Privacy Policy

1. Overview

This policy explains what information SimuTower (operated by TLP Global L.L.C-F.Z., United Arab Emirates) collects, how we use it, and your choices. We aim to collect only what we need to run the Service.

2. Information we collect

• Account information — your name, email, and sign-in method (email or Google).
• Project and location information — structure and camera coordinates, selected models and settings, map or place searches, and the reports you create. Active simulations are processed in your browser; location lookups can send the relevant coordinates or search text to the map and data providers described below.
• Account, usage & billing records — account and sign-in details, subscription or purchase references, view allowances, credit usage, and payment status. Stripe processes payment-card details; SimuTower receives billing identifiers and transaction status, not your full card number.
• Device and network information — IP address, browser/device details and request data that service providers receive when your browser connects to the Service.

3. How we use it

To provide and improve the Service, authenticate you, process payments, generate your reports, and communicate with you about your account.

4. Sharing

We do not sell your personal information. The Service uses providers to deliver its features. Supabase provides account authentication and stores account, workspace project, candidate, and billing records; Resend delivers account emails; Stripe processes checkout and subscriptions; Cloudflare serves the website and model assets; Google Fonts supplies fonts; and jsDelivr and unpkg deliver application libraries. When you opt in to analytics, PostHog (US hosting) receives the limited event data described below. These providers receive the information needed for their services and may process it in the countries where their systems operate.

If you create a share link, it contains the simulation settings and location information needed to recreate that view. The link stores this information in its URL fragment; the fragment is not sent in the request to our website server, but anyone you give the link to can read and use its contents. Review the link before sharing it. Current sharing is link-based and does not upload the simulation to our project library.

5. Storage & security

When you save workspace projects and candidates, SimuTower stores their names, client details, notes, custom fields, location information, and saved simulation settings in your account on Supabase. Access is restricted to the owning account. Active views are also processed in browser memory, and generated reports are downloaded to your device. Browser storage is used for your Supabase sign-in session, interface preferences, the map-notice choice, and performance caches. Some caches are keyed by map coordinates and contain terrain values or nearby map features; they remain in your browser until cleared. Older locally saved project data is not automatically erased. Downloaded files remain on your device.

An optional in-app quality log, when used, is also stored only in this browser. It can include a site name or address, site and camera coordinates, panorama identifier and date, simulation and calibration settings, ratings, notes, and a full simulation-state snapshot. It can be exported or cleared in the app. A separate validation tool is restricted to local development and protected staging. If used, it can keep a supplied site list and capture history in browser storage and may download captured images and data to your device. Captures are sent only to a local developer server on the same computer when that server is running; otherwise, the tool downloads them locally.

We retain account, usage, and billing records as needed to provide the Service, prevent misuse, resolve disputes, and meet legal obligations. Contact us at [email protected] to request access or deletion. No method of transmission or storage is completely secure.

Google Maps services

When you use map, geocoding, Street View, elevation, or static-map features, your browser connects directly to Google to request the relevant content. Those requests can include search text, requested locations or coordinates, your IP address, and technical browser information. Google’s handling of this information is governed by the Google Privacy Policy and applicable Maps terms.

Terrain and nearby map-data services

To calculate ground elevation and nearby site context for reports, the browser may send camera and structure coordinates or a surrounding area to Ontario GeoServices LiDAR, Open-Meteo, Open-Elevation, OpenTopoData, or one of the public OpenStreetMap Overpass mirrors (overpass-api.de, overpass.kumi.systems, or overpass.private.coffee). The Service uses these responses to calculate terrain and display nearby mapped features. These third-party requests also reveal your network address and browser request information to the provider that answers. Coverage and provider use can vary by location and availability; their own privacy terms and retention practices apply.

Optional product analytics

With your permission, we use PostHog (US hosting) to measure page visits, sign-up submissions, simulation use, and PDF readiness and failures. A random browser identifier and a session identifier are stored in your browser; they are not your account ID. Counts reflect participating browsers, not a complete count of people or accounts.

We do not send your email, name, project address, coordinates, imagery, report files, passwords, URL query strings or fragments through this integration. Session recording and automatic click capture are not used. Requests reach PostHog's servers, which receive your IP address as part of the network connection; our events disable IP geolocation. See PostHog's privacy policy.

Analytics are optional and are disabled when Global Privacy Control or Do Not Track is enabled. You can withdraw consent here; this stops future events and removes the analytics identifiers from this browser. Previously collected events are not automatically deleted. Contact us for privacy requests.

6. Your choices

You may access or update your account details in Settings, and request deletion of your account and associated data by contacting us.

7. Contact

TLP Global L.L.C-F.Z.
Meydan Free Zone, Dubai, United Arab Emirates.
Privacy questions? Email [email protected].