Privacy policy
This policy explains what personal information we collect on arviewer.philiprivard.com, why, how long we keep it and what your rights are. It covers the free converter, temporary views, YSD Pro accounts and the share pages viewed by our subscribers’ clients. Core principle: we collect the minimum needed, we never sell information and we use no advertising cookies.
- Person in charge of personal information
- What we collect and why
- Consent
- Cookies
- Service providers and transfers outside Quebec
- Security
- Retention
- Your rights
- Confidentiality incidents
- Minors
- Changes
1. Person in charge of personal information
Philip Rivard, owner of the business (Yellow Sprocket Design), is the person in charge of the protection of personal information.
Email: info@philiprivard.com
Send any question, access request or complaint to this address.
2. What we collect and why
| Information | Why |
|---|---|
| Free converter: no file | Conversion runs in your browser; your STEP file is never sent to us. |
| Temporary view: the GLB file you choose to upload and its name | Display it on your headset or phone with a 6-digit code. Uploaded only with your explicit consent. |
| YSD Pro account: name, email, password (hashed, never readable), language, billing province | Create and secure your account, contact you about the Service, compute applicable taxes. |
| Payment: PayPal subscription ID, status, payment dates and amounts | Manage the subscription, issue your receipts and meet our tax obligations. Your card data stays with PayPal. |
| Your models: GLB files, names, projects, thumbnails, share links | Provide the library and sharing with your clients. |
| Quote request: name, email, company, project description | Reply to your request for design or modeling services. No other use. |
| Share link views: date, display type (3D, AR or VR), duration | Show the subscriber that their client opened the model. No visitor name or IP address is recorded. |
| Analytics and security: one-way fingerprint of the IP address (keyed hash), usage events (e.g. “conversion succeeded”) | Measure traffic in aggregate and limit abuse (mass uploads). The IP address itself is not kept in our analytics. |
We do no profiling, no targeted advertising and no decisions based exclusively on automated processing.
3. Consent
We use your information only for the purposes above. We ask for explicit consent before any file upload (checkbox) and when you create an account (acceptance of the terms and this policy). You may withdraw consent at any time by deleting your models or asking us to close your account; this may end the Service.
4. Cookies
We only use cookies that are necessary for the site to work, with no advertising or third-party tracking cookies:
| Cookie | Purpose | Duration |
|---|---|---|
ysd_lang | Remember your language (FR/EN) | 1 year |
ysd_pro | Keep your YSD Pro session open (signed, useless if altered) | 30 days |
Your browser may also store some converter preferences locally; they are never sent to us.
5. Service providers and transfers outside Quebec
The Service relies on the following providers. Some information is therefore hosted or processed outside Quebec, including in the United States:
| Provider | Role |
|---|---|
| Amazon Web Services (S3, Virginia region, United States) | Storage of models and thumbnails |
| GoDaddy | Website and database hosting |
| PayPal | Payments and subscriptions |
| Our email provider | Sending emails (welcome, receipts, password reset) |
| jsDelivr, unpkg, Google Fonts | Loading 3D display libraries and fonts; these services receive your technical IP address when the page loads. |
These providers only receive what their service requires. Information hosted outside Quebec may be subject to the laws of those jurisdictions.
6. Security
- All traffic uses HTTPS.
- Passwords are stored as hashes (bcrypt): nobody, including us, can read them.
- Models are kept in private storage and are only reachable through signed, time-limited links.
- Share links can be password-protected, given an expiry date and revoked at any time.
- Administrative access is restricted to the person in charge named above.
7. Retention
| Information | Kept for |
|---|---|
| Temporary view (GLB file) | About 24 h, at most 48 h |
| Sign-up started but not paid | 48 h |
| Password reset link | 1 h |
| YSD Pro account and models | As long as the account exists. After the account is closed (or a prolonged freeze, with notice), models are deleted and backup copies disappear within the following 30 days. |
| Invoices and receipts | 6 years, as required by tax laws |
| Quote requests | 3 years after the last exchange, or upon deletion request |
| Usage analytics (IP fingerprints) | 180 days; anti-abuse counters: 24 h |
8. Your rights
At any time you may ask us for:
- access to the information we hold about you;
- correction of inaccurate or incomplete information;
- deletion of your information and models (except invoices, kept as required by law);
- portability: a copy of your information in a structured, commonly used technological format;
- withdrawal of consent.
Write to info@philiprivard.com. We reply within 30 days. You can also change your password, delete your models and revoke your links yourself from your account. If you are not satisfied with our answer, you may file a complaint with Quebec’s Commission d’accès à l’information or, for matters under federal law, the Office of the Privacy Commissioner of Canada.
9. Confidentiality incidents
If a confidentiality incident presents a risk of serious injury, we will promptly notify the people concerned and the Commission d’accès à l’information, and take the necessary steps to reduce the harm. We keep a register of incidents.
10. Minors
The Service is intended for professionals. It is not directed at people under 14 and we do not knowingly collect their information.
11. Changes
We may update this policy. The update date appears at the top of the page; for material changes, subscribers are notified by email.