Terms of Use & Privacy Policy

1. Acceptance of Terms

By accessing or using FTA Studio (the "Application"), available at ftastudio.app, you agree to be bound by these Terms of Use and Privacy Policy (collectively, the "Terms"). If you do not agree to these Terms, you must not use the Application.

These Terms apply to all visitors, users, and others who access the Application, whether on the free Community plan or a paid Professional or Enterprise plan.

2. Description of Service

FTA Studio is a web-based Fault Tree Analysis tool designed to support safety, reliability, and risk engineering workflows. The Application provides features including fault tree diagramming, minimal cut set computation (MOCUS), quantitative analysis, importance measures, export, and reporting.

The Application is designed to conform with industry standards including IEC 61025:2006 (Fault tree analysis), with optional support for workflows referenced by IEC 61508, ISO 26262, ARP4761, EN 50126, and MIL-STD-882.

3. Plans

3.1 Community

Community is provided free of charge for individual and commercial use, subject to usage limits (see the pricing page). It requires a free account and an internet connection. Your projects and fault trees are stored in your organisation's isolated workspace on our servers; access is limited to the members you invite.

Community includes the full analysis suite — fault tree diagramming, MOCUS minimal cut sets, importance measures, Monte Carlo simulation, FMEA with RPN scoring, Event Tree Analysis, the hazard register, and every client-side export format — within its usage limits. The approval workflow and the organisation audit log are Professional and Enterprise features.

3.2 Professional

Professional is available under a paid annual per-seat subscription. It removes the Community usage limits on projects and fault trees, allows as many organisation members as you hold seats for, and adds the approval workflow with its organisation audit log and server-side high-iteration Monte Carlo simulation. Where self-serve card payment is unavailable on your deployment, we will arrange the subscription and invoice you directly.

3.3 Enterprise

Enterprise is available under a paid annual per-seat agreement. In addition to everything in Professional, it provides cryptographically signed and independently verifiable IEC 61025 exports, self-hosted deployment, and priority handling of email support requests. We aim to make a first response to Enterprise support requests within 24 hours on business days. This is a target for an initial response, not a resolution time, and it does not apply to requests sent outside business days. Any different or additional response-time commitment is the one stated in your individual agreement. Enterprise terms, pricing, and usage limits are specified in your individual agreement, which prevails over this section where the two differ.

3.4 Operational Limits

Regardless of plan, the Application applies operational limits to protect service stability: an individual fault tree may not exceed 4 MB, a project's reusable event library may not exceed 1 MB, and automatic version snapshots are retained for the most recent 30 saves per fault tree. Version snapshots you name explicitly, and versions referenced by an approval record, are retained and not pruned.

3.5 Feature Availability

We reserve the right to modify, add, or remove features from any plan at any time. We will make reasonable efforts to communicate significant changes in advance via the Application or through the email address associated with your account.

4. Safety-Critical Disclaimer

Fault tree analysis is one component of a comprehensive safety assessment process. The correctness of any analysis depends on the completeness and accuracy of the input data, the appropriateness of the modelling assumptions, and the competence of the analyst. The Application performs computations based on the data you provide — it does not validate the completeness, correctness, or suitability of that data for any particular application.

You acknowledge and agree that:

• The Application is a decision-support tool, not an authority on safety compliance.
• You are solely responsible for verifying all outputs against your applicable standards, regulatory requirements, and organisational procedures.
• No output of the Application should be treated as a certified safety assessment without independent review by a qualified safety engineer.
• The developers and operators of FTA Studio accept no responsibility for safety-critical decisions made based on the Application's outputs.

5. Intellectual Property

5.1 Our Intellectual Property

The Application, including its source code, design, user interface, documentation, branding, and all associated intellectual property, is owned by FTA Studio and is protected by copyright, trademark, and other applicable intellectual property laws. All rights not expressly granted herein are reserved.

5.2 Licence Grant

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable licence to use the Application for its intended purpose — performing fault tree analysis and related engineering work. This licence does not include the right to:

• Copy, modify, adapt, or create derivative works of the Application or its source code.
• Reverse-engineer, decompile, disassemble, or otherwise attempt to extract the source code, algorithms, or internal logic of the Application.
• Remove, alter, or obscure any proprietary notices, branding, or licensing information.
• Redistribute, sublicence, sell, lease, or otherwise transfer the Application or any licence key to a third party.
• Use the Application to build a competing product or service.

