Files and security

• Retention: CAD files of quotes that did not become orders are deleted automatically after 90 days. Files of quotes that became orders are kept as long as the account exists, because the order needs them; they are deleted when the quote is deleted. A quote deleted in the panel goes to Trash and is deleted with its file after 30 days. An upload nobody finished is deleted after six hours.
• Purpose: files are used to price the part and to check that the engine read it correctly and that its price matches the approved price. MetronQ passes files to no external artificial-intelligence provider and to nobody else. All processing takes place on MetronQ's own servers.
• Access by MetronQ staff: only named, authorised people can reach files, to handle a ticket, to diagnose a fault, or to check that the engine read and priced a part correctly. This access serves only the operation and improvement of the platform. The Terms forbid MetronQ to use a shop's files to manufacture parts or to compete with the shop.
• Sign-in and audit: MetronQ staff sign in with a one-time code sent by e-mail at every sign-in; a shop's users can switch on the same two-step verification in their profile. Every entry into a shop's account is recorded. Every download of a shop's file by MetronQ staff is written to an audit log before the file is sent; if the log entry cannot be written, the download is refused.
• Encryption: files are encrypted at rest (AES-256). Only MetronQ holds the key; the storage provider does not, so it cannot read a file even with physical access. The browser never receives the storage address of a file: downloads go through the MetronQ API, over a signed link valid for 15 minutes, which in the panel works only in the signed-in session it was issued to.
• Contact details: the customer data of orders (name, e-mail, phone, delivery address and notes) are encrypted inside the database, with a key the database does not hold. A copy of the database alone does not show who ordered what from a shop.
• Widget embedding: once the shop lists its domains, the widget can be embedded only on them; with an empty list (the default) it works on any site. The list prevents accidental embedding, not deliberate misuse. The cost of mass uploads is limited by the daily quote limit and by rate limits, which apply regardless of the origin a request claims.
• Backups: the database is backed up daily, and each backup is encrypted while still on the server. Restoring from the backups is tested periodically.
• Location: data is stored in the European Union, in line with the GDPR.
• Approval: by default, no price reaches a customer before it has been approved.

Send questions this documentation does not answer to contact@metronq.com or through the Help & guides tab in the panel. Tickets go directly to the people who build the product.