Data Handling & Hosting Disclosure

Privacy Policy

Last Updated: October 18, 2026 • Applies to bowtierisk.com and app.bowtierisk.com

IMPORTANT DATA SECURITY & PERSISTENCE NOTICE:
Bowtie RISK is operated by an independent personal developer and hosted on a single cloud container and storage volume on Railway (railway.com). The service is provided "AS IS" under MIT-style terms with NO warranty for data security, confidentiality, or permanent data saving. Never enter confidential, proprietary, or sensitive personal data that you cannot afford to lose or expose.

1. Who Operates Bowtie RISK

Bowtie RISK (https://bowtierisk.com and https://app.bowtierisk.com) is developed and maintained by an individual personal developer. There is no corporate data protection office, dedicated security operations center (SOC), or commercial service-level agreement (SLA) backing this hosted instance.

2. Information Stored When You Use the App

If you create an account or build diagrams on https://app.bowtierisk.com, the application stores the following data on its server volume:

Account Information: Your display name, email address, an Argon2id password hash, and any optional profile fields you choose to enter (company name, job title, department, phone number, and profile avatar).
Workspace & Diagram Content: Bowtie diagrams, folders, node titles/descriptions, barrier cost/timing settings, uploaded file attachments, sharing permissions, and audit log entries (recording which user email modified a workspace and when).
Browser LocalStorage: The web app uses your browser's localStorage to store your session token (`bowtie_session_token`), active user profile, and UI layout preferences. We do not use third-party advertising trackers or sell user data.

3. Where and How Your Data Is Hosted (Railway)

All server-side data—including the SQLite database (bowtie.db), JSON workspace file (workspace.json), and uploaded attachments—is stored on a persistent volume hosted by Railway Corp. (railway.com) in the European Union (europe-west4, Amsterdam, Netherlands).

If password-reset or notification emails are enabled on the instance, email delivery is processed through the configured SMTP provider.

4. Visibility to Other Users & Instance Administrator

Diagram Sharing: Diagrams you create are private to your account unless you explicitly share them with another user's email address via the Share menu.
Company Directory Autocomplete: If the instance administrator enables the user directory feature, other signed-in users may see your name and email address in the Share autocomplete list to facilitate collaboration.
Developer / Admin Access: Because the service runs on a personal developer's Railway account, the developer/administrator has technical access to the underlying Railway volume, database, and user management console (including the ability to reset passwords, manage storage space, or delete accounts/data).

5. No Warranty for Data Security or Saving

In accordance with our Terms of Service & MIT Disclaimer:

No Security Guarantee: While we use HTTPS in transit and Argon2id for password hashing, we make no representation or warranty that the server, database, or file storage is immune from bugs, misconfigurations, or unauthorized access.
No Saving / Retention Guarantee: Storage volume space on Railway is limited. Automated snapshot pruning, software updates, volume migrations, or account maintenance may delete diagrams, version history, or accounts at any time. Always export local copies (JSON, PDF, or PNG) of your work.

6. Deleting Your Data

You can delete individual diagrams, folders, and attachments directly inside the application at any time. Because full account or workspace deletion may also occur during periodic storage cleanup on Railway, you should never rely on Bowtie RISK as your sole system of record.