Privacy statement
Version 3 · last updated: 3 October 2026 · Nederlands
A translation. The Dutch text (Privacyverklaring) is the one that applies; where the two differ, the Dutch text prevails.
Cutready is a brand name of Maakfabriek de Laat BV, Broekkant 41, 6021 CS Budel, the Netherlands, Chamber of Commerce (KVK) 99065363 ("we"). This statement says which personal data we process when you visit our website or use Cutready, why, for how long, and what your rights are. Questions: info@maakfabriek.nl, +31 6 14428821.
1. Two roles
We are the controller of the data of our own customers and their users: the account, the invoices, the support and the website. That is what this statement is about.
We are a processor of the data a workshop puts into Cutready about its own customers - names and addresses in projects and quotes. The workshop is responsible for that; the arrangements are in our data processing agreement. Are you a customer of a workshop that uses Cutready? Then please contact that workshop first.
2. Which data, what for, and on what basis
| Data | What for | Legal basis |
|---|---|---|
| Name, e-mail address, language, role, password (hashed, cannot be recovered), date of last sign-in | Your account, signing in, e-mails about your account | Performance of the contract |
| Company details: company name, address, Chamber of Commerce number, VAT number, IBAN, logo and letterhead details | Invoices, and the letterhead of the quotes you make yourself | Performance of the contract; legal obligation (accounting) |
| Subscription and payments: plan, invoices, Mollie payment references (no card or account numbers) | Payment and accounting | Performance of the contract; legal obligation |
| Support questions: name, e-mail address, your question, the conversation with the assistant, the design and a screenshot you send with it | Answering your question | Performance of the contract |
| Designs and projects, and what you ask the AI assistant | Providing the service; letting the assistant answer | Performance of the contract |
| Technical data: IP address, time, requests to the server; a log of changes to your account and of staff who looked at a design with a support question | Security, preventing misuse, finding faults | Legitimate interest (a secure service) |
| How you use Cutready: when you are signed in and for how long (per part: the app, the designer, the manual), and what you search for in Cutready with how many results it had | Seeing how Cutready is used, and adding what people look for and cannot find | Legitimate interest (a better service) |
| Questions the AI assistant could not answer: the question and its language, without your name or company | Improving the assistant and the manual | Legitimate interest (a better service) |
| Signing up for an account: name, e-mail address, company name | Handling your sign-up and getting in touch | Request to enter into a contract |
| Visiting the website: which pages, how you found us, shortened IP address, browser and device (Google Analytics) | Improving the website | Legitimate interest |
We do not sell data and do not use it for advertising. We take no decisions about you based solely on automated processing.
3. Cookies and storage in your browser
Cutready itself uses only what it needs to work: a session cookie to keep you signed in, and storage in your browser (localStorage) for the design you are working on, your language and conversations with the assistant.
To see how it is used, Cutready tells our own server once a minute that it is open in front of you, and what you searched for and how many results that had. That places no cookie, goes to no other party, is not Google Analytics, and only Cutready staff see it.
On this website (cutready.eu) we use Google Analytics to see how many people visit it, which pages they read and
how they found us. Google Analytics places cookies (_ga and _ga_*) and sends your use of
the website, with a shortened IP address and details of your browser and device, to Google. We use it only to
improve the website: not for advertising, and we do not combine it with your account. You can block it with your
browser's settings or an ad blocker; the website works just the same. Cutready itself - the app you sign in to -
has no Google Analytics.
Apart from Google Analytics on the website, the website and Cutready load no fonts, scripts or other parts from third parties: everything comes from our own server.
4. Who we share data with
We use these parties. With each we have arrangements about protecting your data.
| Party | What for | Where |
|---|---|---|
| Hostinger | The server Cutready, the database and the backups run on | European Union |
| Anthropic | The AI assistant: your question, sketch and design go there for an answer. This happens with your own workshop's API key, or - for a demo on a free voucher - with ours. | United States (the European Commission's standard contractual clauses) |
| RunPod | Professional renders: the design is rendered into pictures there. It goes without the names of customers, order numbers or the project name. | Data centres in the European Union |
| Mollie | Payments | The Netherlands |
| Brevo | Sending e-mails (confirmation, password, notifications) | France (EU) |
| Odoo, on a server of our own that we manage | Our helpdesk: support questions | European Union |
| Google (Google Ireland Ltd.) | Google Analytics: visitor statistics of the website cutready.eu | European Union and the United States (the EU-US Data Privacy Framework) |
Beyond that we share data only where the law requires it.
5. How long we keep data
- Account and project data: as long as your account exists, and 30 days after that so you can export it.
- Invoices and the data they need: 7 years (legal retention period).
- Support questions: 2 years after the question is closed.
- Technical logs: 90 days; the change log as long as the account exists.
- How you use Cutready (sessions, searches) and questions the assistant could not answer: 90 days.
- Backups: 14 days; after that they are deleted automatically.
6. Security
Connections to Cutready are encrypted (HTTPS). Passwords are stored only as a hash (scrypt). A workshop's AI key is stored encrypted (AES-256-GCM), with a key that is not in the database. Every workshop sees only its own data, and users have a role (view, edit, manage). When one of our staff opens a design with a support question, that is logged. Only our management has administrator access to the server, with an SSH key and not a password. We make daily backups.
7. Your rights
You can ask us for access to, correction, deletion or transfer of your data, and you can object to a processing or have it restricted. Send your request to info@maakfabriek.nl; we answer within a month. If you disagree with us, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Changes
We update this statement when our processing changes. The date at the top says which version applies; for an important change we let our customers know in advance.