Privacy Policy
Last updated: March 2026 — Full legal text coming before public launch
Beta notice: This is a summary of our current data practices. A full legally-reviewed privacy policy will be published before general availability. If you have questions in the meantime, please contact us.
Who controls your data
DamLogics operates as a data processor on behalf of organisations that use the platform. Your organisation — the entity that invited you and manages your access — is the data controller for all project data: PFMs, L2RAs, structures, files, and risk assessments. Requests relating to that data should be directed to your organisation administrator.
DamLogics is the data controller for your personal account data only: your name, email address, and authentication credentials.
Personal data we hold (as controller)
- Name and email address provided at registration
- OAuth provider identity (e.g. Google account ID) if you signed in via OAuth
- Session tokens for authentication
- Access logs: timestamps, IP addresses, and user agent strings for security auditing
- Error telemetry sent to Sentry (stack traces, may include browser environment data)
Organisation data we process (as processor)
All of the following is owned and controlled by your organisation. DamLogics processes it solely to provide the service.
- Projects, PFMs, L2RAs, structures, loading conditions, and failure mechanisms
- Risk assessments, screening answers, and elicitation entries
- Uploaded files and documents
- Comments and rich-text content
How we use personal data
Personal account data is used solely to authenticate you and operate the service. We do not sell personal data to third parties. Aggregate, anonymised usage metrics may be used to improve the product.
Storage & security
Data is stored on infrastructure hosted in the United States. Files are encrypted at rest (AES-256). Access is restricted by role-based permissions enforced at the application layer. S3 file URLs are short-lived presigned URLs scoped per request.
Cookies
We use session cookies required for authentication only. No third-party tracking or advertising cookies are set.
Your rights over personal account data
For the personal data DamLogics controls (your account), you have the right to access, correct, delete, or export it. See the links below. For project and organisational data, contact your organisation administrator — DamLogics acts on their instruction for that data.