Privacy Policy

• We collect the minimum needed to run your account: your email, an encrypted password, and your subscription status.
• We never see or store your card number — Stripe handles payments.
• We do not sell personal information, and we do not use advertising or cross-site tracking cookies.
• Your process models stay with you; they are not mined, sold, or used to train anything.

Account information

• Email address — used to identify your account, verify it, and send service messages such as password resets.
• First and last name, if you choose to provide them.
• Your password, stored only as a bcrypt hash. We cannot read it, and neither can anyone who obtains the database.
• Your plan, role, and trial end date.

Billing information

Payments are processed by Stripe. Card numbers are entered on Stripe's systems and never reach our servers. We store a Stripe customer reference and your subscription state so we know which features to unlock.

Technical information

• Server logs including IP address, browser type and request timestamps, kept for security and troubleshooting.
• Failed sign-in attempts, used to lock out brute-force attacks.

Your simulation work

Projects you build are held in your browser and in the project files you download. Where a feature explicitly saves work to our servers, it is stored on infrastructure we control and is accessible only to your account.

If you use the AI advisor or AI-assisted suggestions (available on higher plans), a summary of the relevant simulation context — device names, timings, results and the question you asked — is sent to our third-party AI provider to generate a response, and is processed under that provider's API terms.

These features are optional and are not used unless you invoke them. As with any third-party AI service, avoid pasting confidential or personally identifying details into prompts.

We use one essential cookie: an encrypted, HttpOnly session cookie scoped to hirva.ca, which keeps you signed in across the website and the app. It is not readable by JavaScript and is not used for tracking. We do not run advertising or cross-site tracking cookies.

We do not sell personal information. We share it only with the service providers needed to operate:

• Stripe — payment processing, billing and tax calculation.
• Our AI provider — only for the optional AI features described above.
• Our email provider — to deliver verification, password reset and service notices.
• Our hosting provider — the infrastructure the service runs on.

We may also disclose information where legally required, or to protect our rights, safety, or the integrity of the service.

Our systems run on servers operated by our hosting provider, and our processors (including Stripe) may handle information outside Canada. Where information is processed in another country, it may be subject to the laws of that jurisdiction.

• All traffic is encrypted in transit with TLS.
• Passwords are hashed with bcrypt and are never stored or logged in readable form.
• Sessions use signed, HttpOnly cookies; signing out or a password change invalidates existing sessions.
• Administrative access is role-restricted and privileged actions are recorded in a tamper-evident audit log.
• Repeated failed sign-ins trigger a temporary lockout.

No system can be guaranteed perfectly secure, but we take these measures seriously and will notify affected users without undue delay if a breach materially affects their information.

We keep account information while your account exists and for a reasonable period afterwards to meet legal, accounting and tax obligations — Canadian tax rules require billing records to be retained for several years. Server logs are kept for a short period. You can ask us to delete your account at any time.

Under Canadian privacy law (PIPEDA) and comparable laws elsewhere, you can ask us to:

• Give you a copy of the personal information we hold about you.
• Correct anything inaccurate.
• Delete your account and associated personal information.
• Withdraw consent for optional processing, such as the AI features.

Email info@hirva.ca and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

SimNode is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, contact us and we will remove it.

If we change how we handle personal information, we will update this page and revise the date at the top. Material changes will be communicated by email or in the app.