01Scope
This notice covers the TuMo Vision website (the “site”) and the TuMo Vision Windows client (the “client”). The site is used for product information, account registration, client downloads and contacting us. The client is used for drawing detection, OCR review, ballooning and deliverable export.
If you use the product through a reseller, an intranet deployment or another channel, that environment may have its own data terms. Where a signed agreement differs from this notice, the agreement prevails.
02What the site collects
The site collects only what is required for account and licence management:
- Account data Username, email and a password hash. Avatar and short bio are optional and provided by you.
- Device identifier A random ID generated in your browser on first visit, sent with registration, sign-in and API requests. It is used for session validation and abnormal-login investigation, never for cross-site tracking.
- Visit statistics The website records page views — path, referring domain, IP, browser and device type, and the random device ID — only to measure page views (PV) and visitors (UV) and improve pages. It is never used for advertising or cross-site tracking.
- Usage records Sign-in time and IP, current device name, detection counts, cloud OCR token usage, plan and expiry date.
- Messages you send Information you provide by phone, WeChat or email is used only to answer your enquiry and activate licensing.
- Local preferences Language and theme choices are stored in browser localStorage only and are never uploaded.
The site contains no third-party advertising, analytics SDK or cross-site tracking script. Website visit statistics are collected by our own first-party endpoint and used only for traffic analysis; if a third-party service is added, we will update this page and explain the purpose.
03Device identifier and local storage
To keep you signed in and remember preferences, the site and client store a small amount of data on your device: the sign-in token (tumo_token), a random device ID and language/theme settings in browser localStorage; local configuration, model choice and task history in the client.
This data stays on your device and can be cleared in the browser or client. Clearing it requires signing in again, but does not affect files you have already exported.
04What the client does locally
Import, preview, dimension detection, OCR review, ballooning and export all run on your machine by default. A drawing does not have to be uploaded to produce a deliverable.
Ballooned drawings, Excel detail sheets, inspection reports and temporary files are written to the folder you choose. You control their retention and deletion. We cannot read drawings you have not chosen to upload.
05Cloud OCR: explicit and metered
Only when you actively select “cloud OCR” does the client upload the drawing page or image region that needs recognition. This service is provided by DeepSeek, a third-party model provider: only the minimum image region needed for the task is sent, and the result is returned to the client. This capability is metered in tokens (usage), recorded against your account, with limits that depend on your plan.
A cloud call sends that image and the required recognition parameters to the connected third-party recognition service. Server-side call logs record the model, elapsed time, token usage, success or failure and an error summary. Recognition images are not kept as long-term business data.
- If you do not use cloud OCR, no such upload takes place.
- Quota, monthly usage and statistics are visible in your account page.
- For a fully offline workflow, choose a local model. Intranet OCR and offline deployment can be evaluated separately.
06Retention and deletion
Account data is kept while the account exists. After account closure we delete or anonymise account information within a reasonable period, except records we are required to keep by law.
Cloud OCR call logs are kept for billing and troubleshooting as long as operationally necessary. Website visit statistics are kept as long as operationally necessary. Task history and exported files inside the client are managed by you.
- Account closure or deletion requests: contact us via this page; we act after verifying your identity.
- Training sample deletion requests: provide the account and an approximate date range and we will locate and delete them.
08Security measures
We protect data with encryption in transit, password hashing, per-account data isolation, least-privilege access and operational logging. No system can guarantee absolute security, so keep your credentials safe and avoid staying signed in on shared devices.
- Sessions are bound to a device; signing in elsewhere ends the older session.
- If you suspect account misuse or a leak, contact us immediately.
09Your rights
You can access and correct your username, email, avatar and bio; request deletion of account data; request an explanation of data processing; or object to processing.
- Access and correction Use your account page, or contact us for help.
- Deletion and withdrawal Send a request by email or phone; we act after identity verification.
- Complaints If a response does not satisfy you, continue the conversation through the same channel.
10Changes to this notice
When features or data scope change materially, we update this page and the “last updated” date. For significant changes we also notify you on the site or in the client. Continued use means you accept the updated notice.
11Contact us
For privacy, deletion or compliance questions, use the email address and phone number at the bottom of this page. We reply as soon as possible, usually within 24 hours.
Questions about this document?
Data scope, deletion requests, signed agreements or paper contracts — talk to us directly.
Mon – Fri, 9:00 – 18:00 CST · email replies usually within 24 hours
This page reflects the version currently in effect. Earlier versions and supplemental terms are available on request.