How we handle your data
Adiabat (Pty) Ltd, registration number 2026/726535/07. Last updated 24 October 2026.
This page describes how DraftSolver holds the engineering data your organisation puts into it: cases, inputs, runs, results, files, presets, tubes and fans. It describes the service as it is built. How we use personal information is set out in the privacy policy, and the commitments below are part of the terms of service.
1. Your data is yours
Your organisation owns its data and the outputs DraftSolver computes from it. We use it only to run your jobs, to show you their results and to support you when you ask. We do not sell it, share it with anyone outside the operators listed below, or use it to train machine-learning models.
The records we keep of how DraftSolver is used (which analysis ran, on which system, whether it succeeded, how long it took and the compute it used) hold none of your inputs or results.
2. Where it is kept
| What | Where |
|---|---|
| The app, its database and your files | Servers of Hetzner Online in the European Union |
| CFD jobs | Compute at Amazon Web Services in the European Union (Sweden), started for the job and stopped after it. The case being solved goes to that compute, and its results come back |
| Backups | Backblaze, in the European Union (Netherlands), encrypted before they leave our server |
| Weather for an annual run | Only the latitude and longitude you enter, sent to the European Commission’s PVGIS service when you choose a “PVGIS typical year” |
3. Who can see it
- Within your organisation, each run belongs to the user who made it. Colleagues can open it to read it and copy it into their own workspace; nobody else can change it. Presets, tubes and fans are shared across the organisation.
- Each organisation’s data is kept apart from every other organisation’s, and automated tests check every route of the app for it.
- At Adiabat, the administrators can see accounts, organisations, plans, credits and usage records. The administration pages have no view of your runs or results.
- We open your engineering data only when you ask us to, for example to answer a problem report, or when the law requires it. A problem report includes your case’s inputs and a screenshot only if you choose to attach them.
4. How it is protected
- All traffic to the app is encrypted in transit with TLS, and browsers are told to use nothing else.
- Backups are taken every night and encrypted before they leave the server.
- The servers accept only web traffic from the internet. Administration is done over a private network, with keys, and the servers apply security updates automatically.
- Passwords and second factors are held by Auth0, not by DraftSolver. Sessions and API tokens are stored only as hashes, and an API token lasts at most a year.
- Error reports are cleaned before they leave the server: numbers, quoted text, addresses and identifiers are removed, and no inputs, request bodies, cookies or account details are sent.
5. Export and deletion
- Your organisation’s owner can export everything it holds at any time: its members, plan, credits, usage, and every run and case file, as one archive.
- The owner can ask for the organisation to be deleted. Deletion runs 14 days later, and can be cancelled until then. It removes the organisation’s records, its members’ accounts and sessions, its runs and files, its CFD cases and their meshes. Deleted data leaves the backups as they roll over, within 12 months.
- When a plan ends and is not renewed, the organisation can read and export its data, but not run analyses, for 12 months. We then delete it after 30 days’ notice by email.
- Meshes kept for CFD jobs are cleared 30 days after the job.
6. The operators
These companies run parts of DraftSolver for us under written agreements that bind them to confidentiality and security. We give at least 30 days’ notice of a new one, here and by email.
| Operator | What it does | Where |
|---|---|---|
| Hetzner Online GmbH | The app’s servers and database | The European Union |
| Amazon Web Services EMEA SARL | Compute for CFD jobs | The European Union (Sweden) |
| Backblaze, Inc. | Encrypted backups | The European Union (Netherlands) |
| Okta, Inc. (Auth0) | Sign-in | Its EU region |
| Migadu-Mail GmbH | The app’s email | Switzerland, with servers in the European Union |
| Functional Software, Inc. (Sentry) | Error reports, cleaned as in section 4 | Its EU region |
| Paddle.com Market Ltd | Checkout, invoices, tax and refunds | The United Kingdom |
| Cloudflare, Inc. | This website, its request form and DNS | Its global network |
7. Reporting a security problem
If you find a weakness in DraftSolver or this website, write to admin@adiabat.co.za with “Security” in the subject and enough detail for us to reproduce it. We acknowledge every report within two business days and will not take action against anyone who reports in good faith, does not access other people’s data, and gives us reasonable time to fix the problem before telling others.