1. Introduction

Welcome to TapirFlow ("we", "our", "us"). We are committed to protecting your privacy and handling your personal data transparently. This Privacy Policy explains:

• What information we collect
• How we use that information
• With whom we share it
• How we protect it
• Your rights regarding your data

By using TapirFlow, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information to provide, maintain, and improve our petroleum engineering software services.

a) Information You Provide

• Account Information: When you sign up, we collect your name, email address, and password (hashed).
• Profile Information: We may collect professional information relevant to your use of the software (e.g., company name, role).
• Simulation Data: Any data you input into the simulator (well parameters, fluid properties, etc.) is processed to provide you with results but is not stored permanently unless you choose to save it.

b) Automatically Collected Information

• Usage Data: We collect information about how you interact with TapirFlow (e.g., pages visited, simulation types run, time spent).
• Device Information: We collect technical data about your device, browser, operating system, and IP address for analytics and security.
• Cookies: We use cookies and similar technologies to remember your preferences and keep you logged in.
• Simulation processing errors: We may collect anonymized data when a simulation fails, including input parameters, error messages, and timestamps. This data is used only for debugging and service improvement, and is deleted after analysis.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the TapirFlow service.
• Process transactions and manage your subscription or credit purchases via our payment processor (Stripe).
• Authenticate your identity and manage account security.
• Send you important updates, security alerts, and administrative messages.
• Respond to your comments, questions, and requests through our contact form.
• Analyze usage patterns to improve user experience and develop new features.
• Comply with legal obligations and enforce our terms of service.

4. Data Storage and Security

• Location: Your data is stored on secure servers provided by PythonAnywhere, located in the European Union.
• Security Measures: We implement industry-standard security measures, including encryption, secure socket layer (SSL) technology, and regular security monitoring, to protect your data against unauthorized access, alteration, or destruction.
• Retention: We retain your data only as long as necessary to provide you with the service and comply with legal requirements. You may request deletion of your data at any time.

5. Sharing Your Information

We do not sell or rent your personal data. We may share it only in the following limited circumstances:

• Service Providers: With trusted third-party services that help us operate the platform (e.g., Stripe for payments, Google for authentication, Gmail for email communications). These providers have access only to the information necessary to perform their functions.
• Legal Requirements: If required by law, or to protect the rights, property, or safety of TapirFlow, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

6. Third-Party Services

Our service integrates with:

• Google Login: For authentication (privacy policy: Google Privacy Policy)
• Gmail: For sending transactional and support emails (privacy policy: Google Privacy Policy)
• Stripe: For payment processing (privacy policy: Stripe Privacy Policy)
• PythonAnywhere: Our hosting provider (privacy policy: PythonAnywhere Privacy Policy)

We encourage you to review the privacy policies of these third-party services.

7. Your Rights (GDPR & LGPD Compliance)

If you are located in the European Union, Brazil, or other regions with data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data.
• Restriction: Request that we limit processing of your data.
• Data Portability: Request transfer of your data to another service.
• Object: Object to our processing of your data for marketing purposes.

To exercise these rights, please contact us at tapirflow.app@gmail.com.

8. Children's Privacy

TapirFlow is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or your data, please contact:

TapirFlow Support
Email: tapirflow.app@gmail.com
Website: https://tapirflow.net