Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address - For account identification and communication
• Name - To personalize your experience
• Password - Stored as a secure hash, never in plain text

1.2 Usage Data

We automatically collect certain information when you use the Service:

• Log data - IP address, browser type, pages visited, time and date
• Device information - Device type, operating system
• Session data - Login times, feature usage patterns

1.3 Contact Form Data

When you submit our contact form, we collect:

• Name and email address - To respond to your inquiry
• Company (optional) - To understand your context
• Message content - The details of your inquiry
• IP address - For security and anti-abuse purposes
• Privacy consent record - To demonstrate your agreement to this policy

1.4 Analysis Data

When you use our engineering tools, we process:

• Input data - Data you upload for analysis (e.g., material properties, test results)
• Calculation results - Generated plots, fitted parameters, reports
• Saved states - Form configurations you choose to save

Important: Your analysis data is processed solely to provide the Service. We do not analyze, mine, or use your technical data for any other purpose.

2. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Authenticate your identity and secure your account
• Send essential communications (verification emails, password resets, security alerts)
• Improve and optimize the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

What We Don't Do

• We don't sell your personal information
• We don't use your data for advertising
• We don't share your analysis data with third parties
• We don't train AI models on your data

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases as defined by GDPR Article 6:

• Contract performance (Art. 6(1)(b)) - Processing your account data and analysis data is necessary to provide the Service you registered for.
• Consent (Art. 6(1)(a)) - Contact form submissions and optional communications are processed based on your explicit consent, which you may withdraw at any time.
• Legitimate interests (Art. 6(1)(f)) - We process log data, IP addresses, and usage analytics for security, fraud prevention, and service improvement. These interests do not override your fundamental rights.
• Legal obligation (Art. 6(1)(c)) - We may retain certain data to comply with applicable laws and regulations.

4. Data Storage and Security

3.1 Security Measures

We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Rate limiting to prevent brute force attacks
• Regular security audits
• Access controls and authentication

3.2 Data Location

Your data is stored on secure servers. We use appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only in these circumstances:

4.1 Service Providers

We may use third-party services that process data on our behalf (e.g., hosting providers, email services). These providers are contractually bound to protect your data.

4.2 Legal Requirements

We may disclose information if required by law, court order, or government regulation.

4.3 Business Transfers

If Fractan is involved in a merger or acquisition, your data may be transferred. We will notify you of any change in ownership.

6. Cookies and Tracking

5.1 Essential Cookies

We use essential cookies for:

• Session management - Keeping you logged in
• Security - CSRF protection tokens
• Preferences - Remembering your settings

5.2 No Third-Party Tracking

We do not use third-party analytics, advertising trackers, or social media tracking pixels.

7. Your Rights

You have the right to:

6.1 Access Your Data

Request a copy of the personal data we hold about you.

6.2 Correct Your Data

Update or correct inaccurate information through your profile settings.

6.3 Delete Your Data

Delete your account and associated data through the profile settings. Some data may be retained for legal compliance.

6.4 Export Your Data

Download your analysis data and reports at any time.

6.5 Withdraw Consent

Withdraw consent for optional data processing at any time.

GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR including:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

8. Data Retention

We retain your data as follows:

• Account data - Until you delete your account
• Analysis data - Until you delete it or your account
• Contact form submissions - 12 months, then deleted unless an ongoing business relationship exists
• Log data - 90 days for security purposes
• Backup data - Up to 30 days after deletion

Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention).

9. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses
• Data processing agreements
• Compliance with applicable data protection laws

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email for material changes

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

We will respond to your request within 30 days.