Skip to content
MKCad

Privacy

What data is collected, why, how long it is kept, and your rights.

Last updated 2 October 2026

Controller

The controller of your personal data is Michał Kostrzewa, Stawowa 10, 55-080 Mokronos Dolny, Poland, VAT ID PL8961640176, trading as MKCad. For any privacy question, write to contact@mkcad.eu.

What is collected and why

  • Order data — name, email, billing address, company name and VAT ID. Needed to perform the contract and to meet tax obligations.
  • Licence data — the email you ordered with, the Machine ID you send, and what the plugin transmits when it periodically verifies its licence. Needed to issue, verify and support your licence key.
  • Enquiry and contact form data — name, email, and what you wrote. Used only to answer you.
  • Course launch list — name and email, if you ask to be told when a course opens. Used for that one message only.
  • Analytics — aggregate, cookie-free usage statistics via Plausible. No individual profiles are built.

Legal bases

Performance of a contract for orders and licence keys. Legal obligation for invoicing and accounting records. Legitimate interest for answering enquiries and for aggregate analytics. Consent for the course launch list.

Who else processes your data

  • Stripe — processes payments for plugin orders, through the payment link sent by email.
  • Vercel — website hosting.
  • Resend — sends the emails generated by the forms on this site.
  • Google Workspace — the mailbox where enquiries and orders are received.
  • Licensing server — the provider hosting the service the plugins contact to verify their licence.
  • Kajabi — course platform: hosting, enrolment and course payments.
  • Plausible — privacy-friendly analytics.
  • InFakt — invoicing and accounting records.

How long data is kept

Invoicing records are kept for the period required by Polish tax law. Licence records are kept for as long as the licence is valid, since the licence is perpetual. Enquiries are kept for 24 months and then deleted. Launch-list addresses are deleted once the launch email has been sent.

Your rights

You can request access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to contact@mkcad.eu. You also have the right to lodge a complaint with the Polish data protection authority (UODO).

Transfers outside the EEA

List which of the processors above transfer data outside the EEA and on what safeguard — usually Standard Contractual Clauses.

Draft. The marked parts of this document are still being finalised.