Privacy Policy
This policy explains what personal data WireEngine holds, why, who processes it for us, how long we keep it, and your rights. The controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Contact: support@wireengine.ai.
In short
- We hold your account (email and a password hash), your projects and what you attach to them. We do not sell data, show ads, or use your content to train AI models.
- Your text and project context go to Anthropic only when you use an AI feature. The rest of the service — the rule checks, sizing and every document — runs on our own servers with no AI call.
- The website and app set no advertising or analytics cookies and load no fonts from third parties. The only third-party script is cookieless page analytics in the app, and only when we switch it on (section 3).
- You can export your data and delete your account yourself; deletion is permanent.
1. What we hold
| Data | What it is | Why |
|---|---|---|
| Account | Email address; a password hash (scrypt — we never store your password); the date you joined; whether your email is verified; the versions of these terms and this policy you accepted and when. | To run your account (contract); to prove acceptance (legitimate interest). |
| Projects | Vessel and system details you enter or the service derives: devices, circuits, measurements, notes, revisions and document history; maintenance records, engine-hour readings, inventory and tasks. | The service itself (contract). |
| Photos | Equipment photos you upload, with file name, type and size. Photos are stored as uploaded; any metadata embedded in the file (for example the location a phone records) is kept with it. | The service (contract). |
| Manuals | Manufacturer manuals you upload to a project, stored as searchable text with page references. | Manual search and cited answers (contract). |
| Billing | Your Stripe customer reference, which plan you hold and its status, and records of Stripe events. Card details are held by Stripe, not us. | Billing (contract; legal obligation for tax records). |
| Messages to the design assistant | Your chat messages and the design descriptions you submit. Chat history is kept in your browser, not on our servers; the changes a chat turn makes to your project are saved with the project. A design description you submit for candidate designs is cached on our server so the design you pick matches the one you were shown. | The service (contract). |
| Technical data | IP address and request details in server logs (used for security, rate limiting and diagnosing faults); error reports. | Security and reliability (legitimate interest). |
| Support email | What you send to support@wireengine.ai. | To answer you (legitimate interest). |
| Feedback | What you send with Send feedback in the app: your message, the app version, and only if you choose to include them the address of the page you were on, a reference to one of your projects (its identifier, not its contents) and a screenshot you pick. If you are signed in, the feedback is linked to your account. | To answer you and improve the service (legitimate interest). |
| Product measurements | A few events our servers record as they happen: a project was created (blank, from a template or from a description), a revision was committed, the first clean set of checks, the document package was downloaded (with how long after creation, how many measurements were still missing and what share of safety values were still unconfirmed). Each is keyed to a scrambled tag, never your account, email or project. | To see whether the product works for the people using it (legitimate interest). |
We do not ask for, and ask you not to enter, sensitive personal data. A project names a vessel and may describe where it is kept; treat it as information about you.
2. Who processes it for us
| Processor | Role | What it receives |
|---|---|---|
| Railway | Hosts the application server and its database and file storage. | Everything in section 1 (stored and processed on its infrastructure). |
| Vercel | Hosts this website and the app’s web pages. | Your IP address and the pages you request (standard web-server logs). |
| Anthropic | Runs the AI model behind the design assistant. | Only when you use an AI feature: candidate designs — your design description; design chat — your message, the earlier messages of that conversation, a summary of the project (devices, circuits, values and what is still open) and passages from manuals the assistant looks up; troubleshooting — the symptom you describe, the relevant project facts and manual passages; identify from a photo — the photo. Your email address and password are never sent. Under Anthropic’s commercial terms, API data is not used to train its models by default; see Anthropic’s own privacy documentation for its retention. |
| Stripe | Takes payments and manages subscriptions. | Your email, payment details you enter on Stripe’s checkout, and your plan. |
| Resend | Sends account email (verification, password reset, invitations). | Your email address and the message. |
| Plausible Analytics (only when switched on) | Cookieless page analytics for the app. | The name of the app screen you open (for example “design” or “help” — never a project or the page address), the referring site, and your browser, operating system, device type and country, which Plausible derives from your IP address without storing the address. |
| Slack (only when switched on) | Our team’s messaging, where new feedback is forwarded. | The feedback message, the app version and the page address or project reference you chose to include — not your email address. |
| Sentry (coming) | Error monitoring. | Technical details of errors, which can include your IP address, browser and the page or request that failed. We will configure it not to collect project content. |
Optional web look-ups by the design assistant, when enabled on a deployment, send a search query (never your account details) to a search provider; results are marked unverified. Voice input in the app uses your browser’s own speech recognition, which your browser vendor may process under its own policy; we receive only the resulting text.
Our processors are bound by data processing terms. Some are in the United States; where the law requires, transfers rely on [transfer mechanism — e.g. Standard Contractual Clauses / UK addendum — to be confirmed by counsel]. Data is hosted in [HOSTING REGION].
3. Cookies and local storage
We use only what is strictly necessary to keep you signed in and to protect forms against cross-site requests: a session cookie (or, on some deployments, a session token in your browser’s local storage), a security (CSRF) cookie and, during early access, an access-password cookie. The app also keeps your chat history and a few display preferences in local storage. There are no advertising, tracking or analytics cookies, so we do not show a consent banner.
Analytics. When we switch it on, the app counts visits to its screens with Plausible Analytics, which sets no cookies and stores nothing in your browser. It is told only the name of the screen (for example “design” or “help”), never a project, an item in your design or the page address. If your browser sends Do Not Track or Global Privacy Control, the app loads nothing from Plausible. The website itself uses no analytics. Separately, our own servers record the product measurements listed in section 1, keyed to a scrambled tag instead of your account or project; they are not shared with anyone and are deleted with your account.
4. How long we keep it
See the Retention and Deletion Policy. In short: until you delete it or your account; backups roll off within [30 days]; billing records as long as tax law requires.
5. Your rights
- Access and portability — download all your account data as one file from account settings (your account details, every project in full, your photo records and your billing status).
- Correction — edit your projects in the app; change your password in account settings; email us to change your account email.
- Deletion — delete a project, or your whole account, from the app.
- Objection and restriction, and the right to withdraw consent where we rely on it — email us.
- Complaint — you can complain to your data-protection authority (in the UK the ICO; in the EU your local authority). In some US states (for example California) you have similar rights; we honour them for every user.
Email support@wireengine.ai for anything you cannot do in the app. We answer within one month.
6. Security
Traffic is encrypted (HTTPS with HSTS). Passwords are stored only as salted scrypt hashes. Each project is visible only to the account that owns it (and anyone that account deliberately gives access to); every request is checked. Sign-in attempts are rate limited. No system is perfectly secure; we will tell you without undue delay if a breach affects your data.
7. Children
The service is not for children under 18 and we do not knowingly collect their data.
8. Changes
We will tell you about material changes by email or in the app before they take effect. The version and date are at the top of this page.