Privacy Policy

Last updated: August 2026

untangle.bio ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information we collect

We collect the following information when you use untangle.bio:

• Account information: Your email address and name when you sign up via email/password or Google OAuth.
• Usage data: Anonymous analytics about how you interact with the application (pages visited, features used), collected via Google Analytics.
• Usage logs: We also keep our own record of how your account uses the application: which features and API functions you use and when, and for process-generation or simulation runs the names of the target products and the size of the flowsheet. These logs are linked to your account email, are stored in Supabase, and are used solely to understand and improve the product.
• Technical data: Browser type, operating system, and IP address for security and performance purposes.

We do not collect or store any process design data (flowsheets, simulation inputs/outputs) on our servers at this time. All process design work runs client-side or via our computation API and is not persisted.

2. How we use your information

• To provide and maintain access to the application
• To authenticate you and keep your account secure
• To understand how the application is used and improve it
• To contact you about significant changes to the service (if necessary)

We do not sell your personal data to third parties.

3. Third-party services

We use the following third-party services:

• Supabase — authentication and user management. Your email is stored in Supabase's infrastructure. See Supabase's Privacy Policy.
• Google OAuth — optional sign-in method. If you use Google sign-in, Google shares your name and email with us. See Google's Privacy Policy.
• Google Analytics — anonymous usage tracking. See Google's Privacy Policy. You can opt out via Google Analytics Opt-out. We never send your email address or account identity to Google Analytics.
• Vercel — hosting and content delivery. See Vercel's Privacy Policy.

4. Data retention

We retain your account information for as long as your account is active. Usage logs (see section 1) are automatically deleted after 90 days. You may request deletion of your account and associated data at any time by contacting us.

5. Cookies

We use cookies and local storage to:

• Keep you signed in (authentication session)
• Remember your preferences (e.g. light/dark theme)
• Collect anonymous analytics via Google Analytics
• Remember how you first arrived: on your first visit we store the page you landed on and the referring site in your browser. If you create an account, this first-visit record (landing page and referrer) is stored with your account so we know which channels bring users to the product. It contains no browsing history beyond that single first page.

6. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, contact us at the email below.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS) and secure authentication provided by Supabase. However, no method of transmission over the internet is 100% secure.

8. Changes to this policy

We may update this policy from time to time. We will update the "last updated" date above. Continued use of the service after changes constitutes acceptance of the new policy.

9. Contact

For privacy-related questions or requests, contact us via LinkedIn.