and nowhere else.
• Language preference. The EN/ES switch stores the key ms-lang in your browser's local storage. It never leaves your device, identifies nobody, and is strictly necessary to serve the page in the language you asked for, so it needs no consent.

If you email us we process your address and whatever you put in the message, in order to answer you and, where applicable, to manage a quote, a trial or a licence. Legal basis: steps taken at your request before entering into a contract, performance of the contract (Art. 6(1)(b) GDPR) and legitimate interest in answering enquiries (Art. 6(1)(f)). We keep the correspondence for as long as the relationship lasts and afterwards for the periods required by commercial and tax law.

ModelSolid runs on the customer's own machines, against their own SOLIDWORKS and their own database. Models, configurations and business data never leave the customer's network. What does leave is licence control: the installation activates against our licence server (licenses.modelsolid.com) and sends a heartbeat every five minutes.

• What it sends: account identifier, a stable machine fingerprint (a hash of machine name, MAC addresses and operating system), the public IP address, the application and OS version, and the timestamps of activation and last heartbeat. Approximate country and city derived from the IP are only recorded if geolocation is enabled, which is off by default.
• What it does not send: model contents, configuration values, documents, credentials or end-user files.
• Legal basis: performance of the licence contract (Art. 6(1)(b) GDPR) and legitimate interest in preventing unlicensed use (Art. 6(1)(f)). This is declared in the EULA; it is not hidden telemetry.
• Retention: while the installation is active. When a licence is revoked the IP address and any geolocation are erased immediately, and the whole record is deleted 90 days later. Usage events, where enabled, are kept for 365 days. These periods are enforced automatically by a daily job, not by hand.

Actions taken by our own operators in the licence panel (issuing, suspending or revoking a licence) are logged with the operator's email address, the action, the target, the IP address and the timestamp. That audit trail concerns our staff, is kept as a security measure under legitimate interest, and is not purged.

We do not sell, rent or share personal data for third-party purposes, and we do no profiling or automated decision-making. The only third parties involved are the providers that keep the service running:

• IONOS — hosting of the website and the licence server. Servers in the European Union.
• Backblaze — off-site backup copies of the licence database, transferred over an encrypted connection. The provider is based in the United States; the transfer is governed by its data processing agreement and the European Commission's standard contractual clauses.

Two integrations exist in the software but are switched off in production and process nothing today: payments through Stripe, and IP geolocation through an external provider. Should either be enabled, this statement will be updated first.

All traffic to this site and to the licence server runs over TLS. The licence panel requires an operator sign-in with a password, locks out repeated failed attempts and audits every action. Access to the databases is restricted to the personnel who operate the service.

You may request access, rectification, erasure, restriction, objection and portability, and withdraw any consent given, by writing to . Please give us enough detail to identify the data — for the installed software the key is the account and the machine, so requests are normally channelled through the account administrator. We answer within one month.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

This site and this product are aimed at companies and professionals. They are not directed at children, and we do not knowingly collect data from them.

Any change to this statement is published on this same page, with a new version date. The version in force is the one shown at the top.