Privacy Policy

SEMGate (https://semgate.net) is a research software workspace for survey design and structural equation modeling (PLS-SEM / CB-SEM). This policy explains what we collect and why.

What we collect

• Account details you provide (email address and password hash).
• Project models, uploaded datasets, survey instruments, and analysis results you create in the app.
• Technical logs needed to operate the service (for example API errors and authentication events).
• A privacy-aware device signal (browser fingerprint hash) may be collected at registration and when starting a free trial, solely to prevent repeated free-trial abuse. It is not used for advertising and is not sold.

How we use data

We use your data only to provide the SEMGate workspace: authentication, project storage, estimation jobs, exports, and support. We do not sell personal information. We do not use your research datasets for advertising.

Research data encryption

New dataset uploads are encrypted at rest (AES-256-GCM). Casual inspection of disk files or database dumps cannot read your CSV contents. Estimation jobs decrypt briefly in memory to run your model, then discard the plaintext.

By default SEMGate uses a recoverable dual-wrap model: your data keys are wrapped for everyday use and also with a sealed recovery key so that an email-verified password reset can re-key the vault and keep your projects. Recovery actions are audit-logged. This is not mathematical zero-knowledge — operators with the recovery secret could decrypt — but day-to-day staff access to research files is blocked.

Account security

Passwords are stored as secure hashes. Sign-in forms on https://semgate.net/login and https://semgate.net/register are the official SEMGate account pages. Always check that the address bar shows semgate.net before entering credentials. You can change your login email from Account settings; that updates identity only and does not re-encrypt your datasets.

Contact

For privacy questions, email info@semgate.net.