Legal & Privacy
Last updated 2026-07-16.
Controller & contact
The data controller for calcnote is an independent sole-proprietor operator based in Türkiye, operating under the trade name Foundry Core Labs. Data subjects can exercise all their rights via contact@foundrycorelabs.com. The operator's legal identity is available to competent authorities on request.
Reach us at contact@foundrycorelabs.com, or use the form at the bottom of this page.
What we collect and why
Everything calcnote collects, why we collect it, and the legal basis under GDPR Article 6:
- Account email — to create and authenticate your account. Legal basis: contract (Art. 6(1)(b)).
- Waitlist email — to notify you when a specific feature ships. Legal basis: consent (Art. 6(1)(a)).
- Feedback text (via the "Was this useful?" form on a calc result) — to improve the product. Legal basis: legitimate interest (Art. 6(1)(f)).
- Contact-form messages (via the form on this page) — to respond to your inquiry. Legal basis: legitimate interest.
- Calculation inputs and results — to compute your requested output. Not stored in our application database; operational logs may incidentally capture request data on error. Legal basis: contract.
- Session cookie
cn_analytics_id— a per-visit random identifier used only to aggregate visit counts within a single session. It has no cross-session persistence and does not track you across visits. Legal basis: legitimate interest. - IP address and User-Agent — retained in server request logs for operational monitoring and security. Legal basis: legitimate interest.
No third-party analytics services, ad networks, or marketing trackers are loaded on any page.
Who processes it
Two processors handle data on our behalf:
- Supabase (Supabase Inc., US parent; EU-region hosting) — hosts the authentication database, waitlist, and analytics events.
- Google Cloud Run (Google LLC, US parent; region europe-west1, Belgium) — hosts the calcnote application.
Both are US-parent companies with EU-region infrastructure. Any implicit onward transfer to the United States relies on the EU–US Data Privacy Framework adequacy decision and, where applicable, Standard Contractual Clauses.
Security
We use TLS for data in transit, at-rest encryption via our processors, and role-based access controls on the application database. Passwords are handled exclusively by Supabase Auth, which uses industry-standard hashing.
Retention
- Session cookie
cn_analytics_id: cleared when you close the browser session. - Server request logs: 30 days (Google Cloud Run default).
- Account email and waitlist entries: retained until you request deletion.
- Feedback and contact-form messages: retained until you request deletion.
Your rights
Under GDPR and the Turkish KVKK you may:
- Access a copy of any data we hold about you.
- Correct anything that's inaccurate.
- Delete your account, waitlist entry, or past submissions.
- Object to processing based on legitimate interest.
- Restrict processing while a dispute is resolved.
- Receive your data in a portable format.
- Withdraw consent (waitlist) at any time.
- Lodge a complaint with your local EU/EEA data-protection authority or with the Turkish Kişisel Verileri Koruma Kurumu (KVKK).
Email contact@foundrycorelabs.com to exercise any of these rights. We respond within 30 days per GDPR Art. 12(3), typically much sooner.
Breach notification
If we become aware of a personal-data breach that presents a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours per GDPR Art. 33 and notify affected users directly where the risk is high per Art. 34.
Not directed to children
calcnote is intended for professional structural engineers and is not directed to users under the age of 16.
Terms
calcnote is provided as-is, with no warranty of any kind, express or implied, including no implied warranty of merchantability, fitness for a particular purpose, or non-infringement.
As stated in the site footer and on every generated calc note, calculation results require independent engineering review and signature/seal by a licensed Engineer of Record. The generated .docx is not a licensed deliverable. You are responsible for verifying every result and for compliance with all applicable codes and jurisdictional requirements.
Limitation of liability. To the maximum extent permitted by law, our aggregate liability for any claim arising from your use of calcnote is limited to the fees you have paid us in the twelve months preceding the claim — which, for the free tier, is zero. We are not liable for indirect, incidental, consequential, or punitive damages.
No third-party beneficiary. Nothing in these terms grants any right or benefit to any third party. No client, contractor, occupant, or other party who is affected by a design decision based in whole or in part on a calcnote output has any claim against the operator under these terms.
Your indemnification. You (the licensed engineer or user) agree to indemnify and hold harmless the operator from any third-party claim arising from your use of calcnote outputs in your professional work, including any structure designed, reviewed, or documented with the assistance of calcnote.
We may change, suspend, or discontinue the service at any time.
Changes to this notice
The "Last updated" date at the top of this page reflects the current version. Material changes to how we process personal data will trigger an email notice to registered users.
Jurisdiction
Any dispute arising from use of this service is governed by the laws of the Republic of Türkiye, without prejudice to consumer rights you may have in your country of residence.
Send us a message
Use this form for questions, feedback, or data-deletion requests. Reaches the same inbox as contact@foundrycorelabs.com.