Privacy Notice – RHCES Engineering Tools registration
Last updated: September 2026
RHCES Engineering Tools is a Windows desktop application published by RHCEPEDA ENGINEERING SERVICES (“RHCES”, “we”), Antipolo City, Rizal, Philippines. Each tool in the application must be registered before it is used. This notice explains what we collect when you register, why, how long we keep it, and how you can have it deleted. It covers this registration only; other RHCES products and services have their own arrangements.
What we collect
| Data | Where it comes from | Why we need it |
|---|---|---|
| Google account ID (an opaque number Google assigns to your account) | Google, when you choose “Sign in with Google” | To recognise the same person on the next sign-in, even if the e-mail address changes. |
| E-mail address and name of your Google account | Google, with your consent on the Google sign-in screen | To show you which account is registered, to contact you about your registration, and to link a future paid licence to you. |
| Anonymous PC identifier | Computed by the application on your PC | To make sure a registration is used on the number of PCs it covers (one PC per tool). It is a one-way hash (SHA-256) of a hardware identifier of your PC; the hardware identifier itself never leaves your PC and the hash cannot be turned back into it. |
| PC name (the Windows computer name) | Your PC | So you can recognise your PC in the application, for example when a tool is registered on another PC. |
| Registration records: which tool, which plan, dates of registration and of moving it to another PC | Created when you register a tool | To provide the registration and, later, paid licences on the same record. |
| IP address and technical log of sign-in, registration and support requests, and the application version | Your connection to rhces.com | For security: detecting abuse and limiting repeated requests. |
We do not receive your Google password, your contacts, your files, or anything else from your Google account. We ask Google only for the basic sign-in scopes openid, email and profile. We do not collect the contents of your engineering projects: designs and calculations stay on your PC.
RHCES’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How it works on your PC
Signing in opens your normal web browser on Google’s own page. After you sign in, our server exchanges the one-time code with Google, stores the details above, and gives the application a sign-in token and a signed registration certificate. The application keeps them in your Windows user profile, encrypted with Windows data protection, so registered tools can open without a network connection. The certificate is refreshed automatically when the PC is online.
Why we use it (purposes)
- to register RHCES Engineering Tools to you and show your registration status;
- to keep a registration to the PC it covers and to let you move it to another PC;
- to protect the service against abuse;
- to contact you about your registration or, in future, about paid licences you choose to buy.
We do not use this data for advertising and we do not sell it or share it for others’ marketing.
Who else handles it
- Google processes your sign-in under its own privacy policy.
- Our web host stores the database and server logs for rhces.com.
We disclose the data to others only if the law requires it.
How long we keep it
- Account, PC and registration records: for as long as your registration exists, until you ask us to delete it.
- Sign-in sessions: up to 180 days after last use; ended or expired sessions are removed about 30 days later.
- Security logs (including IP address): up to 12 months.
- Support messages you send from the application (your message and subject, your name, e-mail address and PC name, the IP address it was sent from, and the app details you choose to include) are e-mailed to info@rhces.com. Our server keeps its copy for up to 12 months; the e-mail stays in our support mailbox for as long as we need it to handle your request.
- Request counters used for rate limiting: about one hour.
- Certificate on your PC: valid for 7 days between online refreshes; you can remove it any time with “Sign out” in the application.
Your choices and rights
You can sign out in the application at any time. You may ask us to show you the data we hold about you, correct it, or delete your account and registrations, and you may object to or restrict its processing. To do so, write from your Google account e-mail address to rhcepedaengineeringservices@gmail.com. We aim to answer within 30 days. You can also revoke RHCES’s access to your Google account from your Google account permissions page. If you are in the Philippines and are not satisfied with our reply, you may complain to the National Privacy Commission.
Deleting your registration removes your account, PCs, registrations and security-log entries linked to your account from our database. A tool that was registered will then ask you to register again the next time you open it.
Security
Connections use HTTPS. Sign-in tokens are stored on our server only as one-way hashes. The Google sign-in secret and the certificate signing key are kept outside the public part of the website. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.
Changes
We may update this notice when registration changes (for example when paid licences are introduced). The date at the top shows the latest version.
Contact
RHCEPEDA ENGINEERING SERVICES · Antipolo City, Rizal, Philippines
rhcepedaengineeringservices@gmail.com