Privacy Policy

About this policy

This Privacy Policy applies to the TSteel 3D Software website, download forms, purchases, licensing and use of TSteel, technical support, and communications with interested parties, Users and customers.

For purposes of Brazilian Law No. 13,709/2018 — the Brazilian General Data Protection Law (“LGPD”) — TSteel 3D Software acts as the controller of personal data processed for these activities. Contracted service providers may act as processors or independent controllers, depending on the services they perform.

Personal data we process

Depending on how You interact with us, we may process the following categories of data:

Registration and contact

First name, last name, email address, telephone number, company and information voluntarily provided in forms or communications.

Purchase and billing

Individual or company name, Brazilian taxpayer identification number (CPF or CNPJ), address, telephone number, email address, items, quantities, amounts, payment method and status, and information required for tax documentation.

Licensing

Email address linked to the License, License Keys, edition, validity and technical records required for activation, deactivation, validation and usage control.

Support

Messages, support history and files voluntarily submitted for diagnosis, such as models, drawings, images or documents.

Communications

Records of sending, delivery, interaction and opt-out from notices, content and marketing communications.

Technical data

IP address, date and time, browser, device, requested pages, and error, security and system operation logs when generated by the infrastructure used.

We do not intentionally request sensitive personal data. If You voluntarily submit information of this nature, it will be processed only where necessary for the relevant purpose and in accordance with applicable law.

Purposes and legal bases

We use personal data to:

• receive requests and send the TSteel download link;
• record the history of Trial requests and use;
• create, activate, validate, deactivate and administer Licenses;
• process orders, payments, Brazilian tax invoices and delivery of License Keys;
• provide technical support, answer questions and handle sales inquiries;
• send operational notices, news, content, offers and other marketing communications;
• prevent fraud, abuse, improper sharing and security incidents;
• comply with legal, regulatory and tax obligations and orders from public authorities; and
• exercise rights in administrative, judicial or arbitration proceedings.

Depending on the activity, processing may be based on steps taken before entering into a contract and performance of a contract, compliance with a legal or regulatory obligation, the regular exercise of rights, legitimate interests, fraud prevention and security, or consent where appropriate.

Trial request and usage records

Keeping a record of who requested or used the Trial is relevant to administering TSteel’s licensing model. TSteel 3D Software may change the eligibility, renewal or usage rules for this edition in the future and must preserve a reliable history in order to apply those rules.

For this reason, the minimum record required to identify a prior Trial request or use — particularly the email address and corresponding information in the licensing system — may be retained indefinitely, based on the legitimate interests of administering licensing, preventing misuse and preserving history.

This retention does not mean that all data originally provided will necessarily be kept for the same period. TSteel 3D Software will limit the permanent record to information relevant to identifying Trial history and may periodically review whether it remains necessary.

Payments and financial data

Payments will be processed in the Pagar.me environment. The payment gateway may collect registration data, documents, addresses and financial information required for the transaction in accordance with its own terms and policies.

TSteel 3D Software will receive the registration and transaction data required to identify the purchaser, record the order, issue the Brazilian tax invoice, deliver the Licenses and monitor payment status.

TSteel 3D Software does not store complete card details. Information such as the full card number, security code and other financial credentials is processed by the payment environment.

Pagar.me may use its own fraud prevention and transaction analysis mechanisms. Requests concerning decisions made exclusively by the gateway may require that provider’s participation.

Software licensing and validation

To provide and protect Licenses, we process data required to control Licenses and their use. This includes activation, deactivation and periodic validation records, edition, validity, installation identification and technical information about the device or connection where required.

This data is used to enable purchased features, permit a change of computer, verify validity, prevent concurrent or unauthorized use, maintain security, diagnose faults and provide support.

Communications and marketing

Data provided through forms and during Your relationship with TSteel 3D Software may be used to send notices about downloads, Licenses, support, updates, training, news, content, events, offers and other marketing communications relating to TSteel.

These communications may be sent directly or through contracted specialist tools. Every marketing communication will provide an opt-out method. The data subject may also request that communications stop through the channel stated in this Policy.

Opting out of marketing does not prevent messages strictly required for order fulfilment, License operation, security, support or compliance with legal obligations.

Technical support and customer files

Files sent by email, WhatsApp or another support channel will be used exclusively to understand and resolve the technical support request. These materials will be discarded when support is completed, unless temporary retention is required to complete a review relating to the same case.

Customer models, drawings, images, documents or project information may be used for publicity, training, case studies or promotional materials only with the customer’s prior, specific authorization.

Cookies, metrics and browsing data

The website uses strictly necessary storage to record visitors’ privacy preferences. With permission, it may also use Google Analytics 4 and Google Ads technologies to understand website usage, measure actions such as Trial requests, downloads, contacts and purchases, evaluate campaigns and improve the experience.

Optional categories remain disabled until the visitor makes a choice. Visitors may accept all, reject optional technologies, or separately authorize analytics and advertising. The choice can be changed at any time through Cookie preferences in the footer.

These technologies may process online identifiers, IP address, browser and device information, pages visited, traffic source and interactions with the website. We do not send personal data entered in forms, such as name, email address or telephone number, to measurement tools. Google may process data in other countries under its own policies and safeguards.

The hosting infrastructure may also generate essential technical logs such as IP address, date and time, requested pages, browser, and error or security information. These logs are used to deliver the website, maintain its operation, diagnose problems and prevent abuse.

Who we share data with

We may share personal data, to the extent necessary, with:

• Pagar.me and other parties involved in processing payments and preventing payment fraud;
• hosting, storage, email, CRM, marketing, licensing, support and security providers;
• accounting and tax providers and providers responsible for issuing Brazilian tax invoices;
• WhatsApp and other communication channels selected by the data subject;
• professional advisers, auditors and legal counsel subject to confidentiality obligations;
• public authorities, regulators or third parties where required by law, a valid order or the need to exercise rights; and
• third parties involved in a corporate reorganization, acquisition or transfer of assets, subject to applicable safeguards.

Links to YouTube, Google Docs, social networks and other external websites lead to environments controlled by third parties. Data collected in those environments is governed by the policies of the respective providers.

International data transfers

Some technology, communications, hosting or content providers may store or process data outside Brazil. Where applicable, we will seek to use providers that adopt compatible safeguards and mechanisms permitted by Brazilian law.

Retention and deletion

Retention periods vary according to the purpose, nature of the data and applicable obligations:

• the minimum record relating to a Trial request or use may be retained indefinitely, as explained in this Policy;
• License and customer data may be retained during the relationship and for the period required for history, support, security and the exercise of rights;
• order, payment and tax document data will be retained for the legally and regulatorily required periods;
• data used for marketing communications may be retained while a legitimate purpose exists, until the data subject opts out or makes an applicable request, without prejudice to other legal bases;
• files received for support will be discarded after support is completed; and
• technical logs will be retained for the period required for infrastructure security, diagnosis and operation.

When processing ends, data will be deleted, anonymized or retained only where authorized by the LGPD.

How we protect data

We adopt reasonable technical and administrative measures to protect personal data against unauthorized access, loss, destruction, alteration, disclosure or improper processing. These measures may include access controls, authentication, security logs, updates, backups and careful provider selection.

No environment is completely immune to risk. If a relevant incident occurs, we will take the containment, investigation and notification measures required by law and the competent authorities.

Data subject rights

Under the LGPD, data subjects may request, where applicable:

• confirmation that processing exists and access to the data;
• correction of incomplete, inaccurate or outdated data;
• information about data sharing;
• anonymization, blocking or deletion of unnecessary or excessive data or data processed unlawfully;
• data portability, in accordance with applicable regulations;
• deletion of data processed with consent, except where retention is permitted by law;
• withdrawal of consent and information about the consequences;
• objection to processing based on another legal basis where the LGPD has not been complied with; and
• review of decisions made solely through automated processing that affect their interests, where applicable.

To protect the data subject, we may request information required to confirm identity. Some requests may be denied or fulfilled only in part where required by law, necessary to preserve rights or prevent fraud, or otherwise authorized. In such cases, we will provide the applicable reason.

Children and adolescents

TSteel is intended for professionals and businesses and was not designed for children or adolescents. We do not intentionally collect personal data from minors. If we identify improper collection, we will take appropriate measures to delete the data or regularize the processing.

Changes to this policy

This Policy may be updated to reflect legal, technical, commercial or operational changes. The effective version date will be shown at the beginning of the page. Material changes may be communicated through available channels or by a new notice on the website.

Contact and privacy requests

To exercise Your rights, opt out of communications or ask questions about personal data processing, contact: