Privacy notice

Last updated: October 26, 2026. This notice explains what personal data EluteCAD (TKOResearch LLC) processes and why.

What we collect

• Account data: your name, email address, a salted password hash, and an encrypted authenticator secret and backup codes.
• Security data: sign-in sessions with IP address and browser user agent, rate-limit counters, and failed sign-in counts.
• Records you create: actions you take and electronic signatures you apply are recorded in your organization's audit trail with your name and time.
• Email delivery data from our email provider (delivery status of verification, password-reset and invitation emails).

Why

To provide and secure the service, to meet the record-keeping obligations your organization relies on (audit trails and electronic signatures), and to contact you about your account. We do not sell personal data or use it for advertising.

Service providers

We use Vercel (hosting), Neon (database), Upstash (cache), Cloudflare (DNS and object storage) and Resend (transactional email). They process data on our behalf under their data-processing terms.

Retention

Account data is kept while your account is active. Audit-trail entries and signatures are part of your organization's regulated records and are retained with them, even if you leave the organization, so that records remain attributable.

Your choices

You can request access to or correction of your personal data. Deletion requests are honored except where records must be retained for your organization's regulatory obligations. Contact: TKOResearch.