Privacy policy

This policy explains how POLYMODUS PTE. LTD. collects, uses, discloses, and retains personal data when you use Polymodus. It distinguishes local product use from features that send information to a configured Polymodus service.

Local use and network features

Local simulation projects, benches, scenarios, runs, experiments, settings, and related authoring data are stored in browser storage unless you choose a feature that transfers them, such as cloud save or sync, collaboration, publishing, hosted execution, support, or another network-backed workflow. Local calculations do not by themselves grant POLYMODUS PTE. LTD. access to the contents of your local project.

Using the application without signing in does not necessarily mean that no network request occurs. Application areas may check authentication state or retrieve public product data, and ordinary hosting, security, and delivery infrastructure may receive request metadata needed to deliver and protect the service.

Information we may process

When you create or use an account, we may process account identifiers, email address, display name, linked sign-in provider information, entitlement information, session dates, and a limited user-agent description used to identify account sessions. Authentication providers may process information under their own terms and privacy policies.

When you deliberately use hosted features, we may process the content required for that feature. Depending on the feature, this can include project documents and revisions, scenarios, datasets and assets, experiment requests and results, collaboration updates, published application definitions and invocation inputs, generated-source requests, and Life workflow information that you choose to save or share.

We may also process support and security communications, billing and subscription metadata when paid services are active, request and correlation identifiers, security events, and technical records reasonably required to operate, diagnose, secure, and recover the service.

Google Sign-In

Google Sign-In uses OpenID Connect with the openid, email, and profile scopes. Polymodus receives Google's stable account identifier and, depending on the information available on the account, your verified email address and basic profile information. We use this information to authenticate you, create or link your Polymodus account, secure your session, and provide account-backed features.

These scopes do not grant Polymodus access to Gmail, Google Drive, Google Calendar, contacts, or other Google account content. Polymodus does not use Google Sign-In information for advertising or unrelated purposes. Storage, service-provider processing, retention, and your available choices are described in the sections below.

Why we use information

We use information to authenticate users, provide requested product features, synchronize and collaborate on hosted projects, execute requested workloads, deliver and administer paid services, respond to support or privacy requests, prevent abuse, protect accounts and infrastructure, maintain reliable operations, and comply with applicable legal obligations.

No sale or advertising use

POLYMODUS PTE. LTD. does not sell or rent personal data or private customer project content, and does not provide that information to third parties for cross-site behavioural advertising. We do not include advertising or cross-site tracking SDKs in the product as part of this policy. If those practices change, this policy and the maintained data inventory must be updated before the changed collection is enabled.

Browser storage and cookies

Polymodus uses browser storage for local project data, preferences, and temporary workflow state. Account and hosted-service features may use strictly functional session cookies or equivalent credentials to keep you signed in and protect authenticated requests. You can remove local browser data using product controls where available or your browser controls.

Service providers and disclosures

We may disclose information to service providers acting for us where necessary to provide hosting, storage, authentication, communications, security, support, or payment processing. We may also disclose information where required by law, to protect legal rights or service security, or as part of a corporate transaction subject to appropriate safeguards. We do not give providers broader rights to use private customer content for their own unrelated purposes merely because they supply infrastructure to us.

International transfers

Some configured providers may process information outside Singapore. Where the Personal Data Protection Act 2012 of Singapore or another applicable law requires transfer safeguards, we will use measures intended to provide the required standard of protection.

Retention

We retain personal data and hosted customer content only for as long as it is reasonably needed for the purpose for which it was collected, for security and service recovery, to maintain user-requested records, or to meet legal, accounting, or dispute-resolution requirements. Different records can therefore have different retention periods. Local browser data remains on your device until you or the browser removes it.

Your choices and rights

Subject to applicable law, you may request access to or correction of personal data, withdraw consent where consent is the applicable basis, and request deletion of an account or hosted data. Some records may need to be retained where law or a legitimate operational requirement permits or requires it. Product controls do not yet automate every privacy request, so the privacy contact below is the authoritative request channel.

Security

We use technical and organisational safeguards intended to protect personal data and hosted customer content against unauthorised access, alteration, disclosure, or loss. No method of storage or transmission can guarantee absolute security.

Changes and contact

Material changes to this policy will be dated and communicated through an appropriate product or service channel. For privacy and data-protection requests, including requests directed to our data-protection contact, email privacy@polymodus.sg.