Legal

Terms of Service

Effective 19 October 2026 · Version 2026-10-19

1. Agreement

These terms are an agreement between you and Mechpro ("Mechpro", "we", "us"). By creating an account or using Mechpro you accept them and our Privacy Policy. You must be at least 18 years old and able to enter into a contract. If you use Mechpro for a company, you confirm that you may accept these terms on its behalf.

2. What Mechpro does

You send a written brief, optionally with pictures and reference dimensions. We return 3D CAD models, engineering drawings and a technical report in the formats you ask for, where we can produce them. Some proprietary formats cannot be produced; when that happens we tell you and supply an open format, such as STEP, instead. We use automated design tools, which may look up reference information on the public web and run first-pass sizing calculations, and the details of how a design is produced may change over time.

3. Your account

• Give accurate details and keep them up to date.
• Keep your password private. You are responsible for what happens under your account. Signing in on a new browser also needs a code we email you.
• Tell us straight away at hello@mechpro.ai if you think someone else has used it.

4. Your content and who owns the designs

• Your inputs (briefs, pictures, sketches, dimensions) remain yours.
• Your outputs: when we deliver a design to you, we assign to you all rights we hold in the delivered models, drawings and reports. Standard features and standard parts, such as gear teeth, bolts and bearings, are not exclusive to anyone, and other customers may receive similar results for similar briefs.
• You allow us to store and process your inputs and outputs to provide the service. If you agree, we may also use them to improve our design models. You can withdraw that agreement at any time in your account.
• We treat your inputs and outputs as your confidential information. Only you can see them in your account; no other customer can. Mechpro staff open a request only when they need to work on it, and every opening is shown to you under the request, with the reason. Anyone who works for Mechpro must keep what they see confidential. We share your inputs and outputs only with the service providers listed in our Privacy Policy, or when the law requires it.
• You can erase any request at any time with Erase this request. It is deleted straight away, and from our encrypted backups within about 30 days.
• You confirm that you have the right to share your inputs with us, and that they do not break anyone else's rights or any confidentiality duty you owe.

5. Acceptable use

Do not use Mechpro to request or produce:

• weapons, weapon parts or accessories, or items designed to harm people;
• items that are illegal to make or own where you are, or designed to get around safety or legal controls;
• designs that copy someone else's protected product without permission.

Do not attack, overload, scrape or test the security of the service without our written permission, and do not upload malware. We may refuse or stop any request, and suspend accounts that break these rules.

6. Export-controlled designs

Mechpro is not built to handle export-controlled technical data. Do not send designs, drawings, dimensions or other data that are covered by export controls, such as:

• the US International Traffic in Arms Regulations (ITAR);
• the US Export Administration Regulations (EAR), for anything classified above EAR99;
• India's SCOMET list (Special Chemicals, Organisms, Materials, Equipment and Technologies), or any other country's export controls.

Your requests are stored and processed on commercial cloud servers in the United States and by AI providers and web search services, and may be seen by people who are not US persons. Sending controlled data to us could therefore break export law. Each time you send a request or ask for a change, you confirm that it is not export-controlled. You are responsible for classifying your own designs. If we learn that a request is export-controlled, we will stop work on it and delete it, and we may suspend the account.

7. Engineering responsibility

Designs are produced with automated tools and checked against the requirements you state and, where our tools looked up reference information or ran sizing calculations, against those too. They are not certified and may contain errors. Any calculations in the report are first-pass sizing calculations made with automated tools from published formulas and the references listed in the report; they are not a structural analysis, a certified calculation or a substitute for one. Tolerances and fits on the drawing and in the report are proposals worked out from published standards, not a manufacturing specification until an engineer confirms them. A result marked as passing a check means that a feature with that value exists; it does not mean that the design is fit for your purpose. Before you manufacture or use any design, a qualified engineer must review and verify it, including every reference, calculation and tolerance in the report, especially for anything that carries loads or pressure, or is used in vehicles, aircraft, medical devices, lifting equipment or other safety-critical applications. You are responsible for that review and for how a design is used.

