⬡
CIVORA
Structural Suite
Open Web App →
Draft — not reviewed by a lawyer. This document is a starting point prepared for legal review and has not been approved by an attorney. It should not be relied upon as legally sufficient until reviewed.

Privacy Policy

Effective date: 2026-09-05

1. What we collect

Account data (Supabase)

If you create an account, we store your email address and account identifier via Supabase, our authentication and database provider, along with any project data you create while signed in (e.g. saved structural design projects). If you sign in with Google, we receive the basic profile information Google provides (name, email) via OAuth — we do not receive your Google password.

Free-tier usage counter (hashed IP address)

Civora offers 3 free structural design calculations without requiring an account. To enforce this limit fairly without requiring sign-up, we take the IP address your browser connects from, run it through a one-way SHA-256 cryptographic hash, and store only that hash (never the raw IP address) together with a usage count. This hash cannot practically be reversed back into your original IP address. It is used solely to count free-tier calculations and is not linked to any account or used for any other purpose.

Product analytics (PostHog)

We use PostHog to understand product usage — for example, whether a visitor started and completed sign-up, or ran their first design calculation. This includes event names, timestamps, and, for signed-in users, an account identifier used to connect events to a single user's journey. We do not send project content (client names, dimensions, calculation values, or any other structural design data) to PostHog — only event names, counts, and timing.

Payment data (Lemon Squeezy)

Lemon Squeezy is our payment processor and acts as the merchant of record for all paid subscriptions — meaning Lemon Squeezy, not Civora, is the seller of record for tax and payment-processing purposes. We never receive or store your full card number; Lemon Squeezy handles checkout, card storage, and billing directly. We receive your subscription status, plan, and renewal date from Lemon Squeezy via webhook, which we store to determine your access level.

2. Why we collect it

  • Account data: to provide the Service, save your projects, and authenticate you.
  • Hashed IP: to enforce the free-tier calculation limit without requiring an account.
  • Analytics: to understand and improve the product and onboarding experience.
  • Payment data: to grant and maintain access to paid plans, and for billing support.

3. Who we share data with

We share data only with the service providers named above (Supabase, PostHog, Lemon Squeezy) as needed to operate the Service, and only to the extent each needs to perform its function. We do not sell your data.

4. Your choices

You may request deletion of your account and associated project data at any time by contacting [email protected]. Deleting your account does not affect billing records Lemon Squeezy is independently required to retain.

5. Changes to this policy

We may update this Privacy Policy from time to time. Continued use of the Service after a change constitutes acceptance of the updated policy.

6. Contact

Questions about this policy: [email protected]