1. Roles
For data you provide (account info, uploads, prompts), Cadbull is the Data Controller. Sub-processors (cloud hosting, AI inference, payment processing) act as Data Processors under written agreements that meet GDPR Article 28 requirements.
Legal · EU/UK
GDPR Policy
If you reside in the European Union, the United Kingdom, or another GDPR-equivalent jurisdiction, this page summarises your rights and how we honour them.
2. Lawful bases for processing
Contract performance (running the Service for you), legitimate interests (security, abuse prevention, product improvement), legal obligation (tax, accounting), and consent (marketing emails — you can unsubscribe anytime).
3. Your rights
Under GDPR you have the right to:
- Access — get a copy of all personal data we hold about you.
- Rectification — correct inaccurate data.
- Erasure ('right to be forgotten') — delete your account and personal data.
- Restriction — pause processing while a dispute is being resolved.
- Portability — export your data in a machine-readable format (JSON).
- Object — opt out of legitimate-interest processing such as analytics.
- Withdraw consent at any time without affecting prior lawful processing.
4. How to exercise your rights
Most rights can be exercised in-app: Settings → Data → Export / Delete. For other requests email dpo@cadbull.com from the email associated with your account. We respond within one calendar month.
5. International data transfers
When data is transferred outside the EEA/UK (e.g. to AI inference providers in the US), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, plus supplementary technical measures (encryption in transit and at rest).
6. Sub-processors
Current sub-processors include our managed cloud database provider (EU/US regions), object storage provider, payment processor, and Google Gemini API for AI inference. The current full list is available on request.
7. Data breach notification
In the unlikely event of a breach affecting your personal data, we notify the relevant supervisory authority within 72 hours and affected users without undue delay.
8. Supervisory authority
You have the right to lodge a complaint with your local data protection authority (e.g. ICO in the UK, CNIL in France, DPC in Ireland). We hope you'll contact us first so we can resolve any issue directly.
9. DPO contact
Data Protection Officer — dpo@cadbull.com. Postal address available on request.
Ready to try AI Cadbull Studio?
Paid plans from $9.99 include 50–1500 AI Credits. every AI tool included.