8. Prices, timing and changes

• If a request carries a fee, we tell you the price and ask for your agreement before we start. We never charge you without it.
• We deliver as soon as we can. Delivery times are estimates, not guarantees.
• You can ask for changes to a delivered design from your account. Each change is kept as a new revision.
• To keep the service fair and running, we limit how many requests one account, and Mechpro as a whole, takes in a day. Changes count as requests, and so does an answer to a question our design engine asks you about a request. If you reach a limit, the website tells you and you can send again the next day, or write to us.

9. Ending your account

You can delete your account at any time from the account menu. We may suspend or close an account that breaks these terms, and we will tell you why unless the law prevents us. We may also change or stop parts of the service; if we stop the service entirely, we will give you reasonable notice so that you can download your files.

10. Disclaimer

To the extent the law allows, Mechpro is provided "as is", without warranties of any kind, including fitness for a particular purpose, and without a promise that it will always be available or error-free.

11. Limitation of liability

To the extent the law allows, we are not liable for indirect or consequential losses, such as lost profits, lost data or production costs arising from a design. Our total liability for any claim is limited to the greater of the fees you paid us for the request concerned and INR 5,000. Nothing in these terms limits liability that cannot be limited by law.

12. Indemnity

You will compensate Mechpro for claims by others arising from content you sent us that you had no right to share, from export-controlled data you sent us, or from how you used a design.

13. Changes to these terms

We may update these terms. We will post the new version here with a new date and, for significant changes, email you before they apply. If you keep using Mechpro after that, the new terms apply.

14. Law and disputes

These terms are governed by the laws of India. Disputes are subject to the exclusive jurisdiction of the courts in India.

15. Contact

Questions about these terms: hello@mechpro.ai.

Legal

Privacy Policy

Effective 19 October 2026 · Version 2026-10-19

1. Who we are

Mechpro ("Mechpro", "we", "us") turns a short written brief into 3D CAD models, engineering drawings and technical reports. For the personal data described here, Mechpro is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). You can reach us at hello@mechpro.ai. If you live outside India, for example in the United States, this policy also explains how we handle your data, and section 9 describes your rights.

2. What we collect

• Account details: your name, email address and, if you give it, your company. Your password is stored as a salted scrypt hash, which cannot be turned back into the password. We also record when you accepted these terms and whether you agreed to help improve our models. Your account is created only after you open the confirmation link we email you; a sign-up that is not confirmed within 24 hours is deleted.
• Your requests: the project name, the description, any pictures or sketches, reference dimensions, the file formats you ask for, the notes, references and calculations our design engine gathers for it, and the models, drawings, reports and files we produce for you.
• Emails: the emails we send you (email confirmation, request confirmations, a notice that your files are ready, a notice that our design engine needs an answer from you, welcome, sign-in codes, password reset and security notices such as a password change, account deletion) and any messages you send us. They say that something happened; they never contain your brief, pictures, dimensions, project name, file names or files. One-time links and sign-in codes in these emails are not kept in our records.
• Security records: the time of each sign-up, sign-in, sign-out, failed sign-in, sign-in code and password reset, with the IP address and the browser or device type (user agent), and the browsers you have proved with a sign-in code. Our server also keeps a log of the requests it receives: the time, IP address, the page or action (without its query string), the result and the browser type. When someone at Mechpro opens one of your requests, we record when and why, and show it to you (see section 4). To keep our daily limits on new requests, we also note the time of each request an account sends, with a coded form of the account's email address (a keyed hash: it cannot be turned back into the address, only matched against it), and nothing else about the request.
• Two cookies, both essential: mp_session keeps you signed in; it expires after 30 days or when you sign out. mp_device remembers a browser that has proved itself with a code from your email, so it does not need a new code each time; it lasts 180 days and is sent only to the sign-in part of the site. We do not use advertising or analytics cookies, and the website keeps nothing about you in your browser's storage.

