# Privacy Policy Source: https://meptools.com/privacy/ > This Privacy Policy explains how MEPTools.com collects, uses, stores, shares, and protects personal data when you use our website, accounts, subscriptions, engineering tools, calculators, project workflows, document generation features, and related services. > > This Privacy Policy should be read together with our [Terms of Service](/terms), [Cookie Policy](/cookies), [Refund Policy](/refund-policy), [Engineering Disclaimer](/engineering-disclaimer), and [AI Disclaimer](/ai-disclaimer), where applicable. ## 1. Who we are MEPTools.com is an online platform providing engineering support tools, calculators, saved project workflows, layout-based workflows, exports, and related digital services. For privacy questions, contact us at: ```text support@meptools.com ``` Where applicable privacy law uses the terms **controller**, **business**, or similar terms, MEPTools.com is responsible for deciding how personal data is collected and used through the service, except where a third-party provider acts as an independent controller for its own services. ## 2. Scope of this policy This Privacy Policy applies to personal data processed through: - MEPTools.com and related web pages. - User accounts and authentication. - Free, Pro, and Max subscription features. - Engineering calculators, saved calculations, saved projects, and generated outputs. - Uploaded files, project records, 2D/3D layouts, BIM-related files, exports, and reports. - Product communications, support communications, analytics, and security monitoring. This Privacy Policy does not apply to third-party websites, platforms, or services that are not controlled by MEPTools.com, even if they are linked from our service. ## 3. Why service providers are relevant MEPTools.com uses third-party infrastructure and service providers to host the website, authenticate users, store project data, process payments, send emails, monitor errors, and measure product usage. These providers may process personal data on our behalf or, in some cases, as independent controllers for their own legal and operational purposes. ## 4. Personal data we collect ### Account data When you create or use an account, we may collect: - Nickname or display name. - Email address. - Authentication credentials or authentication identifiers. - Login method, such as email/password, Google login, or Apple login. - Account status, plan type, subscription tier, and access permissions. - Account creation date, login activity, and account security metadata. We do not intentionally require your full legal name for ordinary account registration. ### Authentication data If you sign in using Google or Apple, the relevant identity provider may provide authentication information such as your email address, account identifier, and basic profile information depending on your settings with that provider. Google and Apple may also process data under their own privacy policies and account terms. ### Subscription, billing, and payment data Payments and subscriptions are processed through Stripe. We may receive and store limited billing-related information, such as: - Stripe customer identifier. - Subscription plan and subscription status. - Payment status, renewal status, cancellation status, refund status, or payment failure status. - Invoice, receipt, transaction, and billing metadata. - Limited payment method details made available by Stripe, such as card brand, last four digits, and expiry date, where applicable. MEPTools.com does **not** store full payment card numbers, card security codes, or full bank account details. Stripe processes payment information under its own terms, privacy policy, and security controls. ### Engineering and project data When you use MEPTools.com tools and workflows, you may create, upload, save, export, or generate engineering and project-related data, including: - Project names. - Building or project locations. - Engineering calculation inputs. - Engineering calculation outputs. - Saved calculations and saved project workflows. - Uploaded drawings, documents, schedules, images, or other files. - Generated PDFs, reports, summaries, schedules, and other exports. - 2D and 3D plant room layouts. - BIM, Revit, IFC, or similar model-related files, where supported. - Notes, comments, markups, metadata, and settings associated with projects or tools. Engineering and project data may contain commercially sensitive or confidential information. You are responsible for ensuring that you have the right to upload, store, process, or share any project data through MEPTools.com. ### Usage, analytics, and device data We may collect technical and usage information, including: - Pages, tools, and features used. - Events, clicks, workflow steps, and general usage patterns. - Device type, browser type, operating system, language settings, and approximate region derived from technical signals. - IP address, timestamps, session identifiers, and diagnostic logs. - Error logs, crash reports, performance data, and debugging information. MEPTools.com uses Firebase Analytics for product analytics and Sentry for error monitoring and diagnostics. ### Communications data If you contact us or receive communications from us, we may process: - Your email address. - Message content. - Support requests. - Product feedback. - Email delivery status and engagement metadata. - Marketing communication preferences. MEPTools.com uses Resend for support, transactional, subscription, and product-related emails. ## 5. Data you should not upload Unless a specific feature clearly states otherwise, MEPTools.com is not designed for storing or processing: - Government identification documents. - Payment card numbers outside Stripe checkout or Stripe-hosted payment flows. - Password lists, API secrets, private keys, or confidential credentials. - Health, biometric, criminal, or highly sensitive personal data. - Personal data of children or minors. - Data that you are not authorized to upload, process, or share. You should not upload confidential client, employer, authority, or third-party project information unless you have the necessary authorization and have assessed the suitability of using MEPTools.com for that information. ## 6. How we collect personal data We collect personal data in the following ways: - **Directly from you**, when you register, enter calculation data, upload files, create projects, export reports, contact support, or subscribe to a plan. - **Automatically**, when you use the website or app, including through cookies, local storage, analytics, logs, and security tools. - **From third-party providers**, such as authentication providers, Stripe, Resend, Firebase, Google Cloud, and Sentry. - **From future AI features**, only if and when such features are introduced and used, as described in [AI-related processing](#ai-related-processing). ## 7. How we use personal data We use personal data for the purposes below. | Purpose | Examples of data used | Legal basis where applicable | | ------------------------------------------- | ---------------------------------------------------------------------------- | --------------------------------------------------------------- | | Provide the service | Account data, project data, calculation data, saved workflows, exports | Contract performance or steps requested before contract | | Manage accounts and authentication | Email, nickname, credentials, login provider identifiers, session metadata | Contract performance, legitimate interests, security | | Provide Free, Pro, and Max plan access | Account status, subscription status, payment status, feature permissions | Contract performance | | Process subscriptions and payments | Stripe identifiers, invoice metadata, payment status, billing records | Contract performance, legal obligations | | Save projects and engineering outputs | Project data, uploaded files, generated reports, layouts, exports | Contract performance | | Provide support | Email address, support messages, account information, diagnostic information | Contract performance, legitimate interests | | Send transactional emails | Account notices, payment notices, security notices, service updates | Contract performance, legal obligations, legitimate interests | | Send product updates and promotional offers | Email address, plan type, communication preferences | Consent where required, or legitimate interests where permitted | | Improve the service | Usage data, analytics events, feature usage, aggregated patterns | Legitimate interests, consent where required | | Monitor security and reliability | Logs, device data, IP address, Sentry events, abuse indicators | Legitimate interests, legal obligations | | Enforce terms and protect rights | Account data, usage data, payment records, support records, logs | Legitimate interests, legal claims, legal obligations | | Comply with law | Billing records, tax records, legal requests, compliance records | Legal obligations | If privacy law in your location does not use the specific legal-basis categories above, this table should be read as an explanation of why we process the relevant data. ## 8. AI-related processing MEPTools.com does **not** currently send user data, project data, calculation inputs, uploaded files, or generated outputs to OpenAI or another AI provider as part of the current service. MEPTools.com may introduce AI-assisted features in the future. If AI-assisted features are introduced, we may use OpenAI or another AI provider to process data necessary for those features. Depending on the feature, this may include prompts, calculation context, project data, uploaded content, generated outputs, and related metadata. Before relying on any future AI-assisted feature, you should review the applicable [AI Disclaimer](/ai-disclaimer), this Privacy Policy, and any feature-specific notice. You should not enter confidential, regulated, or third-party project information into AI-assisted features unless you are authorized to do so and have assessed the related risks. If AI processing becomes a material part of the service, MEPTools.com should update this Privacy Policy and, where required, obtain any necessary consent before the feature is used. ## 9. Cookies and similar technologies MEPTools.com may use cookies, local storage, session storage, software development kits, and similar technologies for: - Account login and session management. - Security and fraud prevention. - User preferences. - Subscription and payment flows. - Analytics and product improvement. - Error monitoring and diagnostics. For more information, see our [Cookie Policy](/cookies). ## 10. Marketing communications MEPTools.com may send product updates, promotional offers, and service-related communications. You can opt out of promotional emails by using the unsubscribe link provided in the email, where available, or by contacting us at `support@meptools.com`. Even if you opt out of promotional emails, we may still send non-marketing communications, such as account notices, security notices, payment notices, subscription notices, and important service updates. ## 11. Subscription access and payment failure If a monthly or annual subscription payment fails, MEPTools.com may automatically suspend paid features, restrict access to paid functionality, or move the account to the Free plan. This is an operational subscription-management process. MEPTools.com does not use automated decision-making that produces legal or similarly significant effects on users. ## 12. How we share personal data We do not sell personal data. We may share personal data with the following categories of recipients when necessary to operate, secure, improve, or comply with legal obligations related to the service. | Recipient or provider | Purpose | | ---------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------- | | Firebase Hosting, Firebase Authentication, Firestore, and Google Cloud | Hosting, authentication, database storage, infrastructure, analytics, security, and service operation | | Stripe | Payment processing, subscriptions, invoices, payment status, refunds, billing records, fraud prevention, and compliance | | Resend | Transactional emails, support emails, subscription emails, product updates, and promotional communications | | Sentry | Error monitoring, diagnostics, crash reporting, performance monitoring, and security troubleshooting | | Google and Apple | Authentication where you choose Google login or Apple login | | OpenAI or another AI provider | Future AI-assisted features, only if such features