Privacy Policy

Effective Date: September 14, 2025
Last Updated: September 4, 2025

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the rights you have.

Who We Are

This Privacy Policy is issued by First Form Ltd., a private company incorporated under the Companies Regulations of the Astana International Financial Centre, registered address: Astana city, Republic of Kazakhstan, Al-Farabi avenue, 21/1, office 5 ("First Form Ltd.", "we", "us", "our"), operator of RodX (rodxcalc.com). We are the data controller responsible for the personal data described in this Policy.

1. Information We Collect

We collect only the information necessary to provide and improve our services:

  • Account information – when you register, we collect your email address (required, to create and secure your account). We may also ask for the following optional profile information, which helps us understand our users and prioritize product development: your name, area of practice (e.g., architectural, industrial structures), employment status (e.g., engineer, student), professional role (e.g., structural engineer, senior structural engineer), and, if you identify as a student, your faculty and university (used to verify eligibility for Academic Use). Providing this optional information is your choice and does not affect your ability to use the Service.
  • Project data – the models, geometry, inputs, and results you create or upload in RodX, as described in our Terms of Use.
  • Survey form responses – voluntarily provided answers to questions about your work, preferences, and needs.
  • Payment and billing information – when you purchase a subscription, our payment provider ([• our payment provider], acting as Merchant of Record) collects your payment card details, billing name, and billing address directly. We receive only summary transaction data (e.g., that a payment was made, and which plan) — we do not receive or store your full payment card details.
  • Login and security data – we may log the IP address and device information associated with each login to your account, in order to detect and prevent unauthorized access and misuse (such as sharing account credentials). This is separate from the anonymized analytics described below, which does not use IP addresses.
  • Analytics data – aggregated, anonymized statistics collected via Plausible Analytics, which does not store personal data or IP addresses.
  • Technical data – automatically collected technical information (e.g., browser type, device type) in aggregated form via analytics tools.
  • Cookies – our service uses no cookies except those strictly necessary for basic site functionality. Plausible does not use cookies.

2. Legal Basis for Processing

Where the GDPR applies, we rely on the following legal bases:

  • Performance of a contract – to create your account, provide the Service, verify Academic Use eligibility (faculty/university), and process your subscription and payments.
  • Legitimate interests – to detect and prevent unauthorized account access and misuse (login/security data), to understand our user base and prioritize product development based on optional profile information, to understand usage patterns, improve the product, and maintain the security of the Service.
  • Consent – for optional profile fields you choose to provide, and for optional marketing communications (e.g., discounts, trial offers), which you may withdraw at any time by contacting us.

3. How We Use Your Information

We use the information collected for:

  • Verifying eligibility for Academic Use (faculty/university, where provided).
  • Understanding market demand, user needs, and prioritizing product development based on the professional profile information you choose to share.
  • Analyzing the most requested features and geographic distribution of interest.
  • Processing your subscription and payments.
  • Sending discounts, trial offers, and other benefits related to our services (where you have consented).
  • Improving our website, user experience, and product features.
  • Communicating with you in response to your inquiries or feedback.

4. Data Sharing with Third Parties

We do not sell personal data to third parties. We share data only as necessary for the operation of the Service:

  • Hosting – the website and database are hosted on Replit and Neon servers (AWS, region: Frankfurt, Germany).
  • Analytics – aggregated data is collected using Plausible (servers in the EU).
  • Payments – our payment provider ([• our payment provider]) processes your payment as an independent data controller for your payment data, acting as Merchant of Record for your purchase. Their handling of your data is governed by their own privacy policy.
  • Legal obligations – we may disclose data if required to comply with applicable laws, including requirements under GDPR, by court order, upon request from competent authorities, or to protect our legal rights.

5. Data Retention

  • Account, profile, and survey data – stored until no longer necessary for the purposes for which they were collected, or until you request deletion.
  • Login and security data (IP address, device info) – retained for a limited period (e.g., 90 days) sufficient to detect misuse, then deleted or anonymized.
  • Project data – retained in line with our Terms of Use (including after a subscription ends, as described there).
  • Subscription and billing records – retained for [• 7] years following the end of your subscription, as required for accounting and tax record-keeping obligations.
  • Analytics data – stored in aggregated form only, without personal identifiers.

You may request deletion of your data at any time, subject to our legal obligation to retain billing records for the period noted above.

6. Your Rights

We respect the privacy rights of all users, regardless of their country of residence. You may have the following rights:

  • Right to access your personal data and request a copy.
  • Right to request correction of inaccurate or incomplete data.
  • Right to request deletion of your personal data ("right to be forgotten").
  • Right to restrict or object to the processing of your data.
  • Right to withdraw your consent at any time.
  • Right to lodge a complaint with your local data protection supervisory authority.

Additional rights based on local laws:

  • GDPR (EU/EEA residents): data portability, restriction of processing, and specific transparency obligations.
  • CCPA (California residents): right to know the categories of collected personal information, request deletion, and opt out of the sale of personal information (we do not sell personal information).

To exercise these rights, contact us at: info@rodxcalc.com

7. International Data Transfers

Data is stored and processed primarily in the European Union (Frankfurt, Germany). By using our service, you acknowledge that your data may be transferred to and processed in countries with different data protection laws, including where our payment provider processes your payment.

8. Children's Privacy

RodX is intended for professional engineering use and is not directed at children. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Security Measures

We use technical and organizational measures to protect your data, including encryption, secure access controls, and regular system monitoring.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay (and, where feasible, within 72 hours of becoming aware of the breach). Where the breach is likely to result in a high risk to you, we will notify you directly, in each case as required by applicable law. This obligation applies regardless of any other provision in our Terms of Use.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the updated date.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at: info@rodxcalc.com