How we handle your data.

1. Introduction

This Privacy Policy describes how PEB Optimization (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website, purchase a license for the PEB Optimization Tool for STAAD, and use the application.

By using our website or product, you agree to the practices described in this Policy.

2. Who We Are

PEB Optimization is the operator of the PEB Optimization Tool for STAAD — an external optimizer plug-in that runs alongside Bentley STAAD CONNECT.

3. Information We Collect

We collect only the information necessary to deliver the product, process payments, and provide support.

3.1 Information you provide directly

• Contact details: name, email address, mobile number, company / firm name — provided through our purchase form or contact form.
• Payment information: processed by Razorpay. We do not store full card numbers, CVV, UPI PIN, or banking credentials. We retain only the Razorpay payment ID and order ID for record-keeping.
• License and machine data: when you activate the application, the license key you enter and a hashed machine identifier are recorded so we can validate your license and prevent unauthorized use.
• Support correspondence: any messages you send us through the contact form, email, or other channels.

3.2 Information collected automatically

• Server logs: our hosting provider (Vercel) records standard request data (IP address, user agent, timestamp, page accessed) for security and reliability purposes.
• Cookies: we use only essential cookies required for the site to function. We do not use advertising cookies.

4. How We Use Your Information

• To process your purchase and issue a license key.
• To deliver the product download link and license key to you.
• To validate your license when you activate or use the application.
• To provide customer support and respond to your enquiries.
• To send you essential transactional communications (purchase confirmation, license details, refund processing).
• To comply with legal obligations such as tax records and audit trails.

We do not use your personal information for advertising, profiling, or sale to third parties.

5. How We Share Your Information

We share your information only with the third parties strictly necessary to operate the service:

• Razorpay (payment processor) — for processing your payment. Razorpay’s privacy practices are governed by their own policy at razorpay.com/privacy.
• Vercel (hosting and serverless functions) — the website and its API endpoints run on Vercel’s infrastructure.
• Supabase (license database) — our license records are stored in Supabase, located on secured cloud infrastructure.
• Telegram (internal notifications) — new orders and contact form submissions are forwarded to our internal Telegram bot so we can act on them quickly.

We may also disclose information if required by law, regulation, or valid legal process.

6. Data Retention

We retain your information only as long as necessary for the purposes set out above:

• Order, payment, and license records: retained for the duration of your active license plus the period required for tax and accounting compliance under Indian law.
• Support correspondence: retained for up to 24 months.
• Server logs: retained for up to 90 days.

7. Data Security

We use industry-standard security practices to protect your information, including HTTPS for all website and API traffic, secure password hashing for any administrative access, and signed payment verification using HMAC-SHA256. Despite these measures, no system can be guaranteed to be perfectly secure. We will notify affected users without undue delay in the event of a breach involving personal information.

8. Your Rights

You have the right to:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information, subject to record-keeping obligations under applicable law.
• Withdraw consent for any non-essential processing.

To exercise any of these rights, contact us at hello@peboptimization.com.

9. Children’s Privacy

Our product is intended for professional structural engineers and is not directed at children under 18 years of age. We do not knowingly collect personal information from children.

10. International Users

The service is operated from India. If you access the service from outside India, you understand that your information will be transferred to, stored in, and processed in India.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The “Last Updated” date at the top of this page indicates when the latest version was published. Material changes will be communicated through the website or by email where appropriate.

12. Contact Us

For any questions about this Privacy Policy or how your information is handled, please contact us: