Privacy notice

1. Who this notice covers

This notice applies when you visit StimaPulse, join our waitlist or newsletter, create an account, or use our energy-planning workspace. StimaPulse is responsible for deciding how information submitted to the service is used.

2. Information we handle

• Account information: name, email address, authentication records, organization membership, and associated corporate domains.
• Uploaded documents: original private files, scan status and file hash, extracted project facts, analysis errors and timestamps. Clean PDFs may start analysis automatically after malware scanning.
• Project information: site details, energy assumptions, scenarios, simulation inputs, saved runs, reports, and proposals.
• Procurement information: supplier bids, RFQ specifications, cryptographic invite tokens, and securely uploaded attachments.
• Messages and subscriptions: waitlist or newsletter choices, confirmation status, and support correspondence.
• Technical information: session data, IP address, request details, error reports, and security or rate-limit records.
• Privacy choices: analytics preferences and related browser-storage records.

Do not enter confidential personal information into project names, site notes, or assistant prompts unless it is necessary for your work.

3. Why we use it

We use this information to provide and secure accounts, group coworkers into workspaces, save and calculate projects, generate reports, manage B2B procurement workflows (like the Supplier Exchange), answer requested assistant questions, send requested emails, prevent abuse, diagnose faults, and improve the service.

Depending on where you live, our legal basis may be performance of a contract, our legitimate interests in operating a safe and reliable service, compliance with law, or your consent for optional analytics and email communications.

4. Service providers and transfers

We use specialist providers to operate StimaPulse, including Neon for database and authentication services, Vercel for hosting, Blob storage and optional analytics, Upstash for background job processing, and Resend for transactional or subscribed email. When you request certain features, relevant inputs may also be sent to NASA POWER for solar-resource data or to configured AI model providers to generate an assistant response.

Document extraction is off unless the uploader confirms, for that file, that it is a non-confidential test document. Only then, and only after a clean malware scan, is the text of the PDF sent to the configured NVIDIA document endpoint. Files uploaded without that confirmation are stored and scanned but never sent to an AI provider. Original files are also streamed to our ClamAV scan worker for security checks. Structured extraction is saved with the file for later Auto-fill. Review extracted values against the original before using them in calculations.

The current hosted NVIDIA endpoint is an evaluation service. Use only non-confidential test documents and prompts, without personal or sensitive information. Its API trial terms include service-specific retention and security or abuse-monitoring exceptions; deleting data from StimaPulse does not establish deletion from provider systems. Production use requires a provider arrangement appropriate for the intended data.

These providers may process information outside your country. We select providers and safeguards appropriate to the service and applicable law.

5. Retention and security

We keep account and project information while your account is active and for as long as reasonably needed to provide the service, meet legal obligations, resolve disputes, or protect the platform. Waitlist and newsletter records remain until you unsubscribe, withdraw, or the record is no longer needed.

Soft-deleted uploads are eligible for removal from storage and the database after 90 days. Account deletion removes files and reports for workspaces where you are the last member; shared workspace records remain for other members. Backup expiry and provider-side retention are separate from application deletion and must be confirmed with support.

We use access controls, encrypted connections, secure session cookies, organization-scoped data access, and operational monitoring. No internet service can guarantee absolute security.

6. Your choices and rights

Depending on applicable law, you may ask to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may withdraw optional analytics through the privacy controls and unsubscribe from emails using the link in each message.

Signed-in users can request account deletion from Account settings. Other requests can be sent to info@rauell.systems. You may also complain to your local data-protection authority, including Kenya's Office of the Data Protection Commissioner where applicable.

7. Updates

We may update this notice when the service or our legal obligations change. The date above shows the latest revision. See our Cookie Policy for browser storage and analytics details.