Log in
Sign up

Privacy Policy

Privacy Policy of FlosysENG

Effective date: July 11, 2026

Preface

Welcome to FlosysENG (referred to as “we”, “us”, or “the Company”). This Privacy Policy explains how we collect, use, retain, share, and protect the personal data and usage metadata you provide when using our engineering calculation web application, APIs, and related services (collectively, the “Service”).

Our Core Privacy Principle – Data Ephemerality & AI Protection: FlosysENG is engineered as a real-time computation engine, not a persistent cloud storage provider. We prioritize the ultimate security of your proprietary engineering designs by adhering to a strict “In-Memory Transient Processing” architecture. Furthermore, we explicitly guarantee that your proprietary engineering parameters, P&ID topologies, and flow data will NEVER be used to train public generative AI models.

By accessing or using the Service, you agree to the data practices described in this policy, which is expressly incorporated into our Terms of Service (ToS).

Scope of this Policy

This policy applies to the FlosysENG website, mobile interfaces, APIs, plugins, embedded calculation components, and all related email, support interactions, and paid functionalities (collectively, the “Service”). Please note that when you access or interact with third-party platforms through our Service—such as our Merchant of Record for payments (Lemon Squeezy)—your personal data processed by those entities is strictly governed by their respective privacy policies. We disclaim any liability for the data practices of such third-party services and strongly encourage you to review their policies.

1. Types of Data We Collect

1.1. User‑Provided Personal Data

  • Account Information: Name, email address, company name, job title, and phone number (if provided) used to manage your secure account.
  • Billing Information: Transaction metadata (such as Order IDs and purchased quota amounts) is logged to manage your account tier. FlosysENG does NOT process, collect, or store your credit card numbers, billing address, or local tax details; all financial transactions and global tax compliance data are handled entirely and securely by our authorized Merchant of Record (Lemon Squeezy).
  • Support Content: Messages, bug reports, and requests exchanged with our technical or support teams.

1.2. Engineering Data (Strictly Ephemeral – NOT Stored)

  • Calculation Inputs: The specific engineering parameters you input (e.g., flow rates, temperatures, pressure, pipe dimensions, gas matrices) are processed strictly in volatile memory (RAM) in real-time.
  • On-Demand PDF Reports: Generating a PDF engineering report is NOT automatic. It requires an explicit user request (e.g., clicking the “Generate Report” button) and the consumption of a valid PDF Report Allowance from your account, as outlined in our ToS. When explicitly requested, the report is dynamically generated and streamed directly to your local browser.
  • Zero Retention: Neither your raw calculation inputs nor the generated PDF reports are ever saved, logged, or backed up on our persistent production servers. Once a calculation execution is complete or a report is successfully streamed, the underlying proprietary engineering data is immediately flushed and permanently discarded.

1.3. Automatically Collected Technical & Usage Metadata

  • Usage Telemetry: To maintain our pre-paid software quota system (as outlined in our ToS) and monitor system health, we log non-identifiable execution events (e.g., which calculation module was run, execution duration, error logs, and quotas consumed). We strictly do not log the actual proprietary engineering numerical values you inputted during that event.
  • Technical Data: IP address, device type, operating system, browser version, and timezone settings.
  • Cookies: Session cookies, e-commerce cart cookies, analytics, and functional cookies required to maintain authenticated sessions and secure the Service.

2. How We Use Your Data

We process collected personal data and anonymized metadata strictly for the following purposes:

  • Service Provisioning: To authenticate your account and execute real-time computational requests.
  • Payment & Quota Management: To process quota purchases, maintain legal transaction records, and handle the billing dispute window as outlined in our Terms of Service.
  • Customer Support: To respond to account issues, debug user-reported errors, and handle technical inquiries.
  • Platform Optimization: To analyze anonymized metadata and technical telemetry strictly to refine physical fluid matrices, improve numerical convergence stability, and optimize software performance.
  • Security & Fraud Prevention: To detect cyber threats, prevent unauthorized account sharing, prevent fraud, and protect our infrastructure.
  • Compliance: To respond to lawful requests from authorities and retain financial records as mandated by local tax jurisdictions.
  • Marketing (with consent): To send product updates, feature announcements, or promotional offers. You may unsubscribe or withdraw your explicit consent at any time.

3. Legal Basis for Processing (For EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our lawful bases for collecting and processing your personal data under the General Data Protection Regulation (GDPR) include:

  • Performance of a Contract: Processing is strictly necessary to provide the Service, manage your account, execute computational requests, and fulfill our obligations under the Terms of Service.
  • Legitimate Interests: Processing is necessary for our legitimate business interests, including ensuring cloud infrastructure security, preventing fraud, and analyzing anonymized telemetry to optimize mathematical software performance, provided these interests are not overridden by your fundamental rights.
  • Legal Obligation: Processing is necessary to comply with applicable tax, accounting, and anti-money laundering (AML) laws.
  • Consent: For sending marketing communications and deploying non-essential tracking cookies. You maintain the right to withdraw your explicit consent at any time.

4. Cookies and Tracking Technologies

We utilize cookies and similar tracking technologies to maintain authenticated user sessions, remember UI preferences, manage e-commerce shopping carts, and enhance platform security.

