This policy explains how Newmatik GmbH handles personal data on enginehall.com and in EngineHall.
1. Controller
Newmatik GmbH Am Markt 1 55619 Hennweiler, Germany Email: software@newmatik.com Phone: +49 6752 16998-0
2. The local checker
The enginehall command and the VS Code extension run on your computer. They do not send a schematic, a CubeMX file, firmware, or a review to us. This website does not receive those files from the local tools.
3. What this website processes today
When you open the site, the host processes the connection data needed to deliver the page: IP address, user agent, the requested URL, and the time of the request. We use that data to operate and secure the site. Legal basis: Art. 6 (1) (f) GDPR. Our interest is a reliable public site.
The site does not use a separate analytics product, and it does not set its own cookies. The language is the address you open, / or /de. When you sign in, the browser keeps your session token and the workspace you last selected in its local storage. Without them you would be signed out on every page. They stay on your device, and signing out or clearing site data removes them. Legal basis: Art. 6 (1) (b) GDPR and § 25 (2) no. 2 TDDDG, because the storage is strictly necessary for the service you asked for.
4. Access requests
The access form opens a message in your mail program to software@newmatik.com. We receive what you put in that email: your name, company, email address, the plan you ask about, and your message. We keep it while we answer and as a record of the inquiry. Legal basis: Art. 6 (1) (b) GDPR where the message is a step toward a contract, and Art. 6 (1) (f) GDPR for the correspondence record.
5. Hosting
The site is hosted by Cloudflare, Inc., which processes connection data as our processor. The data processing addendum is published at https://www.cloudflare.com/cloudflare-customer-dpa/
6. A review on this website
A review on this website runs in your browser. The page loads a Python runtime and the enginehall package from this website, so the same engine runs there. No third-party service is involved in a review. The schematic, the .ioc, and the firmware are not sent to us unless you save the review, as described in section 7. The alternate-function check needs the MCU database installed with STM32CubeMX, so a browser review reports that check as skipped.
7. Accounts, saved projects, and payment
An account stores your email and display name in Supabase in the European Union (Frankfurt). On Team, Business, or Enterprise, saving a review stores the report and the design files it was run on, in a database and a private bucket in the same region, until you delete the project or the account. The report quotes design content such as file names, net names, pins, and firmware lines. Members of the workspace can read it. The free plan does not store reviews. Pro and Team subscriptions are billed by Stripe; Enterprise terms are agreed in writing. Stripe processes subscription payment details. At checkout, Stripe also collects the billing address and, if entered, the VAT ID, to calculate VAT and show it on the invoice. We store the customer identifier, the plan, and the subscription status for Stripe subscriptions. We do not store a full card number. Legal basis: Art. 6 (1) (b) GDPR, and for the VAT on the invoice Art. 6 (1) (c) GDPR.
Account emails, such as address confirmation and password reset, are sent through Resend (Plus Five Five, Inc.) as our processor. Resend receives the recipient address and the message. The data processing addendum is published at https://resend.com/legal/dpa. Legal basis: Art. 6 (1) (b) GDPR.
On Team and Enterprise, a workspace owner can invite a colleague by email address. We store that address with the workspace until the invitation is accepted, withdrawn, or the workspace is deleted. We do not send an email to the invited person; the owner tells them, and they accept from their own account after confirming that address. Members of a workspace see each other's display name and email address. Legal basis: Art. 6 (1) (b) GDPR toward the workspace owner, and Art. 6 (1) (f) GDPR toward the invited person, our interest being to let a customer grant access to colleagues.
8. How long we keep personal data
Connection logs follow the host's retention period. Access requests are kept while the exchange runs and then for up to three years as a business record. Accounts and saved projects are kept until you delete them. Deletion cancels subscriptions right away and removes the stored files and the account in the background, normally within an hour. Invoices are kept for the statutory period. Stripe keeps the customer record, with the email address and invoices, for the statutory retention period for accounting records.
9. Your rights
You can ask for access, correction, deletion, restriction, and a copy of your personal data, and you can object to processing that is based on legitimate interest. Where we rely on consent, you can withdraw it. Write to software@newmatik.com.
You can also lodge a complaint with the supervisory authority for Rhineland-Palatinate: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz Hintere Bleiche 34 55116 Mainz, Germany https://www.datenschutz.rlp.de
10. Error monitoring
The site reports errors and performance traces to Sentry, operated for us in the EU (de.sentry.io). A report contains the error, the page address, and a stack trace. When the browser blocks a resource on a page, it reports the page address and the blocked address. It does not contain the contents of a schematic, a .ioc, or firmware. Legal basis: Art. 6 (1) (f) GDPR, our interest in fixing failures.
11. Changes
The date above is the date of this text. When the site starts processing personal data in a way this page does not describe, this page is updated in the same release.