Skip to main content
Back to Home

Last updated: February 2026

Privacy Policy

1. Data Controller

ECalPro is operated by a sole trader based in Indonesia. For the purposes of data protection regulations, we are the data controller for the personal information collected through the Platform. If you have questions about how your data is handled, contact us at [email protected].

2. Information We Collect

2.1 Account Data

When you register, we collect your name, email address, and a securely hashed version of your password. If you sign in via Google OAuth, we receive your name and email from Google.

2.2 Usage Data

We store your calculation inputs, outputs, project data, report history, and associated metadata so you can access your work across sessions and generate reports.

2.3 Payment Data

All payment processing is handled by Paddle.com Market Limited ("Paddle"), our Merchant of Record. Paddle collects and processes your payment method, billing address, and tax information. We do not store your credit card number or payment method details. We receive from Paddle a subscription status and customer identifier for account management purposes.

2.4 Analytics Data

We collect anonymous, aggregated analytics including page views, feature usage, and calculator popularity to improve the Service. This data cannot be used to identify individual users.

2.5 Technical Data

We automatically collect your IP address, browser type, device information, and operating system for security, troubleshooting, and service improvement purposes.

3. How We Use Your Data

  • Provide, maintain, and improve the calculation Service.
  • Store your projects and generate calculation reports (PDF, Excel, Word).
  • Authenticate your identity and manage your subscription.
  • Send essential account and billing notifications.
  • Enforce rate limits and usage quotas per your plan.
  • Detect and prevent abuse, fraud, and security threats.

We do not sell, rent, or trade your personal data to third parties.

4. Data Storage and Security

Your data is stored on a Contabo VPS located in the Singapore region, in a PostgreSQL database. Passwords are hashed using bcrypt. All connections to the Platform are encrypted via TLS/HTTPS. Access to the production server is restricted to authorised personnel only.

5. Third-Party Services

We use the following third-party services, each with their own privacy policies:

  • Paddle — Payment processing, tax collection, and invoicing (Merchant of Record).
  • Google OAuth — Optional social login. We only receive your name and email.
  • Cloudflare — CDN, DNS, DDoS protection, and security.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — Request a copy of the personal data we hold about you.
  • Correction — Request correction of inaccurate data.
  • Deletion — Request deletion of your account and all associated data.
  • Export — Request a machine-readable export of your project and calculation data.
  • Restriction — Request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookies and Local Storage

ECalPro uses the following cookies and browser storage:

  • Session cookies — Essential for authentication. These expire when you close your browser or when your session ends.
  • JWT authentication tokens — Stored securely to maintain your logged-in state across page loads.

We do not use tracking cookies or third-party advertising cookies.

8. Data Retention

Account data, project data, and calculation history are retained for as long as your account remains active. If you request account deletion, all personal data and associated content will be permanently deleted within 30 days. Anonymised, aggregated analytics data may be retained indefinitely.

9. Children

ECalPro is a professional engineering tool and is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a child under 18 has provided us with personal data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a notice on the Platform at least 30 days before the changes take effect.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at [email protected].