Legal centre
On this page
Every legal document for the Tractrix website, Tractrix Cloud and the Tractrix desktop software, in one place. The documents use the same defined terms and cross-refer to each other; each carries a version number and an effective date.
Documents
Privacy
Privacy
Privacy notice
What personal data we process, why, for how long, who receives it and your rights, with supplements for 19 regions.
Privacy
Cookie notice
What the website and Tractrix Cloud store in your browser, and how consent works where you are.
Versioned on its page
Privacy · US
Your privacy choices
We do not sell or share personal data. Global Privacy Control and US opt-out rights.
Versioned on its page
Privacy
Privacy requests
How to access, export, correct or delete your data; verification, response times, appeals and a request form.
Privacy · Cloud
Sub-processors
Providers that help run Tractrix Cloud, where they process data, and how to get change notices.
Terms and licences
Cloud
Cloud Terms of Service
The subscription agreement for Tractrix Cloud: plans, customer data, confidentiality, liability, switching and exit.
Cloud
Data Processing Addendum
Processor terms for customer content under GDPR Art. 28, UK, Swiss, US, Brazilian and South African law, with SCCs.
Cloud
Acceptable Use Policy
What you may not do with the service, including rules for security-sensitive airport data.
Desktop
Desktop software licence
GPL-2.0-or-later for Tractrix for QGIS, AutoCAD and Revit and the engine; source offer and notices.
Open source
Licences and notices
Product licences, every third-party component and dataset, and licence compatibility.
Website
Website terms of use
The rules for using tractrix.io, its documentation and downloads.
Engineering, security and company
Engineering
Engineering disclaimer
Results are planning aids: model limits, estimated geometry, indicative jet blast and your responsibilities.
Security
Security and disclosure
How the products are secured, and how to report a vulnerability under our safe-harbour policy.
Accessibility
Accessibility statement
WCAG 2.2 AA target, known limitations such as the plan-view canvas, and how to give feedback.
Brand
Trademark policy
How to refer to Tractrix and OpenAirside, rules for forks, and third-party marks.
Company
Legal notice
Company information (Impressum) and regulatory disclosures.
Which documents apply to you
| If you… | These apply |
|---|---|
| browse tractrix.io | Website terms, Privacy notice, Cookie notice |
| use Tractrix for QGIS, the engine, or the CAD add-ins with the local engine | Desktop software licence (GPL-2.0-or-later), Licences, Engineering disclaimer. No personal data reaches us |
| have a Tractrix Cloud account, or use the CAD add-ins in cloud mode | Cloud Terms, Acceptable Use Policy, Privacy notice, Engineering disclaimer |
| own or administer an organisation in Tractrix Cloud | All of the above, plus the DPA and Sub-processors |
| test our security | Vulnerability disclosure policy |
| want to exercise a privacy right | Privacy requests |
| distribute or fork the software | Desktop software licence, Trademark policy |
Defined terms used across the documents
- Service, Tractrix Cloud
- The hosted web application, API and cloud engine, as defined in the Cloud Terms.
- Customer, Organisation, User, Admin
- The contracting organisation, its workspace, the people it authorises, and those with the admin or owner role.
- Customer Data, Outputs
- Everything the Customer submits (drawings, projects, run requests) and the results generated from it. Customer Data is processed under the DPA.
- Account data
- Personal data for which Tractrix is controller (account, security, billing), described in the Privacy notice.
- Software, desktop products
- Tractrix for QGIS, AutoCAD and Revit and the OpenAirside engine, licensed under GPL-2.0-or-later.
- Planning aid
- The status of all results, explained in the Engineering disclaimer.
Order of precedence for Tractrix Cloud: Order Form, then DPA (for personal data), then Cloud Terms, then Acceptable Use Policy and Service Level Agreement, then documentation. Nothing in any document restricts rights granted by the GPL or another open-source licence.
Change log
| Version | Date | Documents | Change |
|---|---|---|---|
| 1.0-draft | 30 September 2026 | All documents on this page | Complete suite drafted for counsel review: global privacy notice with regional supplements; Cloud Terms; DPA with Annexes; sub-processors; Acceptable Use Policy; security and disclosure policy with security.txt; accessibility statement; legal notice; engineering disclaimer; privacy requests; trademark policy; desktop licence; licences and notices; website terms (now separate from the Cloud Terms). |
| 0.1-draft | September 2026 | Privacy, Terms, Licences | First short drafts describing the preview. |
When a document changes materially, its version number increases and Tractrix Cloud users are asked to accept or acknowledge the new version where required. Earlier versions are available on request and in the repository history.
Contacts
Decisions for counsel
- Contracting entity, governing law and forum for the Cloud Terms and website terms, and whether to offer regional variants (EU, UK, US) or arbitration (Cloud Terms 26).
- Liability cap, free-plan cap, data-protection super-cap and carve-outs, including the customer indemnity for designs relying on Outputs (Cloud Terms 14–15, DPA 18).
- Enforceability of the engineering disclaimer and exclusion of reliance losses in each launch market, including consumer and professional-liability law (Engineering disclaimer).
- Whether the Community plan needs lighter separate terms, and how the EU Data Act Art. 31(2) exemption applies to free plans and trials (Cloud Terms 19).
- Need for an EU, UK or Swiss representative, a DPO, the UK ICO fee, and registration with regulators in South Africa, Kenya, Nigeria, Ethiopia, Saudi Arabia and Korea (Privacy notice 16).
- Applicability of the CCPA and other US state laws (thresholds and B2B exemptions), and of the Australian small-business exemption.
- Transfer mechanism for the chosen hosting and sub-processors; SCC governing law and courts (DPA 13); transfer impact assessment.
- Retention periods marked proposed: backups, consent records, billing records, correspondence (Privacy notice 6).
- Export classification of the software and sanctions screening; whether airport data raises controlled-technology or “important data” issues (Cloud Terms 20).
- Scope of the European Accessibility Act and the Cyber Resilience Act for Tractrix's products, and the competent authorities.
- GPL analysis of linking the CAD add-ins with Autodesk APIs, and whether website content should be licensed separately (Licences 8).
- Trademark filings and the wording of non-affiliation statements (Trademark policy).