Privacy Policy

This policy applies to visitors of our marketing website (including the blog), people who contact us, and users of the Zedcut application (account holders, team members, and public quote/invoice recipients interacting with a link we host).

If you are a fabrication shop using Zedcut, you remain responsible for the personal information of your own clients that you enter into the product. In that case, we generally act as a service provider / processor on your instructions; you remain the organization responsible for that client data.

Because Zedcut serves businesses and individuals in Quebec and elsewhere in Canada, we design our practices to meet Quebec Law 25 and PIPEDA expectations for commercial personal information.

If we offer services to individuals in the European Economic Area (EEA) or monitor the online behaviour of people located in the EEA (for example through analytics on our marketing site), the EU GDPR may also apply to that processing — regardless of where Zedcut is established. Law 25 or PIPEDA compliance does not automatically equal GDPR compliance; where GDPR applies, we apply the stricter applicable requirements for that processing.

Under Quebec Law 25, we designate a person responsible for the protection of personal information (Privacy Officer / Responsable de la protection des renseignements personnels).

Unless a different person is named here later, this role is held by Zedcut’s highest-ranking officer. To contact the Privacy Officer about this policy, access or deletion requests, or privacy concerns, email contact@zedcut.com or use our contact page. We aim to respond within 30 days where the law requires it, and typically within 1–2 business days for general inquiries.

Depending on how you interact with Zedcut, we may collect:

We use personal information only for purposes that are relevant to operating Zedcut, including:

Where GDPR applies, we rely on one or more of the following bases: performance of a contract (providing the service you requested); legitimate interests (securing and improving the service, in a way that does not override your rights); consent (for example non-essential cookies or optional marketing where required); and legal obligation.

Where Quebec Law 25 or PIPEDA applies, we collect, use, and disclose personal information for the purposes described in this policy, with clear information and consent where required — including explicit consent for sensitive information and for technologies that identify, locate, or profile individuals when those rules apply.

When your organization stores client personal information in Zedcut (for quotes, invoices, scheduling, or design work), you determine the purposes of that processing. You must have a lawful basis to collect and use that information and provide any notices your clients are entitled to receive.

We process that information on your behalf only to provide Zedcut features you use (for example generating a PDF, emailing a quote, or showing a public approval page). We do not sell your clients’ personal information and we do not use it for our own marketing.

We use trusted third parties to operate Zedcut. They may process personal information only under our instructions and for the services they provide to us, including:

Personal information may be stored or processed on servers located outside Quebec or outside Canada, depending on our service providers. Before transferring personal information outside Quebec when Law 25 requires it, we assess whether the information will receive adequate protection at the destination (including contractual and technical safeguards).

Where GDPR applies to EEA personal data, international transfers rely on applicable mechanisms such as an adequacy decision (including Canada’s partial adequacy for certain PIPEDA-covered commercial activities where it applies) and/or Standard Contractual Clauses or equivalent safeguards with our providers.

We keep personal information only as long as needed for the purposes described in this policy, including:

Account and workspace data while your organization is active, then for a reasonable period after cancellation to allow export, resolve disputes, or meet legal/accounting requirements unless you request earlier deletion where allowed.

Support and contact messages for a period needed to handle your request and improve support quality.

Server logs and security records for a limited period consistent with security and troubleshooting needs.

Billing records for the period required by tax and commercial law.

We use safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, authentication, and organization-scoped isolation of workspace data. No method of transmission or storage is completely secure; if we become aware of a breach that poses a risk of serious injury (Law 25) or a relevant risk to individuals’ rights (GDPR), we will notify regulators and affected individuals as required by applicable law — including aiming for GDPR’s 72-hour authority notification window when GDPR applies.

Subject to applicable law (including Law 25, PIPEDA, and GDPR where it applies), you may have the right to:

Organization admins can manage many workspace settings, team members, and records directly in Zedcut. For privacy requests about your account or personal information we control, contact our Privacy Officer at contact@zedcut.com or via the contact page. We may need to verify your identity before fulfilling a request. We respond within the timelines required by law (generally within 30 days under Law 25 for applicable requests).

We use essential cookies and similar technologies required to operate the website and application (for example security, session, and load-balancing).

Our marketing site may use Google Analytics (measurement ID configured in our site settings) to understand traffic and improve content. Analytics and other non-essential tracking that profiles or monitors visitors are not required to use Zedcut. Where Law 25, GDPR, or ePrivacy-style rules require consent for such technologies, we will only enable them in a manner consistent with those rules (including clear information and the ability to refuse non-essential cookies where required).

You can also control cookies through your browser settings. Blocking essential cookies may affect sign-in or site functionality.

We aim to collect only the personal information needed for the purposes described above and to configure product features with privacy in mind. Public quote and invoice links are limited to the information needed for that interaction. We do not sell personal information.

Zedcut is a business service and is not directed to children. We do not knowingly collect personal information from children under 14. If you believe we have collected such information, contact our Privacy Officer so we can delete it.

Zedcut includes tools such as slab nesting optimization for fabrication workflows. These tools help shops layout pieces and prepare quotes; they are not used to make solely automated decisions that produce legal or similarly significant effects about individuals in the sense typically addressed by GDPR or Law 25 profiling rules. If that changes, we will update this policy and provide any required notices.

We may update this policy to reflect product, legal, or operational changes. We will post the revised version on this page with an updated date. If changes are material, we may provide additional notice (for example by email or in-app message) when appropriate.

Privacy Officer / Responsable de la protection des renseignements personnels — Zedcut

Email: contact@zedcut.com

Contact form: available on our website contact page

This policy is provided for transparency and does not replace advice from a qualified lawyer for your specific situation.