Privacy Policy

EngMetric ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Summary of Data Categories

1.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password when you create an account
• Profile Information: Optional profile details, preferences, and settings
• Calculation Data: Calculator inputs and saved results (associated with your account)
• Communication Data: Messages you send to us, feedback, and support requests

1.2 Information Collected Automatically

When you use our service, we automatically collect:

• Usage Data: Pages viewed, calculators used, time spent, click patterns
• Device Information: Browser type, operating system, device type, screen resolution
• Location Data: General location based on IP address (country/city level)
• Log Data: IP address, access times, referring URLs, error logs
• Cookies and Similar Technologies: See Section 4 below

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Operate and maintain our calculator platform
• Account Management: Create and manage your account, authenticate users
• Save Your Data: Store your calculator history and preferences
• Improve Our Service: Analyze usage patterns to enhance functionality
• Communication: Send technical notices, updates, security alerts, and support messages
• Security: Monitor and prevent fraud, abuse, and unauthorized access
• Analytics: Understand how users interact with our platform
• Legal Compliance: Comply with legal obligations and enforce our terms

3. Legal Basis for Processing (GDPR / UK GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds under the EU General Data Protection Regulation (GDPR) and the UK GDPR (as amended by the Data (Use and Access) Act 2025):

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Improving our service, security, and fraud prevention
• Consent: When you have given explicit consent (e.g., for analytics cookies)
• Legal Obligation: When required by law

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings and our cookie consent banner.

Essential Cookies (Always Active)

• Authentication: Keep you logged in across pages
• Preferences: Remember your settings (theme, units)
• Security: Protect against cross-site request forgery (CSRF)

Analytics Cookies (Optional - Requires Consent)

• Google Analytics: Understand website usage and traffic patterns
• Vercel Analytics: Performance monitoring and page load metrics

Error Tracking (Optional - Requires Consent)

• Sentry: Capture and fix bugs, improve stability

Google Consent Mode

We use Google Consent Mode v2 to ensure that Google Analytics respects your cookie preferences. When you decline analytics cookies, Google receives no identifying data. If you consent to analytics, standard Google Analytics data collection applies as described in Google's Privacy Policy.

4.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner (appears on first visit)
• Cookie settings page: /cookie-settings
• Your browser settings (disable all cookies)

Note: Disabling essential cookies may affect site functionality.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating our platform:

• Hosting: Vercel (website hosting and deployment)
• Database: MongoDB Atlas (data storage)
• Analytics: Google Analytics, Vercel Analytics
• Error Tracking: Sentry (bug reporting)
• Email: Resend (transactional emails such as verification, password resets, and notifications)

These providers are bound by contract to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations or court orders
• Enforce our Terms of Service and other agreements
• Protect our rights, property, or safety
• Protect users or the public from fraud, abuse, or illegal activity

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Your Rights and Choices

6.1 GDPR / UK GDPR Rights (EU/EEA and UK Users)

If you are in the European Economic Area or the United Kingdom, you have the following rights under the EU GDPR and the UK GDPR:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority. For UK users, this is the Information Commissioner's Office (ICO). For EU users, contact your local Data Protection Authority

6.2 CCPA/CPRA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA):

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioural advertising. If this ever changes, we will provide a conspicuous "Do Not Sell or Share My Personal Information" link
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

6.3 Opt-Out Preference Signals (Global Privacy Control)

We recognise and honour the Global Privacy Control (GPC) and similar opt-out preference signals sent by your browser. When we detect a GPC signal:

• We treat it as a valid opt-out request for the sale or sharing of personal information under applicable US state privacy laws
• Non-essential cookies and analytics tracking will not be loaded
• No additional action is required from you — the signal is honoured automatically

6.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: contact@engmetric.com
• Subject Line: "Privacy Rights Request - [Your Right]"

We will respond to your request within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before processing your request.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data in transit encrypted with TLS/HTTPS
• Password Security: Passwords hashed with bcrypt
• Access Controls: Limited access to personal data on need-to-know basis
• Monitoring: Automated security monitoring and alerts
• Regular Updates: Security patches and updates applied promptly

Important: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7.1 Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours (GDPR requirement)
• Notify relevant data protection authorities as required by law
• Provide details of the breach, data affected, and steps taken

8. Data Retention

We retain your information for as long as necessary to:

• Active Accounts: While your account is active
• Legal Requirements: As required by law (e.g., tax records)
• Dispute Resolution: To resolve disputes or enforce agreements

8.1 Retention Periods

• Account Data: Retained until account deletion requested
• Calculator History: Retained until account deletion or individual deletion
• Log Data: 90 days
• Analytics Data: 26 months (Google Analytics default)
• Backup Data: 30 days

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we must retain it for legal compliance.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• EU-US Data Privacy Framework: We comply with applicable frameworks for EU data transfers
• UK-EU Adequacy: Data flows freely between the UK and EEA under the EU adequacy decision for the UK (renewed December 2025)
• Standard Contractual Clauses: Used with service providers outside the EEA and UK where required
• Adequacy Decisions: We transfer data only to countries deemed adequate by the EU Commission or the UK Secretary of State

10. Children's Privacy

Our service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@engmetric.com. We will delete such information promptly.

11. Third-Party Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11.1 Third-Party Services We Use

• Google Analytics: Privacy Policy
• Vercel: Privacy Policy
• MongoDB Atlas: Privacy Policy
• Sentry: Privacy Policy
• Resend: Privacy Policy

12. AI-Assisted Content

Some content on our platform, including educational guides and article text, may be created or edited with the assistance of artificial intelligence tools. All AI-assisted content is reviewed and approved by our editorial team before publication.

Our calculators use deterministic formulas based on published engineering standards (such as IEC 60751) — they do not use AI or machine learning models to produce results.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Specifically:

• We do not use AI or algorithms to make decisions about your account access, pricing, or service availability
• Analytics data is used only in aggregate to improve our service, not to make individual decisions about users

If we introduce automated decision-making in the future, we will update this policy and provide you with the right to request human review of any decision, as required by the EU GDPR (Article 22) and UK GDPR.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

• Notification: We will notify you of any significant changes by posting the new policy on this page
• Email Notice: For material changes, we will send an email notification to registered users
• Effective Date: Changes become effective when posted unless otherwise stated

Your continued use of our service after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

• Privacy Inquiries: contact@engmetric.com
• GDPR Data Protection Officer: contact@engmetric.com
• General Support: contact@engmetric.com