  • You can manage, disable, or clear cookies via your browser settings; however, disabling strictly necessary session cookies will impair core Service functionalities (e.g., account login and quota processing).
  • For EU/UK Users: In compliance with the ePrivacy Directive, we deploy a cookie consent banner upon your first visit, providing you with granular control to accept or reject non-essential analytics cookies (e.g., Google Analytics).

5. Data Sharing & Third‑Party Subprocessors

We will never sell, lease, or distribute your personal data or engineering inputs to any third party. We share minimal necessary data exclusively with vetted third-party vendors and authorities strictly limited to:

  • Merchant of Record (Lemon Squeezy) to process global payments, manage localized tax compliance, and execute secure quota transactions.
  • Cloud Infrastructure Providers (e.g., Hostinger) to host the web application and ensure secure compute environments.
  • Analytics Services (e.g., Google Analytics) to analyze aggregated traffic, monitor usage patterns, and optimize the user experience.
  • Email & Communication Services to deliver transactional notifications (e.g., password resets, system alerts, quota receipts) and marketing messages (only subject to your explicit consent).
  • Legal or Regulatory Authorities when strictly required by law, subpoena, court order, or to protect our legal rights, investigate fraud, and enforce our Terms of Service.

We enter into strict data processing agreements with all third-party vendors to ensure they enforce commercial-grade technical and organizational security measures.

6. Data Retention Periods

We retain data only as long as strictly necessary for the purposes described or as required by statutory laws:

  • Engineering Inputs & PDF Reports: 0 Days. Discarded immediately after real-time transient processing.
  • Account Data: Retained until you request account deletion or as required for legal compliance.
  • Billing & Transaction Metadata: While our Merchant of Record retains full financial and tax records pursuant to their own regulatory compliance, FlosysENG retains only basic transaction metadata (e.g., associated Order IDs and purchased quota tiers) for up to 7 years to comply with applicable accounting regulations and to facilitate customer support.
  • System Telemetry & Error Logs: Retained for a limited period (typically 6–12 months) for debugging and cybersecurity forensics, then automatically anonymized or purged.

7. Data Security & Risk Acknowledgment

We implement commercial-grade technical and organizational measures to protect your data, including:

  • Encryption: TLS/HTTPS encryption for all data in transit.
  • Access Management: Role-based access controls leveraging the principle of least privilege to restrict database and administrative access.
  • Credential Security: Secure password hashing and storage.
  • Infrastructure Monitoring: Routine software updates, system monitoring, and vulnerability patching executed in conjunction with our trusted cloud infrastructure partners (e.g., Hostinger).

However, our ultimate security measure is our Ephemeral Processing Architecture. By intentionally refusing to store your proprietary engineering inputs, we structurally eliminate the risk of your sensitive facility data being exposed in a server-side data breach. While we strive to protect your data, no cloud infrastructure is entirely immune to cyber threats. As explicitly stated in our Terms of Service, you submit data at your own risk and bear the sole responsibility for securely storing downloaded PDF reports on your local devices.

8. User Rights and Requests

Depending on your applicable jurisdiction (including the GDPR for EEA/UK users), you maintain the right to:

  • Access and Portability: Access and obtain a portable copy of the personal account data we hold about you.
  • Correction: Correct inaccurate or incomplete profile data.
  • Deletion: Request the deletion of your account and personal data (subject to legal retention requirements for completed financial transactions, as outlined in Section 6).
  • Objection & Restriction: Request restriction of, or object to, our processing of your personal data.
  • Withdrawal of Consent: Withdraw your marketing or cookie consent at any time.

To exercise these rights, please contact us at admin@flosys.tech and provide sufficient information to verify your identity. (Please note: Because our Ephemeral Processing Architecture inherently does not store your engineering calculations or PDF reports, we cannot export, recover, or delete them for you.)

9. International Data Transfers

FlosysENG operates globally. Your personal account data and usage telemetry may be transferred to, hosted, and processed in regions outside your home country (including Taiwan and the United States) where our vetted cloud infrastructure partners (e.g., Hostinger) maintain secure servers.

When transferring personal data originating from the European Economic Area (EEA) or the United Kingdom (UK) to countries not officially recognized as providing an adequate level of data protection, we implement stringent legal safeguards. These include relying on the European Commission’s Standard Contractual Clauses (SCCs) and robust Data Processing Agreements (DPAs) with our subprocessors, ensuring your data remains protected to the highest international compliance standards.

10. Policy Changes & Governing Terms

We may update this Privacy Policy periodically. We will post the revised policy on this page with an updated “Effective Date.” Continued use of the Service following such changes constitutes your acceptance of the revised practices.

Legal Primacy: This Privacy Policy is governed by the laws, exclusive jurisdiction, and English-language primacy provisions explicitly defined in Section 20 and Section 22.4 of our Terms of Service.

11. Contact Information

If you have questions regarding this Privacy Policy, our data ephemerality practices, or wish to exercise your data rights, please contact us at FlosysENG Legal & Compliance Team
Email: admin@flosys.tech