How we handle your data.

1. Introduction

This Privacy Policy describes how PEB Optimization (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website, create an account, purchase a licence for the PEB Optimization Tool for STAAD, and use the application.

By using our website or product, you agree to the practices described in this Policy.

2. Who We Are

PEB Optimization is the operator of the PEB Optimization Tool for STAAD — a desktop application that works alongside Bentley STAAD CONNECT, together with an online service for licensing and, as the application is updated, the optimisation and design checks.

3. Information We Collect

We collect only the information necessary to deliver the product, process payments, and provide support.

3.1 Information you provide directly

• Contact details: name, email address, mobile number, company / firm name — provided when you create an account, make a purchase or use our contact form.
• Payment information: processed by Razorpay. We do not store full card numbers, CVV, UPI PIN, or banking credentials. We retain only the Razorpay payment ID and order ID for record-keeping.
• Licence and machine data: when you sign in to the application, your account, a machine identifier and the application version are recorded so we can check your licence and seats and prevent unauthorised use.
• Download records: when you download an installer, we record your account, the file and version, the date, your IP address and browser user agent.
• Support correspondence: any messages you send us through the contact form, email, or other channels.

3.2 Information collected automatically

• Server logs: our hosting provider (Vercel) records standard request data (IP address, user agent, timestamp, page accessed) for security and reliability purposes.
• Cookies: we use only essential cookies required for the site to function. We do not use advertising cookies.

3.3 Project data sent by the application

Depending on the application version, some or all of the optimisation and IS 800 / AISC design checks run on our servers. Where they do, the application reads the data the calculation needs from your open STAAD model — frame geometry, members and sections, loads and load combinations, and your design settings — and sends it to our servers over an encrypted (HTTPS) connection. Your .std file itself is never uploaded.

• We use project data only to compute and return your result, and to investigate a failed run when you ask us to.
• We do not sell or share project data, use it for advertising, or show it to other customers.
• Each run is also logged with your account, the date, the frame size and the outcome, so we can enforce your licence and support you.

4. How We Use Your Information

• To process your purchase and add the licence to your account.
• To let you download the application from your account and to keep a record of each download.
• To check your licence and seats when you use the application.
• To run the optimisation and design checks you request and return the results.
• To provide customer support and respond to your enquiries.
• To send you essential transactional communications (purchase confirmation, license details, refund processing).
• To send a few short follow-up emails after you download the application or start the free trial (at most four in all), to help you get started and tell you about the plans. Every one has a link to stop them, and you can also reply and ask.
• To comply with legal obligations such as tax records and audit trails.

We do not use your personal information for advertising, profiling, or sale to third parties.

5. How We Share Your Information

We share your information only with the third parties strictly necessary to operate the service:

• Razorpay (payment processor) — for processing your payment. Razorpay’s privacy practices are governed by their own policy at razorpay.com/privacy.
• Vercel (hosting and serverless functions) — the website and its API endpoints run on Vercel’s infrastructure.
• Supabase (accounts and licence database) — your account, licence and download records are stored in Supabase, on secured cloud infrastructure.
• Our cloud compute provider — the servers that run the optimisation and design checks process the project data described in section 3.3.
• Telegram (internal notifications) — new orders and contact form submissions are forwarded to our internal Telegram bot so we can act on them quickly.

We may also disclose information if required by law, regulation, or valid legal process.

6. Data Retention

We retain your information only as long as necessary for the purposes set out above:

• Order, payment, and license records: retained for the duration of your active license plus the period required for tax and accounting compliance under Indian law.
• Project data: kept only as long as needed to compute and return your result, unless you ask us to keep it to investigate a problem.
• Optimisation run logs and download records: retained for the life of your account.
• Support correspondence: retained for up to 24 months.
• Server logs: retained for up to 90 days.

7. Data Security

We use industry-standard security practices to protect your information, including HTTPS for all website, API and application traffic, secure password hashing for any administrative access, and signed payment verification using HMAC-SHA256. Despite these measures, no system can be guaranteed to be perfectly secure. We will notify affected users without undue delay in the event of a breach involving personal information.

8. Your Rights

You have the right to:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information, subject to record-keeping obligations under applicable law.
• Withdraw consent for any non-essential processing.

To exercise any of these rights, contact us at peboptimization@gmail.com.

9. Children’s Privacy

Our product is intended for professional structural engineers and is not directed at children under 18 years of age. We do not knowingly collect personal information from children.

10. International Users

The service is operated from India. If you access the service from outside India, you understand that your information will be transferred to, stored in, and processed in India.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The “Last Updated” date at the top of this page indicates when the latest version was published. Material changes will be communicated through the website or by email where appropriate.

12. Contact Us

For any questions about this Privacy Policy or how your information is handled, please contact us: