Privacy Policy
Last updated: November 02, 2026 · Version 2.0
CivilSoftLab Privacy & Data Transparency Commitment
At CivilSoftLab, we place utmost importance on protecting the privacy and security of our users (structural engineers, design offices, construction firms). This policy transparently describes how your information is handled, secured, and outlines our strictly restricted use of the Google Drive API.
1 Data Controller & Hosting in Algeria
The CivilSoftLab software platform and engineering web applications (accessible at https://civilsoftlab.com) are published by the CivilSoftLab development team, specialized in seismic and structural engineering software solutions.
Local Data Hosting in Algeria (Octinium): CivilSoftLab data, servers, and databases are physically hosted within Algerian national territory by licensed hosting provider Octinium (webservices.dz). This national hosting infrastructure guarantees full compliance with Algerian Law No. 18-07 of June 10, 2018 on the Protection of Individuals in the Processing of Personal Data under the authority of the ANPDP, barring unauthorized cross-border personal data transfers.
For any inquiry regarding personal data protection, contact our support via:
Telegram Support or by email at contact@civilsoftlab.com.
2 Collected Data & Purposes
- Account Data: Name, email address, organization/firm, and phone number (used strictly for authentication and license management).
- Project & Engineering Data: Member geometries, structural loads, generated calculation notes, and rebar arrangements. This technical data remains the exclusive intellectual property of the user.
- Security & Technical Logs: IP address and operational request logs strictly required to ensure platform uptime, prevent brute-force attacks, and protect active sessions.
3. Specific Use of Google Drive API
Restricted Scope & Google Compliance Declaration
CivilSoftLab offers users an optional Personal Cloud Storage feature via Google Drive. This integration enables engineers to backup their project calculation packages (.csl* files) and generated PDF reports directly into their personal Google Drive account.
Permission Scope (Restricted: drive.file)
CivilSoftLab strictly and exclusively requests the https://www.googleapis.com/auth/drive.file scope. This restricted permission level guarantees that:
- CivilSoftLab can only access files and folders it created itself inside the designated folder named
CivilSoftLab Projects. - CivilSoftLab cannot read, edit, or delete any personal files, Google Docs, spreadsheets, or other pre-existing contents in your Google Drive.
- CivilSoftLab has zero access to your Gmail emails, contacts, or calendar.
Google API Services User Data Policy Compliance (Limited Use)
"CivilSoftLab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements."
Token Encryption: Google OAuth tokens (access_token, refresh_token) are encrypted at rest using strong AES-256 encryption. They are never shared with third parties or exposed to web browsers.
Instant Disconnection: You can disconnect your Google Drive account at any time in one click from your profile (/profile). Upon disconnection, CivilSoftLab immediately revokes authorizations on Google servers (https://oauth2.googleapis.com/revoke) and purges all tokens from our database.
4 Cookies & Local Storage (Privacy-First Architecture)
Zero Marketing Trackers: CivilSoftLab uses no advertising cookies, no retargeting pixels, and no third-party profiling trackers.
- Essential Technical Cookies: Encrypted session cookies and CSRF tokens strictly necessary to maintain authenticated sessions and protect against cross-site request forgery.
- Browser Local Storage (localStorage): Used exclusively within your browser to store interface preferences (dark/light theme) and maintain temporary WebApp calculation drafts to prevent accidental data loss.
5 Non-Commercialization of Data
CivilSoftLab never sells, rents, or monetizes your personal or engineering project data to any third party.
Your calculation models and engineering designs are never used to train public artificial intelligence models without your explicit prior consent.
6 Retention & Legal Accounting Records
- Projects & Account: Retained while your account is active and immediately purged upon user-requested account deletion.
- Fiscal & Accounting Compliance (5 to 10 years): In accordance with financial regulations, payment receipts, invoices, and transaction logs are securely archived for the legally required duration solely for official tax and audit compliance.
- Transport Security: Strict SSL/TLS (HTTPS) encryption across all endpoints and strong hashing (bcrypt/argon2) for credentials.
7 Your Rights (Law 18-07 & International Standards Compliance)
In accordance with Algerian Law No. 18-07 of June 10, 2018 regarding the protection of personal data (overseen by the ANPDP) and recognized international standards, you have the right to access, rectify, export, and delete your personal data directly from your account profile, subject strictly to mandatory statutory fiscal retention obligations.
Questions regarding your personal data?
Our support team is at your disposal.