Skip to main content
SimuPipe

Security & data handling

Piping models are commercially sensitive engineering IP. If you are going to put yours in a browser tool, you deserve a straight answer about where they live and who can see them. This page is that answer. SimuPipe is built and operated from Ireland, and your data stays in the EU.

EU data residency
Database, auth, and the simulation backend all run in EU regions. Operated from Ireland.
Your models stay yours
Never used to train AI, never shared, never sold. Models are private to your account.
Per-account isolation
Postgres row-level security on every user table — one account can never read another's data.
Encrypted everywhere
TLS on every connection with HSTS, and encryption at rest in the database.
Card details never touch us
Lemon Squeezy handles payment as merchant of record on PCI-compliant infrastructure.
Leave with your data
Self-serve export and account deletion. No lock-in, no sales call to cancel.

Where your data lives

SimuPipe runs on a small number of infrastructure providers, each doing one job. Your models and account data are stored and processed in EU regions; the services that operate globally never hold your saved models.

ServiceRoleRegionWhat it holds
SupabaseDatabase and authenticationAWS, EU regionAccount details, saved models, simulation results
RailwaySimulation API hostingEU regionModels in transit while a simulation runs; request logs
CloudflareWebsite hosting and CDNGlobal edge networkThe static application only — no saved models
Lemon SqueezyPayments (merchant of record)GlobalBilling details and card data — never visible to SimuPipe
ResendTransactional emailGlobalYour email address, for confirmations and account email
SentryError monitoringGlobalStack traces and technical metadata when something breaks

Who can see your models

Your models are private to your account. They are never used to train AI or machine-learning models, never shared with third parties, and never sold. There is no public gallery, no default sharing, and no analytics service reading your project content.

Like any engineering software vendor, we sometimes need to look at a model to help you — for example when a simulation fails to converge and you ask for support, or when we investigate a solver issue we detected on our side. That access is gated to a small number of authorized accounts (currently the founder), logged, and limited to what the task needs. The formal terms are in the privacy policy, including your right to object.

How the service is secured

Transport security
Every connection uses TLS, with HTTP Strict Transport Security (one-year max-age, preloaded). There is no unencrypted path to your data.
Row-level security
Authorization is enforced in the database itself, not just the application: Postgres row-level security policies scope every project, model, and profile row to the owning account.
Authentication
Sign-in via Supabase Auth with hashed passwords and confirmed email addresses, or Google OAuth if you prefer not to have a password at all. API tokens are signed JWTs restricted to an explicit algorithm allowlist.
Hardened frontend
A strict Content-Security-Policy limits where the app can load code from and connect to, and frame-ancestors 'none' prevents the app from being embedded in other sites.
Abuse limits
Simulation and account-deletion endpoints are rate-limited per user, input is validated and bounded server-side, and billing webhooks are verified with HMAC signatures.
Backups and monitoring
The database is backed up automatically every day by our database provider, and independent uptime monitoring alerts us if the service goes down.

Your controls

  • Export: models export as JSON (and full reports as PDF, CSV, and Excel on Pro), so your work is portable at any time.
  • Delete: account deletion is self-serve in Settings, protected by a typed confirmation, and permanently removes your personal data and projects within 30 days.
  • Ask: anything this page doesn't answer — [email protected]. You will get a reply from an engineer, not a ticket queue.

The formal details — lawful bases, retention, your GDPR rights — live in the privacy policy and terms of service.

Frequently Asked Questions

Where is my data stored?
Your account, models, and results are stored in an EU region on Supabase (managed Postgres on AWS), and simulations run on an EU-hosted backend on Railway. The website itself is served from Cloudflare's global CDN, which carries only the static application — not your saved models.
Do you use my models to train AI?
No. Your models are never used to train AI or machine-learning models, never shared with third parties, and never sold. Internal access is limited to support, debugging, and product improvement, as described in the privacy policy.
Who can see my models?
Only you. Every database table is protected by row-level security, so one account can never read another account's projects. On the operations side, access is gated to a small number of authorized accounts (currently the founder), logged, and used only to investigate issues or improve the product — never shared outside SimuPipe.
What happens to my card details?
SimuPipe never sees them. Payments are handled by Lemon Squeezy as merchant of record — card details go directly to their PCI-compliant checkout, and they issue EU VAT invoices. Our servers only receive a confirmation that a subscription is active.
Can I export or delete my data?
Yes, both are self-serve. Models can be exported as JSON (plus PDF, CSV, and Excel reports on Pro), and you can delete your account from Settings with a typed confirmation — your personal data and projects are permanently removed within 30 days.
Is SimuPipe GDPR compliant?
SimuPipe is operated from Ireland and processes core data in the EU. You have the GDPR rights of access, rectification, erasure, portability, restriction, and objection — the privacy policy explains each, and [email protected] answers within 30 days.

Try it without handing anything over

The free plan needs only an email address — no card, no sales call. Build a model, run it, and export your work whenever you like.

Get startedCompare plans