We do not ask for payment card details, government ID numbers or other sensitive information. Please do not put them in a brief.

3. How we use it

• To create your account, sign you in and keep your requests in one place.
• To read your brief, to look up reference information for it where the details are not enough (section 4), and to produce your design, drawings, report and files and deliver them to you.
• To email you about your requests and your account. We do not send marketing emails unless you ask for them.
• To keep Mechpro secure and affordable: to limit repeated sign-in attempts and the number of requests sent in a day, and to detect, investigate and fix misuse or unauthorised access.
• To improve our design models, only if you agreed at sign-up or later in your account. You can withdraw this consent at any time; from then on we stop using your requests for this purpose.
• To meet our obligations under Indian law.

We process your data on the basis of the consent you give when you create an account and send a request, and for the legitimate uses the DPDP Act allows, such as complying with the law.

4. Who can see your requests

• You. Your brief, pictures, dimensions and files open only from your account, and they are never kept in your browser's cache, so the next person at a shared computer cannot find them there.
• No other customer, ever.
• Mechpro staff, only when they need to: to model your request by hand, because our design engine needed help with it, because you asked us for help, or for a legal or safety check such as export controls. Our admin area keeps every brief sealed: it never lists or searches what you wrote, and a member of staff has to open one request and choose one of those reasons. Each opening (with its reason), each picture viewed and each file downloaded is recorded and shown to you under the request, in Who has seen this request, for as long as the request exists. The record says it was Mechpro staff, not which person: our admin area has one sign-in for the whole team. Anyone who works for Mechpro must keep what they see confidential. Our admin area is the only way we work with your requests; the people who run our servers could technically reach the stored data without it, and are bound by the same confidentiality.
• Our design engine reads your brief and pictures to produce your design. It is not told your name, email address or company. It uses the AI providers described in section 5. It may also look up reference information for your design on the public web, through our AI provider (section 5). If your brief lacks a detail that decides the design, the engine stops and asks you for it under the request before designing anything; the question is written from your brief, so it is shown only to you, like the brief, and our email says only that an answer is needed.
• Nobody through email: our emails never contain your brief or files. They only tell you that something is ready, or that our design engine needs an answer from you, and you sign in to see it.
• Nobody with your password alone: signing in on a browser your account has not used before also needs a code we email you. You can sign out every other browser from the account menu.

5. Who we share it with

We do not sell or rent personal data. We share it only with service providers that help us run Mechpro, and only what each one needs:

• Amazon Web Services (AWS), which runs our servers and stores the website, the database, your files and our encrypted backups in the United States.
• Cloudflare, which carries traffic between your browser and our servers and blocks attacks. It handles your requests while they travel, including uploads, but does not keep their content.
• Email delivery: our emails are sent through Google Workspace (Google's Gmail service for businesses) from hello@mechpro.ai. They carry your name and email address, never your brief or files.
• AI model and computing providers, which process the content of your request (description, pictures and dimensions, without your name or email address) to generate the design. We use only providers whose terms do not let them train their own models on your requests and that delete them within 30 days (longer only if a request breaks their usage rules), and we ask them to process requests in the United States. To check standard dimensions, catalogue data and formulas for your design, our design engine may ask the AI provider to search the public web and read public web pages. The search terms are written by the AI from the technical content of your request (part names, standards, sizes, materials, loads). They never contain your name, email address or company as held on your account, nor your project name, because the AI is never given those; email addresses, phone numbers and links to private files (such as file-sharing links) written in a brief are removed before any search, by recognising their usual forms, and the AI is told not to search for anything else that could identify you. Your pictures are not sent with these searches. The pages it reads are public pages, whose operators see an ordinary page request from the provider, not from you. The AI provider runs these searches itself or through a third-party search service, under that service's own terms, which we cannot control; we do not know how long such a service keeps search terms. The search terms are not linked to you.

