Trust
Security & data handling
Engineering specifications are commercially sensitive. This page states plainly what happens to your data — and nothing here claims a control that isn't implemented.
Your files are read in your browser
PDF and spreadsheet parsing happens client-side. Raw uploaded file contents are not stored on Gedelec servers — extracted text becomes part of your prototype input, and file names/sizes are recorded for the manifest.
AI provider boundary
Extraction sends your prototype input text to Google's Gemini API with a constrained schema — it returns structure, never invented values. Gedelec does not train models on your data. Google's API data-handling terms apply to the extraction call; do not upload material you may not share with a data processor.
Storage & encryption
Prototype data is stored in Supabase (Postgres), London region (eu-west-2), encrypted in transit (TLS) and at rest by the provider.
Access control
Guest prototypes are protected by a 256-bit token: only its SHA-256 hash is stored, it expires after 30 days, can be rotated, and travels only in request headers — never in URLs. Account prototypes are protected by row-level security tied to your Supabase Auth identity; Gedelec's public keys cannot read them.
Retention & deletion
Prototypes persist until you delete them. Signed-in owners can permanently delete a prototype from the Prototypes page. Guest prototypes become inaccessible when their token expires or is rotated away; email us to purge one server-side. Enquiry/lead records are kept for business correspondence.
Export ownership
Everything you export — packs, project records, capsules, CSVs, diagrams — is yours. Replay Capsules fingerprint your input (SHA-256) and pin the calculation module versions used.
Limitations of generated outputs
All generated outputs are preliminary and marked "Not for Construction". A competent person must review engineering outputs before safety-significant use, procurement, manufacture, installation or construction.
Incident contact
Security concerns or deletion requests: ged@gedelec.co.uk. We will acknowledge promptly and tell you what we find.