Privacy Policy

Overview

TetraSoft LLC ("TetraSoft," "we," "us") operates the Atlas data platform and MAES Studio. This policy explains what personal information we collect, how we use it, and the choices available to you.

We do not sell personal information. We do not share it with third parties for marketing purposes.

1. Information We Collect

Account information. When you register or request access, we collect your email address, first and last name, company name, and location (city and state). This information is used to create and manage your account.

Usage data. We log API requests, page visits, and feature interactions to monitor service health, investigate errors, and understand how the platform is used. Logs include IP addresses, timestamps, and endpoint paths. We do not link usage logs to individual user profiles for marketing purposes.

Uploaded data. If you use MAES Studio, you may upload gas composition files. These files are stored on TetraSoft servers and used solely to run simulations on your behalf. The files are not shared with other users or third parties; section 6 describes what Microsoft Clarity session replays can capture of the MAES pages that display their contents.

Contact data. If you contact us by email or through the newsletter form, we retain your message and email address to respond to you.

2. How We Use Your Information

• To create and manage your account and authenticate your sessions
• To deliver the Services, including running MAES simulations on uploaded data
• To send transactional emails (account creation, password reset, email verification)
• To diagnose errors and monitor service reliability
• To contact you about material changes to the Services or these policies
• To comply with legal obligations

We do not use your information for targeted advertising.

3. Information Sharing

We do not sell, rent, or trade personal information. We may share information only in these limited circumstances:

• Service providers. We use Resend (email delivery) and Sentry (error monitoring). These providers process data on our behalf under confidentiality agreements and may not use data for their own purposes.
• Legal requirements. We may disclose information if required by law, court order, or to protect the rights and safety of TetraSoft, its users, or the public.
• Business transfers. If TetraSoft is acquired or merges with another entity, your information may transfer as part of that transaction. We will notify you before your data is subject to a different privacy policy.

4. Data Retention

Account information is retained for as long as your account is active. If you request deletion, we will remove your personal information within 30 days, except where retention is required by law or for legitimate security purposes (such as fraud prevention logs).

Uploaded gas composition files are retained until you delete them or your account is closed. Automated backups are retained for 30 days, then permanently deleted.

Server logs are retained for 90 days.

5. Security

Passwords are hashed using PBKDF2-HMAC-SHA256 with 260,000 iterations. We use HTTPS for all data in transit. Access credentials and secrets are stored separately from application code. Database files are access-controlled at the operating system level.

No system is perfectly secure. We will notify affected users promptly if a data breach occurs that is likely to result in risk to your rights or freedoms.

6. Cookies and Analytics

The TetraSoft website, the Atlas web application, and the MAES web application (MAES Studio, the MAES Project Manager, and the MAES Results and MII pages) use Google Analytics 4 (GA4) to understand aggregate visitor behavior, such as which pages are viewed, how visitors reach the site, and which steps of sign-up and checkout are completed. GA4 sets first-party cookies (for example, _ga) to distinguish visitors across a session; these are analytics cookies, not advertising cookies, and we use no third-party advertising cookies or tracking pixels.

The events we send to GA4 describe actions, not people: for example that a newsletter signup succeeded, a free tool was used, a pricing button was clicked, an account was created, a sign-in succeeded, a trial started, or a checkout began or completed (identified by the payment provider's checkout session reference). We do not send your email address, name, or anything you type into a form or tool to GA4. When an account is created, and when its trial is granted, we send only a broad category of the email address it was created with (business, personal webmail or internet provider, education, or government), worked out on our servers; never the address or its domain. When you are signed in to Atlas or MAES, your usage is associated in GA4 with a pseudonymous identifier (a keyed hash derived on our servers, not your email address or your account ID) together with your plan type, which of our products you use, and how many days into a trial you are, so that we can count usage per user across devices and between Atlas and MAES. Our servers also report account and subscription events to GA4 directly: a trial being granted, a purchase (with the plan, the amount and currency charged, and the payment provider's reference for it), a renewal (with its amount), a cancellation, and an invitation being sent or accepted. These are associated with the same pseudonymous identifier and never include your email address or name.

The website, the Atlas web application, and the MAES web application also use Microsoft Clarity to analyze how visitors interact with pages (for example, aggregated scroll and click behavior and session replays) to improve usability. In Atlas and MAES, session replays can include your use of the application while you are signed in, including what the page displays; in MAES that can include the names, inputs, and results of your studies and the contents of files you have uploaded as shown on screen. The Clarity tag is loaded without any masking overrides, so Clarity's default masking applies, which hides text typed into form fields. Clarity sets its own first-party cookies and may capture usage data as described in the Microsoft Privacy Statement. This is behavior analytics, not advertising.

Signing in to Atlas or MAES sets a strictly necessary first-party session cookie (atlas_session). It is marked httpOnly, so scripts on the page cannot read it, and it exists only to keep you signed in. Atlas and MAES may also keep a short campaign tag from the link you arrived on (for example, which pricing plan's button you clicked) in your browser's local storage for up to 30 days, so a sign-up can be attributed to that link; it contains no personal information.

Search boxes are the one place where words you type reach GA4: when you search the blog or the Atlas map, we send the search words, lower-cased and cut to 100 characters, so that we can see what visitors look for. A search that looks like an email address or a phone number is not sent at all, and one containing a long number (seven or more digits, such as a well API number) is sent only as [number]. We also record how far into a blog post you read (25, 50 and 75 percent, and whether you reached the part about Atlas) and, for the free tools that give a categorical answer, which answer they showed (for example, that a facility screened as applicable), never the values you entered. On the website, Atlas and MAES we also measure how quickly each page loads and responds (Google's Core Web Vitals: how long the main content takes to appear, how much the layout shifts while it loads, and how long the page takes to react to a click or key press), sent with the page's path only, never its query string.

You can opt out of Google Analytics by installing Google's browser opt-out add-on, and most browsers let you block or delete cookies in their settings.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Export a copy of your uploaded data

To exercise these rights, email arthur.santos@tetrasoftco.com. We will respond within 30 days.

California residents (CCPA). You have the right to know what personal information we collect, the right to delete it, and the right to opt out of sale. We do not sell personal information. To submit a request, use the contact above.

8. Children

The Services are intended for professionals and are not directed at anyone under 18. We do not knowingly collect personal information from minors. If we learn we have collected such information, we will delete it promptly.

9. Changes to This Policy

If we make material changes to this policy, we will update the effective date above and notify active users by email at least 14 days before the changes take effect.

10. Contact

Privacy questions or data requests:
arthur.santos@tetrasoftco.com
TetraSoft LLC · Fort Collins, Colorado