The website itself loads nothing from other companies: its fonts, scripts and 3D viewer all come from our own server.

We may also disclose data when the law requires it, for example to a court or a government authority, or if Mechpro is reorganised or sold, in which case we will tell you first.

6. Where your data is processed

Our servers, your files and our backups are in the United States, and our AI providers process requests there. Web searches made for your design (section 5) may be answered by servers outside the United States. If you are in India, this means your data is transferred to and stored in the United States. We transfer data only as the DPDP Act permits, and not to any country the Government of India has restricted. Cloudflare may carry your traffic through the data centre nearest to you.

7. How long we keep it

• Your account, requests, pictures and files: for as long as your account is open, unless you erase a request or ask us to delete something sooner.
• A request you erase (Erase this request, under the request): deleted straight away, with its revisions, pictures, files and the notes and references gathered for it, and our design engine is told to delete its copy. Copies in our encrypted backups disappear within about 30 days. If we ever restore a backup over our live data, anything you erased after that backup was made is erased again automatically.
• The record of each time a request was opened or read: as long as the request exists.
• Remembered browsers: 180 days, or until you change your password or sign out other devices.
• Security records (the sign-in history and the log of emails sent): one year, as the Digital Personal Data Protection Rules, 2025 require. Then they are erased automatically.
• The server's request log: 180 days, as India's CERT-In directions require. Then it is erased automatically.
• The times of the requests you sent (for the daily limits), with the coded form of your email address: two days, even if you erase the requests or delete your account, so that neither can be used to get round the limits. Then they are erased automatically.
• When you delete your account: we delete your account, requests, pictures and files straight away (if we restored a backup in the last 7 days, the copy we kept aside during that restore goes within those 7 days). The security records (times, IP addresses and devices) stay for up to one year, without your email address and without the content of your emails or requests, and are then erased automatically; the times of the requests you sent stay for up to two days with the coded form of your email address, not the address itself. Encrypted backup copies are deleted automatically after about 30 days.

8. How we protect it

• Data travels over encrypted HTTPS connections. Our servers accept no direct connections from the internet: all traffic arrives through an encrypted Cloudflare tunnel.
• Server disks are encrypted. Backups are encrypted before they leave the server, with a key that is not kept on it, and cannot be deleted or changed for 30 days.
• Passwords are hashed with scrypt and a unique salt. Sign-in tokens are stored only as hashes.
• Your requests and files can only be opened from your own account. Our admin area is limited to authorised Mechpro staff, needs both a password and a code from an authenticator app, and keeps briefs sealed as described in section 4. There is no way to download the whole database from it.
• Repeated failed sign-ins are slowed down, and access is logged so we can investigate problems.

No system is perfectly secure. If a breach affects your data, we will tell you, and the authorities where the law requires it, such as CERT-In and the Data Protection Board of India, or regulators in US states.

9. Your rights

Under the DPDP Act you can:

• Get a copy of your data and a summary of how we use it: choose Download my data in the account menu, or email us.
• Correct or update your data: email us.
• Erase your data: one request at a time with Erase this request, or everything with Delete account in the account menu, or email us.
• See who has opened your requests: under each request, and in Download my data.
• Withdraw consent: turn off model improvement in the account menu at any time. To withdraw consent for everything, delete your account. Withdrawing does not affect what we did before.
• Nominate someone to use these rights for you if you die or become unable to: email us.
• Raise a grievance with our Grievance Officer (below). We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

Wherever you live, including the United States, you can use the same tools to see, download, correct or delete your data, and we answer requests sent by email within 30 days. We do not sell your personal data, and we do not share it for targeted advertising.

10. Children

Mechpro is for people aged 18 and over. We do not knowingly collect data from children. If we learn that we have, we delete it.

11. Changes to this policy

When we change this policy we will post the new version here with a new date. If a change is significant, we will email you before it applies.

12. Contact and Grievance Officer

Grievance Officer, Mechpro
Email: hello@mechpro.ai