Privacy Policy
Effective Date: October 26, 2026 · Last Updated: October 26, 2026
1. Introduction
piLabs Inc. ("piLabs", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of our users ("you", "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information and research data when you visit our website, use the piOS platform, πStudio, πLive, or interact with our computing infrastructure.
Please read this Privacy Policy carefully alongside our Terms and Conditions. By using the Services, you consent to the practices described in this policy.
2. Information We Collect
We collect information in three categories:
A. Account & Authentication Data
When you sign up or log in, we collect your email address, display name, profile avatar, authentication provider identifier (e.g., Google OAuth or Microsoft Entra ID), and session credentials managed via Supabase.
B. Accelerator Models, Lattices & Research Artifacts
When you design or simulate accelerators in πStudio and πLive, we store your lattice structure files (.pie), magnet parameters, diagnostic and BPM readings, experiment trajectories, simulation telemetry, and session logs.
C. Usage, Billing & Telemetry Data
We collect computational resource metrics (GPU/CPU execution duration, compute balance expenditures, storage quotas), transactional identifiers (Stripe customer IDs and checkout session states), and system performance logs. We never store raw credit card numbers or complete banking credentials on piLabs servers.
3. Confidentiality of Physics Models & Lattices
OUR RESEARCH CONFIDENTIALITY GUARANTEE:
We understand that accelerator lattices, beamline configurations, and experimental datasets represent valuable institutional research and intellectual property. Your private designs and simulation outputs are strictly private to your account. We DO NOT use your private research data or proprietary lattices to train public foundation models or share them with third-party researchers without your explicit opt-in consent.
4. How We Use Your Information
We use the collected information for specific, legitimate operational purposes:
- To provide, operate, and maintain the piOS platform, CAD workspace, and live surrogate engines.
- To execute physics simulations, compute transfer matrices, calculate optical functions, and run NVAR predictive diagnostics.
- To track and enforce compute token quotas, storage tiers, and billing subscriptions.
- To detect, prevent, and address technical faults, security vulnerabilities, or infrastructure misuse.
- To send critical transactional notifications, including billing invoices, passwordless magic links, and security alerts.
5. Third-Party Service Providers
We partner with trusted third-party service providers who assist us in operating our platform under strict contractual data protection standards:
- Supabase: For database hosting, authentication, storage, and row-level security policy enforcement.
- Stripe: For secure payment processing, subscription management, and compute token top-up checkouts.
- Cloud Compute Providers: For containerized cluster execution, high-performance computing, and simulation workloads.
We do not sell, rent, or trade your personal data or research information to data brokers, advertisers, or any third parties.
6. Data Security & Storage
We implement industry-standard administrative, physical, and technical security measures to protect your information:
- Encryption in transit using modern TLS (HTTPS) cryptographic protocols.
- Encryption at rest for all database tables and cloud storage volumes.
- Database-level Row-Level Security (RLS) ensuring strict tenant isolation between user workspaces.
- Continuous infrastructure monitoring and principle of least privilege (PoLP) access controls.
7. Data Retention & Your Rights
We retain your personal information and research data for as long as your account remains active or as needed to provide you with the Services.
Depending on your jurisdiction (such as under the EU General Data Protection Regulation "GDPR" or the California Consumer Privacy Act "CCPA"), you possess rights regarding your data:
- Right of Access: You can inspect and export your designs, datasets, and profile information at any time.
- Right to Rectification: You may update or correct your profile details in Account Settings.
- Right to Erasure (Deletion): You may request the permanent deletion of your account and all associated designs, sessions, and trajectories via Account Settings or by contacting us.
- Right to Restrict Processing: You may object to or limit certain processing of your personal information.
8. Cookies & Local Browser Storage
piOS uses only strictly necessary cookies and local storage tokens required for authentication sessions, CSRF protection, and UI theme preferences (such as light or dark mode). We do not deploy third-party advertising trackers or behavioral analytics cookies across external sites.
9. International Data Transfers
piLabs is headquartered in the United States, and your data may be processed on servers located in the United States or other jurisdictions where our cloud infrastructure providers operate. We ensure that such transfers comply with applicable legal frameworks and provide appropriate data protection safeguards.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect enhancements in our platform, new features, or regulatory obligations. Any modifications will be posted with an updated "Last Updated" date. We encourage you to review this policy periodically.
11. Contact Us
For any questions, privacy inquiries, data subject access requests, or concerns regarding your personal data, please reach out to our privacy officer at: