Zimora Group LLC ("Zimora", "we", "us") makes Job Shop Office. This policy says what data we handle, what we never see, and what you can do about it.
It covers the Job Shop Office Windows application, the jobshopoffice.com website, and buying and supporting a subscription.
What never leaves your shop
Job Shop Office is an installed desktop application, not a cloud service. It is built this way on purpose: a shop that cannot say where its customers' files went cannot use the software at all.
We never receive any of this:
- Customer drawings, models or part data — PDF, DXF, STEP, STL or anything else
- Geometry, dimensions, tolerances or nests
- Part numbers, project names, customer names or job numbers
- Output files
- The paths of the folders you keep your work in
- Your company's pricing, costing or quoting inputs
Those live under folders you chose, and in the application's own database on your machine. The application records paths, hashes and metadata about your files rather than copying their contents into a store of its own.
Sending customer content outside your machine is a release-blocking defect in this product. If you ever find Job Shop Office doing it, tell us at [email protected] and we will treat it as an emergency.
What the application sends out, and why
There are exactly two outbound connections in normal operation.
License validation. So we can tell whether your subscription is active. It carries:
- your company identity
- your entitlement — in plain terms, whether you are Active, in offline grace, or expired
- the application version
- an activation identifier for the workstation
- the time of the last successful check
It carries nothing else. The license boundary is built so that customer content cannot reach it, and the application code that holds your drawings never talks to the license service.
After a successful check the application works fully offline before it needs to check again — 10 days. That means the license service learns nothing about you between checks, because the application is not talking to it.
Update checks. The application asks, over a signed connection, whether a newer version exists. This carries the current version and the information any web request carries — an IP address and a request time. It carries no customer content.
That is the whole list. Network access is not a general capability of this application. It is granted narrowly, to the two components that need it.
What you can choose to send us
These are off unless you turn them on or do them yourself.
Crash reports (opt-in). This is not in the product yet, and nothing is being sent today. We are writing down how it will work before we build it, and we will update this policy — and name the company that receives the reports — before the first one can leave your machine. When it ships: if a part of the application crashes you will be able to send us a report. It will be off by default, you will be asked before the first one goes, and you will be able to turn it off again at any time in settings. A report will carry the error, the stack trace, the application version and system information. It will never carry drawings, geometry, file names, part numbers or customer names. We will use crash reports to fix crashes and nothing else, and we will keep them for 90 days and then delete them.
Support bundles. When something is wrong, Create Support Bundle writes a file you can look at and then send us. It contains the application version, your settings schema, system information, sanitized logs and error details. It excludes drawings, models, part numbers, customer names and project paths. Nothing is sent automatically — you choose whether to send it, and you can open it first. If you decide to attach a specific drawing to help us reproduce a problem, that is your deliberate act; we use it only to fix your problem and we delete it when the ticket is closed.
Emails to support. When you write to us, we keep the conversation so we can help you and so we have a record of what we agreed. We keep support email for 3 years.
Logs. Application logs stay on your machine by default. We do not collect them.
What we keep about you as a customer
To sell you a subscription and keep it working, we hold:
| What | Why | How long |
|---|---|---|
| Company name, your name, your email address | To issue the license, email the key, and reach you about your subscription | While you are a customer, then 12 months |
| License key, activation records, workstation activation identifiers, validation times | To enforce the number of workstations you bought, and to help you move an activation | While you are a customer, then 12 months |
| Billing records — what you paid, when, for what, and the invoice | Tax and accounting law requires us to keep these | 7 years |
| Visits to jobshopoffice.com | To serve the site and keep it up | We keep nothing. We run no logging of our own on the site and we have not turned on log export. Cloudflare keeps its own aggregated request counts under its policy. |
We ask for as little as we can. Signing up needs a company name and a work email address. We do not ask for your phone number, your shop's size, your revenue, your customers' names or what you make. If a form ever asks you for something and does not say why, that is a bug — tell us.
We never see your card number. Payment is handled by our payment processor. Your card details go to them, not to us. We see the last four digits, the card brand and whether the charge worked.
The website does not track you. jobshopoffice.com is plain HTML. It runs no analytics script, no advertising pixel and no third-party tracker, it sets no cookie of ours, and there is nothing on it that follows you to another site. Our host may set a cookie of its own to protect the site from abuse. You do not have to agree to anything to read our pages, and there is no banner asking you to, because there is nothing to consent to.
Who else is involved
We use a small number of service providers to run the business. They only get what they need to do their job, and they are not allowed to use it for anything else.
| Who | What they do | What they get |
|---|---|---|
| Stripe, Inc. | Payments, subscriptions, invoices, the customer billing portal | Your company name, your email, your billing details, your card details. Their own privacy policy covers card handling. |
| Google Workspace | Our email, including support and license-key delivery | The contents of email you send us and we send you |
| Cloudflare, Inc. | Hosting jobshopoffice.com and the download | The requests it serves and protects. We do not receive a copy. |
| Crash reporting — no provider yet | Receiving opt-in crash reports, when we turn the feature on | Nothing today. We will name the provider here before the first report can be sent. |
| Zimora Group LLC — our own license service, which runs on Cloudflare | Issuing and checking license keys | The license-check fields listed in section 2 |
We do not sell your personal information, and we do not share it for advertising. We have never done it and we are not going to.
We do not use your data to train AI models, ours or anybody else's.
We will hand over data if the law genuinely requires it — a valid subpoena, warrant or court order. If that happens and we are allowed to tell you, we will. Because we hold no customer drawings, there is very little for anyone to ask for, which is part of the point.
If we are ever bought or merged, your data moves with the business, and this policy keeps applying until we give you notice of a new one.
Your choices and your rights
- See what we hold. Email [email protected] and we will tell you, within 30 days.
- Fix it. Tell us what is wrong and we will correct it.
- Delete it. Ask and we will delete what we are not legally required to keep. We have to keep billing records for tax; we will say exactly what we kept and why. Deleting your account data does not touch anything on your own machines — your projects and outputs are yours and we cannot reach them.
- Take it with you. Your work is already on your own disks, in folders you chose, in ordinary file formats. There is nothing to export from us. Ending a subscription never deletes your files.
- Turn off crash reports. In the application's settings, any time — once the feature exists. Until then there is nothing to turn off.
- Stop marketing email. Every one has an unsubscribe link, and it works on the first click. We will still send you the email your subscription needs — receipts, renewal notices, license keys, security notices.
You do not need an account, a form or a reason to ask us any of this. An email is enough.
Security
- Customer content stays on your machines, so the biggest pile of sensitive data in this product is never in our hands to lose.
- Connections to our license service, our website and our update service use TLS. Updates are signed, and the application checks the signature before installing one.
- Application files are written atomically, and every imported original is kept exactly as it arrived and can be proved unchanged.
- Access to the customer records we do hold is limited to the people who need it.
- Encrypted PDFs are refused outright. There is no password prompt, no password storage and no decryption anywhere in this product.
No system is perfectly secure, and we are not going to claim otherwise. If we discover a breach affecting your data, we will tell you — without unreasonable delay, and within any time limit Pennsylvania or federal law sets — what happened, what was affected and what we are doing about it.
Backups are your job for your own files. We back up the records we hold. Your projects, outputs and workspace folders live on your machines, and backing those up is yours to do. The application shows you plainly which folders they are.
Children, and who this is for
Job Shop Office is sold to businesses. It is not for personal use and not for anyone under 18. We do not knowingly collect anything from children.
Where we sell
Job Shop Office is currently sold only to businesses in the United States and Canada, and we do not accept orders from outside that territory. If that changes we will update this policy first, because selling into other places brings data-protection duties we would need to meet properly rather than claim.
Changes to this policy
If we change this policy in a way that matters, we will email customers and show a notice in the application and on the website before the change takes effect. Every version is dated, and the previous version stays available so you can see what changed.
How to reach us
Zimora Group LLCc/o Northwest Registered Agent LLC
502 W 7th St, Ste 100
Erie, PA 16502
[email protected]
Write to us about anything in this policy. A person reads that address.