[TEMPLATE — review by attorney recommended before public launch. See spec §9.]
Privacy Policy
Last updated: 6/4/2026
What data we collect
Express Bridge Layouts (“EBL”) collects the following categories of data:
- Account information: name, email address, company name, phone number, and job title, supplied when you create an account or submit a project.
- Project inputs: bridge geometry parameters, span and girder data, drawing settings, and any uploaded reference files used to generate your deliverables.
- Payment data: billing information is collected and processed by Stripe. EBL does not store full card numbers; we retain invoice records, payment status, and the last four digits of the card used.
- Usage data: standard server logs (IP address, user agent, timestamps) needed to operate the service securely.
How we use it
- To deliver the service: generate and host your deliverable files.
- To send transactional emails: order confirmations, delivery notifications, revision updates, and invoices.
- For audit and compliance: maintaining a defensible record of inputs and deliverables for each project.
- To respond to support and account-related inquiries.
EBL does not sell your data, and does not use it for advertising or third-party marketing.
Where it's stored
All account data, project inputs, and deliverable files are stored in Supabase, hosted on US-based datacenters. Payment data is stored by Stripe. Transactional email metadata is stored by Resend. The application itself is hosted on Vercel.
Retention
Project metadata and submitted inputs are retained indefinitely for audit and record-keeping purposes. Deliverable files remain available in your dashboard until you archive the project; after archive, deliverables may be removed from active storage while project metadata is retained. You may request deletion of your account and associated data at any time (see “Your rights” below).
Third parties
EBL shares the minimum data necessary with the following service providers to operate the service:
- Stripe: payment processing and invoicing.
- Resend: transactional email delivery.
- Supabase: database, authentication, and file storage.
- Vercel: application hosting and edge delivery.
Each of these providers has its own privacy policy and data-handling practices. EBL does not authorize any of these providers to use your data for purposes outside of operating EBL.
Your rights
You may request a copy of the personal data EBL holds about you, request corrections, or request deletion of your account. In the current version of the service, deletion requests are handled manually — email us using the contact information below and we will process the request promptly.
Cookies
EBL uses cookies only to maintain your authenticated session. We do not use analytics cookies, advertising cookies, or third-party tracking in the current version of the service.
Contact
For any privacy-related questions or requests, contact us at privacy@expressbridgelayouts.com.
