Privacy notice

Updated October 11, 2026

Who operates this service

1Contour is operated by S&A CONSULTING EAP LLC. Contact sa.consultingaepllc@gmail.com for privacy questions, access, correction, deletion or consent withdrawal requests.

Information we use

We use your verified email to create a customer account and assign account access. Owner and manufacturing partner roles remain restricted. We store sessions, login attempt counts and hashed connection addresses for abuse protection; team access codes are hashed. We store project descriptions, dimensions, uploaded reference images, design chats, generated designs, delivery information you submit, and payment references when checkout is available. We do not receive your full card details.

For guest catalog orders, we collect the email address you enter, your delivery ZIP and access notes, the exact design ordered, and payment status. Stripe collects your shipping address, phone number and card details during Checkout; we receive the shipping address, phone number and order and authorization references, not your full card number. We use the phone number only to coordinate your order and delivery. A private order link lets you review status without creating an account. Keep that link private.

Invitation requests

If you request an invitation, we store your email address, delivery ZIP, object description and submission time in our private Cloudflare database. The studio owner uses these details to review your idea and contact you about the request. You may optionally tell us how you found 1Contour and, with a separate checkbox, share the question you asked an AI assistant. You can also choose to share a ChatGPT question when creating a customer account. These are your own answers; AI assistants do not give us your private prompts. We use the question to improve product information, show it only to the studio owner and remove it after 90 days. Please omit personal details and full chat transcripts. A request does not create an account or subscribe you to a newsletter. We use short-lived, hashed connection-address counters to limit abuse. You may request correction or deletion by emailing the contact above.

Optional analytics and advertising

With analytics consent, we count anonymous page views, product views, quote starts, delivery-estimate outcomes and checkout stages using a random visitor ID, page path and broad traffic source, including a named AI assistant when a referrer or link tag identifies one. No full URL, email, ZIP or design text is included in these page events. With your consent, we also link that broad source to an account creation, project inquiry or order so the owner can compare verified signups and paid orders by source. These optional source links are deleted after 30 days or when the current visitor ID is withdrawn. We cannot see the question you asked an AI assistant unless you separately choose to share it on the inquiry or account-creation form. This voluntary answer does not require analytics consent and is not a record of your AI conversation. If you are signed in, we also record activity types and timestamps linked to your email: page views, concept selection, filters, studio entry, estimate requests, saved briefs and checkout starts. Only the studio owner can view the activity report. We do not record keystrokes, screenshots, design text or complete browsing URLs. Rejecting analytics does not block the service. A separate choice allows Meta and TikTok advertising pixels to load when configured; these providers may collect browser and ad interaction data under their own policies. We do not send a browser purchase event. Cookie settings lets you withdraw consent; withdrawal requests deletion of optional events for your signed-in account and current anonymous visitor ID when connected.

Providers and sharing

The online service uses Cloudflare hosting, database and private artifact storage for accounts, projects, generated files and consented activity. Google Firebase verifies sign-in; Google Cloud runs the isolated CAD compiler. When you request design chat or generation, your design brief, dimensions, relevant chat messages, uploaded reference images and previous CAD source may be sent through OpenRouter to the selected model provider, currently OpenAI for CAD authoring and design chat. Appearance requests include four rendered CAD views, the selected color and your background instructions; older concepts used Black Forest Labs. Generated files are retained in private project storage. A separate development copy runs on the operator’s computer. Stripe handles card and payment details when checkout is available. Sharing a project for review makes its brief and generated files available to Tate at HSH Contractor, our manufacturing and freight partner. We use Meta and TikTok advertising pixels only after separate advertising consent and only after their pixel IDs are configured. They may use received data for ad measurement and targeting.

Retention and choices

Optional anonymous funnel activity is retained for up to 30 days; signed-in activity and voluntary AI questions for up to 90 days. These are pruned daily. Browser preferences expire after 180 days; sessions expire after seven days and team access codes after 24 hours. Other account and project records remain until reviewed for deletion on request or pilot closure, subject to records needed for disputes or applicable legal duties. Expired authentication records are cleaned up during login requests; optional events older than 90 days are removed when analytics is accessed. We honor Global Privacy Control and Do Not Track by disabling optional tracking.

Your requests

Email the contact above to request access, correction or deletion. We may verify your identity before acting. Rights and exceptions depend on applicable law. The service is intended for adults and is not directed to children. We update this notice when practices change.

Access-request notifications

When you request access, your email address, delivery ZIP and object description are included in an email to the studio owner using Brevo and Gmail. We use these details to review and respond to your request. Requesting access does not create an account or subscribe you to marketing emails.