Your designs stay on your computer
VPath collects no data. Last updated October 11, 2026.
VPath application data
VPath performs its CAD, CAM, simulation, document, recovery, import, export, and rendering work locally on your computer. The application does not require a VPath account and does not include advertising, analytics, telemetry, tracking, or online activation. Rivers Edge Software does not collect or transmit the contents of your VPath documents, imported files, exported files, machine configurations, or generated G-code through the VPath application.
Documents and recovery data remain on your computer in locations you select or in storage managed by the operating system. VPath accesses other files only when you authorize them through MCP, select them, open them through Finder or File Explorer, or otherwise direct macOS or Windows to provide VPath access. If you choose to share an exported file using another application or service, that recipient's practices apply to the shared copy.
Optional AI connections
VPath’s optional Model Context Protocol (MCP) server is disabled by default and accepts authenticated connections from your computer when enabled. You choose whether to connect an AI client and what access to grant. Connected clients can receive model information and perform allowed operations in VPath.
A local AI model and client can keep this workflow on your computer. If you connect a cloud-based AI tool, or configure a secure tunnel for an external provider, information shared with that client or provider is subject to its own terms and privacy practices. These optional connections are initiated by you; Rivers Edge Software does not receive your model data through them.
Store services and voluntary communications
General messages and beta tester requests are delivered to our support mailbox. Problem reports and feature requests, including your name, any optional reply address, reply preference, submitted details, and optional attachments, are stored as issues in our private GitHub repository, accessible to authorized maintainers and support automation. You do not need a GitHub account, and we do not publish your report. GitHub processes this information as the provider of our support tracker under its privacy statement. Every contact-form submission also uses Cloudflare Turnstile to detect automated abuse. Turnstile processes technical browser and connection signals, but not the contents of your form, under Cloudflare's Turnstile Privacy Addendum. The website also uses keyed identifiers derived from submissions and connection addresses to limit abuse and prevent duplicate reports; raw connection addresses are not included in issues. Ordinary hosting access logs may still be retained. Duplicate-detection receipts are normally kept for seven days; unresolved delivery receipts may be kept until reviewed.
Attachments are accepted only with problem reports and feature requests. We remove embedded image metadata and convert HEIC images to JPEG before attaching them to the private report. This does not remove personal information visible in the image; please crop or redact it before submitting. Videos are stored as submitted and may include audio and embedded metadata. NC, GCO, and GCODE files are stored as submitted text. VPath documents are stored as submitted ZIP packages. Review every attachment for passwords, personal information, proprietary designs, and safety-sensitive machine data. Uploaded files may remain in the private tracker if a submission is interrupted before its issue is created.
Email is optional unless you ask for a reply or beta access. We follow up only when requested, or about the beta testing opportunity you requested. Providing an email address does not subscribe you to marketing messages. These voluntary website communications are separate from data collected by the application.
Apple and Microsoft may process Store installation, purchase, diagnostic, crash, usage, rating, review, and beta-feedback information under their own terms and privacy policies. If you voluntarily submit Store feedback, a Store provider may give us your message, attachments or screenshots, contact information, and associated app, device, and operating-system details.
We use that information only to respond, support testing, diagnose problems, improve VPath, maintain security, and meet legal obligations. We do not sell it or use it for advertising or cross-app tracking.
We retain voluntary communications only for as long as reasonably necessary for those purposes, then delete or anonymize them unless a longer period is required by law. You may request access, correction, or deletion of information you submitted directly to us. Some records may be retained when required for security, legal compliance, or the defense of legal claims.
Children
VPath is professional CAD/CAM software and is not directed to children. We do not knowingly collect personal information from children through the application.
Changes
We may revise this policy when VPath's practices or legal requirements change. The updated policy will show a new “Last updated” date. If a future VPath feature collects or transmits data, we will update the application's privacy declarations, applicable Store disclosures, and this policy before distributing that feature.
Contact
Send questions or privacy requests through our contact page.