5.3 Your Content

You retain full ownership of all project data, fault tree models, analysis results, and exported files that you create using the Application. We claim no intellectual property rights over your content.

6. Your Data & Projects

We maintain versioned history of your saved fault trees. You may also export any fault tree to a .json file at any time for your own backup or records, and you remain responsible for retaining any exports required for your safety records.

Paid-plan features that involve additional server-side processing — server-side high-iteration Monte Carlo simulation (Professional and Enterprise) and signed exports (Enterprise) — process your tree data to produce the requested result and are described in Section 7 (Privacy Policy).

7. Privacy Policy

7.1 What We Collect

We are committed to collecting the minimum data necessary to operate the service. Here is exactly what we collect in each context:

Account & workspace data: To provide the service we store your account details (email, a securely hashed password, optional display name, and your organisation and role) and the projects, fault trees, and event libraries you create. This data is stored in your organisation's isolated workspace and is used solely to operate the service for you. We do not sell your data, and we do not use your fault tree content for advertising or profiling.

Authentication: We set a single httpOnly session cookie to keep you signed in. It contains only a signed session token — no tracking identifiers — and is not used for advertising or cross-site tracking.

Enterprise enquiry form: When you submit an Enterprise enquiry via the pricing page, we collect the information you provide (name, email, organisation, industry, seat count, applicable standard, and optional notes). This data is stored securely and used exclusively to process your licence request and communicate with you about it.

Cloudflare hosting: The Application is hosted on Cloudflare. Cloudflare may process standard HTTP request data (IP address, user agent, timestamps) in accordance with their own privacy policy for the purposes of content delivery, security, and DDoS protection.

Approximate location and sign-in times: When you sign in we record the time, and a two-letter country code that Cloudflare derives from your connection. We use these to support you (knowing your working hours and rough region makes a support conversation faster) and to understand which regions the service is used in. We do not store your IP address against your account — only the country code, which is deliberately coarse. It is approximate: if you connect through a corporate VPN it reflects wherever your employer routes traffic, not where you are. We keep the country you signed up from and the country you most recently signed in from; we do not build a history of your movements.

Abuse prevention: To stop brute-force and spam attacks we record short-lived rate-limiting entries keyed to an IP address and an email address when someone attempts to sign in, register, or request a password reset. These are operational security records, held briefly and used for no other purpose.

Support submissions: When you submit the Enterprise enquiry form or a bug report, we store the information you provide in our database so we can respond to it and track the issue, together with the IP address and country the submission came from so we can identify and block abuse of these public forms. Bug reports may include the diagnostic details shown to you on the form before you submit.

7.2 What We Do Not Collect

• We do not use your fault tree content for anything other than operating the service for you.
• We do not run analytics of any kind — no page-view measurement, no advertising trackers, no marketing pixels, and no third-party advertising scripts, on either the marketing pages or the Application.
• We do not set advertising or cross-site tracking cookies. We set one strictly-necessary cookie to keep you signed in; it is HttpOnly and Secure, so it cannot be read by scripts. Browser localStorage holds only convenience state — your display settings, your name and organisation name so the interface can render before the first request completes, and which fault tree you had open last. No credential or session token is stored there.
• We do not sell, share, or disclose personal data to third parties for marketing or advertising purposes.

7.3 Data Retention & Deletion

Your workspace. Your projects, fault trees, event libraries and approval records are retained for as long as your organisation's account is open, so that the audit trail behind a safety artifact remains available. Deleting a fault tree also deletes its version history and approval records; deleting a project deletes the fault trees within it.

Version history. Two different things are kept under this heading, and only one of them is capped. Automatic snapshots — the copy taken every time the editor saves — are kept to the depth your plan states on the pricing page, and older ones are deleted as new ones are taken. Checkpoints you name yourself, versions you restore, and any version referenced by a review or approval action are not subject to that depth: they are retained for as long as your organisation's account is open, because they are the evidence behind a signed-off safety artifact rather than editing history. Changing plan changes the automatic depth from that point on; it never deletes a checkpoint or an approval-referenced version.

