Privacy Policy

PartOptix is operated by Neat Labs LLC, which is the controller of the personal data described here.

30 N Gould St Ste RSheridan, WY 82801United States

Privacy contact: privacy@partoptix.com

Account information: email address, and the name and company you optionally provide. Passwords are stored as salted hashes by our authentication provider; if you sign in with Google we receive your email, name and avatar URL.

Uploaded BOM and project data: manufacturer part numbers, manufacturers, quantities, reference designators, descriptions, project names, target production quantities and any notes you add.

Support correspondence: the content of emails you send to our role addresses, so we can answer you and keep a record of the issue.

Security logs: authentication and access-related events used to protect accounts and investigate abuse.

Device and browser information: where applicable, technical request metadata such as browser type and IP-derived information used for security and diagnostics.

Usage events: which metered actions ran (component analyses, SmartReplace queries, live price refreshes) with timestamps, so plan allowances can be enforced.

Service diagnostics: error and performance information used to keep the service reliable. Logs are structured and redacted so credentials and tokens are not written to log output.

To produce the analysis you requested, PartOptix sends technically necessary component identifiers — principally manufacturer part numbers and search queries — to supplier and component data APIs such as Mouser and DigiKey. Your BOM file, quantities, reference designators, project names, notes and company identity are not sent to those providers.

Private: your BOM composition, quantities, reference designators, project names, notes and private reports. These are stored against your account and protected by row-level database policies scoped to your user id. They are not intentionally exposed to unrelated PartOptix customers.

Reusable generic intelligence: manufacturer part numbers, public component specifications and datasheet information, categories, normalized package and value data, permitted supplier offers, generic technical relationships, generalized compatibility relationships and aggregate or de-identified operational information. This layer is designed so no customer can infer another customer's product BOM from it.

PartOptix does not use customers' private BOMs or private project data to train public or general-purpose AI models. SmartReplace matching is rule-based and operates on structured component data.

If third-party AI services are introduced in future, this Privacy Policy will be updated before private BOM data is transmitted to them in any way inconsistent with this commitment. Product analytics do not transmit proprietary BOM contents to third-party analytics services.

Paid subscriptions and one-time purchases are processed and sold through Paddle, our Merchant of Record. Paddle collects and processes the payment details required to complete your transaction and issue invoices, under its own terms and privacy notice. PartOptix receives customer, subscription and transaction identifiers so entitlements can be applied, and does not directly store or process your complete payment-card details.

• to provide PartOptix and the analyses you request;
• to analyze BOMs and generate reports, alternatives and cost information;
• to secure the service and protect accounts;
• to manage accounts and authentication;
• to provide support;
• to handle billing and entitlements;
• to improve reliability and performance;
• to prevent fraud, quota evasion and other abuse.

Where applicable law requires a legal basis, we rely on performance of our contract with you for service delivery and billing, our legitimate interests for security, abuse prevention and product reliability, and legal obligation where retention or disclosure is required.

Service providers: managed database, authentication and hosting infrastructure acting as subprocessors on our behalf.

Paddle: in its Merchant of Record role for purchases, invoices and taxes.

Supplier and data APIs: technically necessary component identifiers only, as described above.

Legal and security disclosures: where required by law or legal process, or where necessary to investigate security incidents, fraud or abuse. We may also share data where you authorise it.

We do not sell your personal data or your BOM contents.

PartOptix currently uses only cookies and local browser storage necessary to operate the service — principally your authentication session and interface preferences. We do not currently deploy third-party advertising or cross-site tracking cookies.

Product analytics, where used, record event names and counts rather than BOM contents. If we later introduce non-essential analytics or tracking, we will disclose it here and put a consent mechanism in place where applicable law requires one.

• Your projects, BOMs and reports are retained while your account is open so historical analyses stay available to you.
• We retain personal and customer information only as long as reasonably necessary to provide the service, keep it secure, prevent fraud and abuse, handle billing and accounting, resolve disputes, and meet legal or regulatory obligations.
• When you delete a BOM, project or your account, the relevant user-owned records are removed from our active application systems according to the implemented deletion workflow.
• Residual copies may temporarily remain in backups, security logs, fraud-prevention records and billing or legal records where operationally or legally necessary. We do not promise immediate deletion from every backup.
• Billing records (invoices, transaction and subscription history) are retained where required for tax and accounting purposes, and are also held by Paddle in its Merchant of Record role.
• Shared component intelligence — normalized part identities, public specifications and distributor offers — contains no customer-identifying data and is not deleted when an account is closed.

Shared, non-customer-specific component intelligence is not deleted merely because one user deletes a BOM.

Our infrastructure providers and Paddle may process data in countries other than your own. Where required, such transfers rely on the transfer mechanisms offered by the relevant provider, such as standard contractual clauses. See the data processing page.

Depending on where you live, you may have rights to access, correct, export, delete or restrict processing of your personal data, to object to certain processing, and to complain to your data protection authority. We honour the rights that apply to you rather than claiming a single universal standard.

To exercise a right, contact privacy@partoptix.com from your account email address. Account deletion is also available in the application.

See our security and data handling page for the specific, factual measures in place. We make no security certification claims we have not obtained.

We may update this policy as the product or legal requirements change. The effective date and version above will be updated, and material changes will be communicated where appropriate.