Last updated: 10 July 2026
This policy explains what personal data CutPath Pro (“we”, “us”) collects when you use the service at cutpathpro.com, why we collect it, how long we keep it, and the rights you have under UK GDPR and the Data Protection Act 2018. It's written to be readable - where the law needs a specific term we use it, but the intent is that you finish the page knowing what actually happens.
CutPath Pro is operated by Larxis Ltd, a UK company. For any privacy question, email [email protected]. We're the data controller for the personal data described below.
When you register we store your email address and a hashed password. Passwords are never stored in plaintext - we can't recover them, only reset them. We record account timestamps (created, updated, last login) so we can help you if something goes wrong.
Legal basis: performance of a contract (Article 6(1)(b) UK GDPR) - we need this to give you an account.
When you upload a PNG or JPG for tracing, the file is saved on our server so we can render the preview, generate exports and let you re-download later from your account's My Files page. We also store the cut-job record (layer geometry, offset, page size, machine choice). Artwork stays private to you - no other user can view or download it.
Legal basis: performance of a contract.
When you buy credits or subscribe, our payment processor Stripe handles your card details. We never see or store your full card number, CVC or bank account. What we store on our servers is: the Stripe customer ID, the Stripe subscription ID (if any), the amount and currency of each purchase, and which pack or plan it was for. This is what powers the ledger you see on your dashboard.
Legal basis: performance of a contract, and legal obligation (tax and accounting records).
If you email us or submit the contact form, we store your name, email and message so we can reply and follow up.
Legal basis: legitimate interest (running a support desk).
We email you when relevant to the service - welcome mail, payment receipts, subscription renewals and cancellations, credit expiry warnings and low-balance warnings. These are part of the service and not marketing. If we ever add a marketing list you would need to opt in first.
We use a small number of first-party cookies to make the site work. There are no analytics cookies, no third-party advertising cookies and no cross-site trackers.
Our hosting server logs incoming requests (IP address, user agent, requested URL, HTTP status) for security and debugging. Logs are rotated regularly and kept for no longer than 30 days unless we need them to investigate abuse.
Legal basis: legitimate interest (site security, fraud prevention).
We don't sell your data, ever. The third parties that touch it are the services we can't reasonably run without:
We may also disclose data if we're legally required to (court order, statutory request), or if we have a good-faith belief it's necessary to protect our rights, our users' safety, or comply with regulation.
Our servers and database are hosted in the United Kingdom. Stripe processes some data internationally under standard contractual clauses.
You can, at any time:
To exercise any of these, email [email protected]. We aim to reply within a working week and always within the statutory 30 days.
All traffic is served over HTTPS. Passwords are hashed with the ASP.NET Identity default (PBKDF2 with SHA-256). Access to the production database is limited to the app pool identity and named administrators. We use Stripe for payments so card data never touches our servers.
CutPath Pro isn't aimed at children under 13. If you believe we've collected data from a child, contact us and we'll delete it.
If we make a material change, we'll update the “Last updated” date and, where the change is significant (new third-party processor, new data category), let signed-in users know. Continued use of the service after a change counts as acceptance.
For privacy questions: [email protected].
For everything else: the contact form.
This document is a policy notice, not legal advice. If you need a version tailored to a specific jurisdiction or use case, please consult a solicitor.