Privacy Policy

1. Who we are

1.1 PerCode.ai (the "Platform") is operated by Gauss Labs LLC, a Florida limited liability company ("we", "us"). This policy describes what personal information the Platform collects, how it is used and shared, and the choices you have. It is part of the Subscriber Terms of Service (§18.1).

1.2 Questions about this policy: hello@percode.ai.

2. What we collect

2.1 Account information. Your email address and password (stored only as a one-way hash); your company, trade, title, the state you practise in and any additional states; the answers you give at signup (your role, how often you calculate, what you use PerCode for, company size); the name you choose to print on reports; and, if you fill it in, the firm block for report covers (company name and address, licence number, phone, email and the engineer of record's name).

2.2 Acceptance of the Terms. The version of the Terms you accepted, when, and the IP address it was accepted from, so that the acceptance can be shown later.

2.3 Billing. Payments are taken by Stripe on Stripe's own pages; we never receive your card number. We keep the Stripe customer and subscription identifiers, your plan and any add-ons.

2.4 Project and site information. A project address you enter, its coordinates, and the site hazard data looked up for it; the inputs of calculations you save in the browser.

2.5 Content you send us. Help requests; project photos you submit (we remove the photo's embedded metadata, such as location, and re-encode it); 3-D model views you share and the notes you add to them; and your messages to the AI assistant, with any documents you attach.

2.6 Usage information. Which pages and calculators are opened and run, signup, trial and plan events, and how you first arrived (the referring site's name, campaign tags and the first page you landed on). These records are tied to a random identifier, and to your account once you sign in. We do not store your IP address or browser details with them, and we do not record what you type into a calculator. Your IP address and browser name are read for each request only to limit abuse and to ignore automated traffic, and are not kept.

3. Cookies and browser storage

3.1 The Platform sets only its own cookies, and none of them is used for advertising:

pc_session keeps you signed in (30 days). pc_aid is the random identifier described in §2.6 (400 days). pc_src remembers how you first arrived (400 days). pc_ses groups one visit's pages together (30 minutes from your last page). pc_tools carries your plan's access to the browser modules (up to 8 hours). All are unreadable by page scripts.

3.2 Your browser also stores preferences such as a dismissed banner, the colour theme and panel positions. These stay in your browser and are not sent to us.

4. How we use it

4.1 To run the Platform: your account, your plan, the code basis of your state, your reports and the features you use. To send the emails the service needs: verifying your address, approving your account, and replies to your help requests. To bill you. To keep the Platform secure and prevent abuse. And to understand, in aggregate, how the Platform is used so we can improve it.

4.2 We do not sell personal information, and we do not use it for advertising.

4.3 We do not use your content to train AI models, and we use AI providers only on terms that do not allow them to train on it (Terms §9.3).

5. Who receives it

5.1 Service providers that run parts of the Platform for us, each receiving only what its job needs:

Fly.io hosts the Platform and its database in the United States. Tigris (Fly's object storage) stores the 3-D views you share. Stripe takes payments and receives your email address. Our email provider delivers the service emails. Google Analytics receives the usage events of §2.6 from our server, with the random identifier and, once you sign in, your numeric account number — never your email — and with advertising personalisation turned off. Google Fonts supplies the site's typeface, so your browser contacts Google when a page loads.

5.2 Site hazard lookups. When you look up a site, the address you typed is sent to the U.S. Census Bureau's geocoder to find its coordinates, and the coordinates are sent to the ASCE Hazard Tool, the U.S. Geological Survey and FEMA for the site's hazard and flood data, and to Mapbox for the site map.

5.3 The AI assistant. When you use the assistant, your message, the conversation so far, the form you are working on and any documents you attach are sent to Anthropic, which provides the AI model. When you ask the assistant to reshape a report's layout, the report's text is sent. The assistant never takes part in a calculation.

5.4 We may also disclose information when the law requires it, to protect the Platform or its users, or as part of a sale or reorganisation of the business.

6. What is public

6.1 A 3-D view you share can be opened by anyone who has its link, without signing in, for seven days or until you delete the link. Shared pages ask search engines not to index them.

6.2 A project photo you submit appears on the site only after we review and feature it, with the title, credit and location you gave it.

7. The PerCode desktop app

7.1 Your project files and logos stay on your computer. The app contacts us to sign you in and confirm your plan, and to check for updates (which sends the app's version and your system type). It sends project information only when you use a feature that needs the service: the AI assistant, a site hazard lookup, sharing a 3-D view, or syncing your profile. The app sends no usage tracking.

8. How long we keep it

8.1 Account information is kept while your account exists. Sign-in sessions last 30 days. Saved calculator inputs are deleted after 30 days. A signup that is never verified is deleted after 24 hours. The text of assistant conversations is deleted after 90 days. Shared 3-D views expire after seven days.

8.2 When you delete your account, we cancel your subscription, delete your Stripe customer record, your shared 3-D views, help requests, submitted photos, assistant conversations, saved calculations and profile. We keep your email address and the reason you gave, if any, so that a deleted account cannot start a new free trial; usage records are kept without any link to you. Stripe keeps its own payment records as the law requires.

9. Your choices

9.1 You can change your profile at any time in your account, and delete your account yourself from your Profile page. To ask for a copy of your information, or to correct something you cannot change yourself, write to hello@percode.ai.

10. Security

10.1 Passwords are stored only as one-way hashes, the Platform is served over an encrypted connection, the sign-in cookie cannot be read by page scripts, and access to accounts and data is limited to the people who need it. No system is perfectly secure; tell us at once if you believe your account has been compromised.

11. Who the Platform is for

11.1 The Platform is for professionals aged 18 or older (Terms §2.3–§2.4). We do not knowingly collect information from children.

12. Changes

12.1 We will publish any change to this policy here with its version and effective date, and tell subscribers of a material change by email to the account address (Terms §18.4).