Closing your account. You may request deletion of your organisation and all of its workspace data at any time by contacting support@ftastudio.app. We will action it within 30 days. Export your data first if you need to keep it — deletion is irreversible, and we do not retain a copy on your behalf.

Deleting an individual account within an organisation. Deleting your own account while your organisation remains open revokes your credentials immediately — the stored password material is erased and the account can no longer sign in. Your email address is retained on that record for one reason: it identifies you as the person who submitted, approved or rejected a fault tree, and those approval records are part of the safety evidence your organisation relies on. Removing it would leave signed-off safety artifacts attributed to nobody. If you need the address itself erased, contact us and we will discuss it against the integrity of the approval records it appears in — deleting the whole organisation removes it along with everything else.

Sign-in and location records. We keep only the most recent sign-in time and country per account, overwritten each time you sign in — there is no history to accumulate. They are deleted with the account. Rate-limiting entries are short-lived by design and are pruned automatically.

Other records. Enquiry and bug-report submissions are retained for as long as necessary to respond and maintain the business relationship. Security and audit logs are retained for their operational lifetime. Billing records are retained for the period required by applicable tax and accounting law, independently of account deletion.

7.4 Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, delete, or request portability of any personal information we hold about you. To exercise these rights, please contact us at support@ftastudio.app.

7.5 Third-Party Services

The Application integrates with the following third-party services, each of which operates under its own privacy policy:

• Cloudflare — hosting, content delivery, DDoS protection, database and object storage, and the Turnstile bot check used on our public forms.
• Stripe — payment processing for paid subscriptions. Where you subscribe by card, your billing email is shared with Stripe and your card details are collected by Stripe directly; we never receive or store them.
• Resend — email delivery. This covers service email we send because you hold an account (email verification, organisation invitations, password resets, enquiry and bug-report notifications, and notices about changes to the service), and — separately — product and marketing email, which we send only if you have opted in. Every marketing message carries a one-click unsubscribe link, and unsubscribing takes effect immediately and applies to every account registered to that address. Unsubscribing never stops service email, because those messages are how you recover an account and confirm who you are.
• Google Fonts — web font delivery across our marketing pages and the Application.

8. Limitation of Liability

In no event shall FTA Studio, its developers, operators, or affiliates be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of data, loss of profits, business interruption, or cost of procurement of substitute services, however caused and regardless of the theory of liability (contract, tort, strict liability, or otherwise), even if advised of the possibility of such damages.

Where liability cannot be excluded or limited by law, our total aggregate liability for all claims arising out of or related to the Application shall not exceed the amount you paid (if any) for the Application in the twelve (12) months preceding the claim.

9. Disclaimer of Warranties

The Application is provided on an "as is" and "as available" basis, without warranties of any kind, either express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, or reliability.

We do not warrant that the Application will be uninterrupted, error-free, or free of harmful components. We do not warrant the accuracy, completeness, or reliability of any analysis results, computations, or outputs produced by the Application. You assume full responsibility for the selection of the Application to achieve your intended results and for the interpretation and use of its outputs.

10. Changes to These Terms

We may update these Terms from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to provide notice via the Application or through email for Enterprise users. Your continued use of the Application after any changes constitutes acceptance of the updated Terms.

11. Termination

We may suspend or terminate your access to the Application at any time for violation of these Terms, including but not limited to reverse-engineering, unauthorised redistribution, or licence abuse. Upon termination, your licence to use the Application is immediately revoked.

On the Community plan you may stop using the Application at any time, and may request deletion of your organisation and its data as described in section 7.3. On Professional, you may cancel your subscription at any time; it remains active until the end of the paid period. On Enterprise, termination and refund terms are governed by your individual agreement.

12. Governing Law

These Terms shall be governed by and construed in accordance with the laws of India, without regard to conflict of law provisions. Any disputes arising from or relating to these Terms or the Application shall be subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka, India.

13. Provider & Contact

FTA Studio is provided by Aadeepra Rail Assure Pvt Ltd, a company registered in India. In these Terms, "we", "us" and "our" refer to that company. FTA Studio is one of its products.

If you have any questions about these Terms or our privacy practices, please contact us at:

Email: support@ftastudio.app
Web: ftastudio.app