Privacy

Privacy Policy

Last updated: July 18, 2026

1. Data Controller

Controller under the GDPR
Jonas Hayk
Annastraße 17
48703 Stadtlohn, Germany
Email
info@kidge-ki-bridge.com

2. Overview

Kidge is an add-in for Autodesk Inventor that integrates an AI assistant directly into the CAD software, along with the associated website kidge-ki-bridge.com / kidge-ki-bridge.de. This policy covers both.

3. Data Processing by the Kidge Software

3.1 Chat Content and AI Providers

When you interact with the Kidge chat, your inputs (text, any attached images) and the technical data from your Inventor document needed to complete the task (e.g. iProperties, geometry data, screenshots) are sent to the AI provider you selected in the settings. You choose which provider that is — currently 34 models across 16 providers are available:

Anthropic (Claude) – via API key or a connected Claude Code CLI session
Based in the USA – transfer to a third country; not certified under the EU-US Data Privacy Framework, safeguarded via Standard Contractual Clauses (SCCs). The Claude Code connection doesn't require a separate API key (your existing Claude subscription is enough), but it doesn't change the data transfer to Anthropic.
OpenAI – via API key or a connected Codex CLI session
Based in the USA – certified under the EU-US Data Privacy Framework. The Codex connection doesn't require a separate API key (your existing ChatGPT plan is enough), but it doesn't change the data transfer to OpenAI.
Google (Gemini)
Based in the USA – certified under the EU-US Data Privacy Framework
Other providers (Groq, Mistral, DeepSeek, xAI, Perplexity, Azure OpenAI, OpenRouter, Cerebras, Together.ai, and others)
mostly based in the USA – transfer to a third country depending on the specific provider, whose own privacy policy applies in addition
Local models (Ollama, LM Studio)
your own computer – no data is transferred to third parties, processing happens entirely locally

For the cloud providers you choose, their own privacy policy applies in addition; we have no influence over their data processing. The legal basis is your consent (Art. 6(1)(a) GDPR), given via the consent dialog on first launch, as well as contract performance (Art. 6(1)(b) GDPR).

If you don't want data transferred to third countries, use only a local model (Ollama/LM Studio) — Kidge works entirely without external data transfer this way. Claude Code and Codex don't require a separate API key, but they still transfer your data to Anthropic or OpenAI in the USA.

3.2 Beta Diagnostic Data

During the free beta phase, Kidge — if enabled in settings ("automatically collect beta data", on by default) — continuously collects: chat messages, frequency of tools used, error messages (including technical details). This data is stored locally on your computer (%APPDATA%\InventorKI\) and additionally transmitted to an Azure Function we operate (Microsoft Azure, Germany West Central data center region) — this transmission has been active since July 21, 2026. You can disable the collection in settings at any time; data already transmitted is not affected. Legal basis: consent (Art. 6(1)(a) GDPR), revocable at any time in settings.

Since July 22, 2026, these submissions are additionally tagged server-side with an IP address and timestamp so we can better attribute reports. Purely anonymous tool-gap reports are unaffected and continue to be stored without this attribution.

3.3 Data Stored Locally (stays on your computer)

API keys (DPAPI-encrypted, tied to your Windows user account), chat history (can be disabled), diagnostic/debug logs.

3.4 Voluntary Feedback

Text submitted via the feedback feature is sent to us via the same Azure Function as the beta diagnostic data (see 3.2) to address your request, optionally together with an email address you provide if you'd like a reply. As with the beta diagnostic data, this submission has been tagged server-side with an IP address and timestamp since July 22, 2026. Legal basis: consent (Art. 6(1)(a) GDPR).

4. Data Processing on the Website kidge-ki-bridge.com / kidge-ki-bridge.de

4.1 Hosting and Server Logs

This website is hosted by Netlify, Inc. (USA). When you visit, Netlify automatically processes technical access data (including IP address, date/time, page requested, browser type) in server logs to technically enable delivery of the page. The legal basis is our legitimate interest in secure and functional operation (Art. 6(1)(f) GDPR). No cookies are set and no analytics or tracking tools are used.

4.2 Google Fonts

This site loads the "Inter" typeface from Google's servers (fonts.googleapis.com / fonts.gstatic.com, Google Ireland Limited resp. Google LLC, USA). This transmits your IP address to Google. The legal basis is our legitimate interest in a consistent, performant display (Art. 6(1)(f) GDPR).

4.3 Contact Form

The contact form at /contact/ is processed via Netlify Forms. The data you enter there (name, email address, category, message) is forwarded to us to handle your request and answered by email. Legal basis: consent by submitting the form (Art. 6(1)(a) GDPR) resp. taking steps toward a contract (Art. 6(1)(b) GDPR).

4.4 Local Storage (Color Scheme)

Your choice between light and dark color scheme is stored in your browser's localStorage, which is technically necessary to remember it on your next visit. No data is transmitted to us or third parties (Art. 6(1)(f) GDPR resp. § 25(2) No. 2 TTDSG).

5. Your Rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21), withdrawal of consent (Art. 7(3)) — contact: info@kidge-ki-bridge.com. Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

6. Automated Decision-Making

No automated decision-making within the meaning of Art. 22 GDPR takes place that would have a legal effect on you or similarly significantly affect you.

7. Changes to This Policy

We will update this policy as soon as our data processing changes (e.g. new AI providers, changes to our hosting infrastructure).

This policy was drafted to the best of our knowledge but does not constitute legal advice.