Privacy notice

Nodetropy is a connected engineering workspace for planning, engineering and documenting physical projects. This notice explains how personal information is handled when you visit the Nodetropy website, create an account or use the workspace.

For privacy questions or requests, please use the Contact page. Operator identity and a dedicated privacy email will be published before paid public launch.

Depending on how you use Nodetropy, we may process:

• Account information — such as your name, email address, account identifier and authentication information.
• Profile and preferences — such as display name, avatar, currency, units, date format, timezone, theme and notification preferences.
• Project content — information you choose to create or upload, including projects, requirements, tasks, risks, components, subsystems, BOM and budget data, Notebook content, calculations, links, documents and attachments.
• Subscription information — plan, subscription status, billing interval and related account information where paid plans are available. Payment-card details are handled by the payment provider rather than stored by Nodetropy.
• Technical and security information — information needed to operate, secure and troubleshoot the service, which may include request, device, browser, IP and error information generated by our hosting, authentication or infrastructure providers.
• Communications — information you send when contacting us for help, feedback, privacy requests or other enquiries.

Please avoid placing sensitive personal information in project content unless it is genuinely necessary for your project.

We use personal information to provide and maintain Nodetropy; authenticate users; save and display project data; apply plan entitlements; provide support; protect accounts and the service from abuse; diagnose problems; communicate important service or security information; administer subscriptions where applicable; and comply with legal obligations.

We do not sell your personal information. Nodetropy does not currently use project content for advertising.

Where UK data-protection law applies, the lawful basis depends on the processing. Core account and workspace processing is generally necessary to provide the service you request. We may rely on legitimate interests for proportionate security, service reliability, fraud prevention and improvement activities; legal obligation where the law requires processing; and consent where a particular optional activity requires it.

Where we rely on legitimate interests, we consider the impact on users and do not use that basis where those interests are overridden by your rights and interests.

We use specialist providers to operate Nodetropy. The production service is designed to use Supabase for database, authentication and file storage, Vercel for application hosting and delivery, and Stripe for payment processing when paid billing is enabled. These providers may process information on our behalf or, for some activities such as payments, under their own responsibilities.

We may also disclose information where reasonably necessary to comply with law, protect users or the service, investigate misuse, or establish, exercise or defend legal claims. We do not disclose project content to other Nodetropy users unless a feature you use is specifically designed to do so.

Some service providers may process information outside the United Kingdom. Where data-protection law requires safeguards for an international transfer, we expect the relevant provider or transfer arrangement to use an approved legal mechanism and appropriate safeguards.

We keep personal information for as long as reasonably necessary for the purposes described in this notice, including while your account is active and where information is needed for security, legal, accounting or dispute-resolution purposes.

Nodetropy includes an account-deletion process. Deletion removes account data from the active service in accordance with that process, although limited information may remain temporarily in backups, security records or records we are legally required to retain. We do not promise a specific backup-retention period here because infrastructure retention settings may change; this notice will be updated if a fixed user-facing period is adopted.

We use technical and organisational measures intended to protect personal information, including authenticated access, database row-level access controls and private storage controls for protected project files. No online service can guarantee absolute security, so you should also use a strong, unique password and protect access to your account.

Depending on the circumstances, UK data-protection law may give you rights to access your personal information, correct inaccurate information, request deletion, restrict or object to certain processing, receive certain information in a portable format, and withdraw consent where processing relies on consent.

You can change some information and preferences directly in Account Settings. For other requests, contact us. You also have the right to complain to the UK Information Commissioner’s Office if you are unhappy with how your personal information is handled.

Nodetropy may be useful to students and younger engineers. Users under 18 should use the service with the knowledge and permission of a parent or guardian. Nodetropy is not intended for children under 13 to create their own account.

Where the law requires parental authorisation for a particular use of a child’s personal information, we will require it. We aim to use privacy-protective defaults and avoid unnecessary profiling or advertising uses of children’s information.

Nodetropy uses limited browser storage and cookies for functions such as authentication and remembering workspace preferences. We do not currently use advertising cookies. See the Cookies notice for more detail.

We may update this notice as Nodetropy develops, our providers change or legal requirements change. We will change the date at the top when we make revisions and, where appropriate, provide a more prominent notice for material changes.