HomeContact usPrivacy

WeibullFlow

Privacy Policy

Last updated: 14 May 2026

This Privacy Policy explains how EngSiteTools (“we”, “us”, “our”) collects, uses, and shares information when you use WeibullFlow (weibullflow.com) (the “Service”).

If you have any questions about this policy, contact us at support@engsitetools.com.

1. Who we are

WeibullFlow is operated by EngSiteTools. The Service provides Weibull distribution fitting and optional AI-generated reliability commentary for failure-time data.

2. Information we collect

Account information

  • Email address — collected when you sign up or sign in via magic link or Google OAuth. Stored in Supabase Auth.
  • Google account identity — if you choose Google sign-in, Google passes us your name, email address, and profile picture.

Payment information

  • Stripe customer ID — stored in our profiles table and linked to your Supabase user ID. We do not store your card details; these are handled directly by Stripe.

Analysis data

  • Failure time data — the numerical values you paste into the app for Weibull analysis. This data is processed in-session and is not stored in our database in the normal course of use. If you purchase an AI insight, the failure time values and fitted parameters are temporarily stored in a payment session record for billing verification purposes (see Section 6). It is also transmitted to our AI provider if you choose to generate AI insights (see Section 4).

Technical information

  • Our hosting provider (Vercel) may log IP addresses, user-agent strings, and request metadata as part of standard server operation.

3. How we use your information

  • Create and maintain your account
  • Authenticate you when you sign in
  • Process payments for AI insights
  • Provide the Weibull fitting and AI commentary features
  • Respond to support requests
  • Maintain the security and reliability of the Service

4. Third-party services

We rely on the following third parties to operate the Service. Each has its own privacy policy governing how it handles data.

  • Supabase — hosts our database and handles authentication. Stores user accounts, session cookies, and the profiles table.
  • Stripe — processes payments for AI insights. When you purchase an insight, Stripe creates a customer record linked to your email address.
  • DeepSeek— the AI provider that generates reliability commentary. When you click “Generate insights”, the following data is sent from our server to DeepSeek's API:
    • The failure time values you submitted
    • The fitted Weibull parameters (shape, scale, mean, median, B-life figures)
    • Summary statistics (sample size, minimum, maximum)

    We do not send your name, email address, or any other personally identifiable information to DeepSeek. DeepSeek receives only the numeric analysis payload. See DeepSeek's privacy policy for details on how they handle API data.

  • Vercel — hosts the application and may log IP addresses and request metadata as part of standard infrastructure operation.

5. Cookies

We use a session cookie set by Supabase to keep you signed in. We do not use advertising cookies, analytics tracking cookies, or any third-party tracking technologies.

6. Data retention

  • Account data — retained until you delete your account.
  • Payment session records — retained in our database after purchase for billing and record-keeping purposes. These records include the numeric payload (failure time values and fitted Weibull parameters) submitted at the time of checkout, stored solely for payment verification.
  • Failure time data — not stored on our servers in the normal course of use. Outside of the payment session record described above, it is processed in your browser session and, if you generate insights, transmitted to DeepSeek at that moment only.

7. Your rights

Depending on where you live, you may have rights under applicable data protection laws (such as the GDPR or the Australian Privacy Act), including the right to access, correct, or delete your personal information.

You can:

  • Sign out at any time from within the app.
  • Request account deletion by emailing support@engsitetools.com from the address associated with your account. We will delete your account and associated profile data within a reasonable period after verifying your request. Note that Stripe customer records are managed by Stripe and may be subject to their own retention requirements.
  • Request a copy of the personal data we hold about you by contacting us at the same address.

8. Data security

We use industry-standard practices to protect your information, including encrypted connections (HTTPS) and the security controls provided by Supabase, Stripe, and Vercel. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

9. International transfers

Our third-party providers (Supabase, Stripe, DeepSeek, Vercel) may process data in countries outside your own, including the United States. By using the Service, you acknowledge that your information may be transferred to and processed in these locations.

10. Children

The Service is not intended for children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us at support@engsitetools.com and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through the Service or by email where appropriate.

12. Contact

Questions, requests, or complaints regarding this Privacy Policy can be sent to:

EngSiteTools
Email: support@engsitetools.com

Back to app