are introduced and used | | Professional advisers | Legal, tax, accounting, security, or compliance advice | | Authorities or other parties where legally required | Compliance with law, legal requests, court orders, regulatory obligations, fraud prevention, and protection of rights | | Business transfer recipients | If the service, assets, or operating structure are transferred, reorganized, merged, or assigned | Service providers may process data in countries other than your country of residence. They may also use subprocessors according to their own contractual and legal arrangements. ## 13. International data transfers MEPTools.com is available to users worldwide. Personal data may be transferred to, stored in, or processed in countries other than the country where you live. These countries may have data protection laws that differ from those in your location. Where required, we rely on appropriate transfer mechanisms, contractual safeguards, provider data processing terms, or other lawful bases for international transfers. ## 14. Data retention We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention approach is: | Data category | General retention approach | | ---------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Account data | Retained while your account is active. After account deletion, removed from active systems within a reasonable period unless retention is required for legal, security, billing, dispute, or compliance reasons. | | Project and engineering data | Retained while stored in your account, unless you delete individual projects, calculations, files, layouts, or exports. | | Deleted project data | Removed from active systems within a reasonable period. Backup copies may remain until overwritten according to normal backup cycles. | | Billing, subscription, and transaction records | Retained as needed for accounting, tax, audit, dispute, refund, fraud-prevention, and legal compliance purposes. This may be up to seven years or longer where required by law. | | Support communications | Retained for a reasonable support, quality, dispute-management, and legal period. | | Security, diagnostic, and error logs | Retained for a limited operational and security period — generally up to 24 months — unless needed for investigation, abuse prevention, legal claims, or compliance. | | Analytics data | Retained according to analytics settings and provider controls, and may be aggregated or de-identified for longer-term product analysis. | | Marketing preferences | Retained until you change your preferences or opt out. We may retain suppression records to avoid sending promotional emails after opt-out. | When we no longer need personal data, we delete it, anonymize it, aggregate it, or retain it only as required for legal, accounting, security, or operational purposes. ## 15. Your controls and rights Depending on your location and applicable law, you may have rights to: - Access personal data we hold about you. - Correct inaccurate or incomplete personal data. - Delete personal data. - Export or receive a copy of personal data in a portable format. - Object to or restrict certain processing. - Withdraw consent where processing is based on consent. - Opt out of promotional communications. - Complain to a data protection authority or regulator where applicable. MEPTools.com provides the following account controls: - You can delete your account from within the app. - You can export or download available project data where supported. - You can delete individual projects, calculations, files, layouts, or outputs where supported. If you cannot use the in-app controls, or if you have a privacy rights request that is not available through the app, contact us at `support@meptools.com`. We may need to verify your identity before responding to certain requests. Some data may not be deleted immediately or completely if retention is required for billing, tax, security, fraud prevention, dispute resolution, legal compliance, backups, or legitimate business records. ## 16. Security MEPTools.com uses reasonable technical and organizational measures designed to protect personal data. These may include encryption in transit where supported, authentication controls, access restrictions, provider security controls, monitoring, logging, and operational safeguards. No online service, hosting provider, database, payment system, email system, or transmission method is completely secure. You are responsible for keeping your login credentials secure and for ensuring that any project data you upload is suitable for processing through an online service. If we become aware of a personal data incident that requires notification, we will assess the incident and notify affected users, regulators, or other parties where required by applicable law. ## 17. Children and minimum age MEPTools.com is intended for users who are at least 21 years old. We do not knowingly collect personal data from users under 21. If you believe that a person under 21 has provided personal data to MEPTools.com, contact us at `support@meptools.com` so we can review and take appropriate action. ## 18. Professional and project confidentiality MEPTools.com may be used for engineering-related workflows, but it is not a substitute for your professional judgment, employer obligations, client confidentiality obligations, authority requirements, or project-specific information security requirements. Before uploading project data, drawings, calculations, model files, reports, locations, or client information, you should confirm that you are authorized to process that information through MEPTools.com and that doing so is compatible with your contractual, professional, and legal obligations. ## 19. Changes to this Privacy Policy We may update this Privacy Policy from time to time. When we make material changes, we should update the `version` and `effectiveDate` shown at the top of this page. We may also provide notice through the website, app, account dashboard, or email where appropriate. Your continued use of MEPTools.com after an updated Privacy Policy becomes effective means that the updated policy applies to your continued use of the service. ## 20. Contact For privacy questions, data requests, or concerns, contact: ```text support@meptools.com ```