Privacy Policy

1. Introduction

Welcome to CrestaX UI ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information with care and respect. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web-based muon transport physics simulation platform.

By using CrestaX UI, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address (for authentication and communication)
• Name (if provided through OAuth providers like Google)
• Profile information from third-party authentication services

2.2 Simulation Data

When you use our service, we store:

• Simulation configurations and parameters
• Input files and geometry data
• Simulation results and output files
• Job history and metadata
• Saved templates and preferences

2.3 Usage Information

We automatically collect:

• Log data (IP address, browser type, access times)
• Device information
• Usage patterns and feature interactions
• Performance and error data

2.4 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card information. We only retain transaction records, payment status, and credit balance information.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our simulation platform
• Process your simulation jobs and manage your account
• Send you authentication links and service communications
• Process payments and manage your credit balance
• Improve our service and develop new features
• Monitor usage and analyze performance
• Detect and prevent technical issues or security breaches
• Comply with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Data is stored in secure cloud infrastructure
• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure authentication using NextAuth.js
• Regular security audits and updates
• Access controls and monitoring

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these circumstances:

• Service Providers: Third-party services that help us operate (e.g., authentication providers, payment processors, cloud hosting)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account information: Until you delete your account
• Simulation data: Until you delete specific simulations or your account
• Transaction records: As required by law (typically 7 years)
• Logs and analytics: Typically 90 days

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your simulation data and configurations
• Opt-out: Unsubscribe from marketing emails (we primarily send service-related communications)

To exercise these rights, please contact us at the email address provided below.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns
• Improve service performance

You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.

9. Third-Party Services

Our platform integrates with:

• Google OAuth: For authentication (see Google's Privacy Policy)
• Stripe: For payment processing (see Stripe's Privacy Policy)
• Cloud Storage Providers: For file storage and hosting

These services have their own privacy policies and we encourage you to review them.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: