Privacy Policy

This Privacy Policy explains how Vector Stream Systems LLC ("Vector Stream Systems", "we", "us") collects, uses, and shares information when you visit our website at vectorstreamsystems.com, use the MBEstudio studio at studio.vectorstreamsystems.com, connect an AI agent to MBEstudio through its MCP server or an API key, buy credits or the Skill Pack, or contact us. Together we call these the "Services".

Vector Stream Systems LLC · Registered in Washington

Information we collect

We collect the following information:

• Contact and inquiry details. If you use the contact or scheduling form, we collect what you enter, such as your name, email address, phone number, company, preferred date and time, and message.
• Account information. To create an MBEstudio account and sign in, we collect your email address. Sign-in links are sent to that address, and we keep a record of when your account was created and whether it has administrator access.
• Engineering content. We store the content you create or submit in the Services: system models, SysML text, specifications, requirements, prompts and instructions you give the studio or an AI agent, simulation and trade study inputs, and the results we produce, such as compiled models, verification findings, geometry and exports. Each saved model keeps its version history. If you connect GitHub, we store your GitHub username, the installation you approved and which repository a model is linked to, and your saves are pushed to that repository. We use your GitHub sign-in once to confirm your account and do not store it.
• Usage and billing records. For each job we record the tool used, its status, the AI tokens and compute time consumed, the credits reserved and charged, and timestamps. We keep a ledger of credit purchases, allowances and charges, your subscription or overage settings, and a Stripe customer identifier. Card and bank details are entered with Stripe or PayPal and are not stored by us.
• Agent connections. When you connect an AI agent, we store the registration it sends (such as the client name and redirect address) and a record of the connection: which client it is, when you approved it, when it was last used and when it expires. If you create an API key, we store what is needed to recognize it and let you revoke it.
• Skill Pack purchases. If you buy the Skill Pack, we store the order and licence details needed to deliver it and to let you download it again.
• Chat messages. If you use the chat assistant on our website, we process the messages you type to generate replies.
• Information collected automatically. Our servers and service providers may log information such as IP address, browser type, device information, pages requested, and timestamps. To enforce free trial limits we keep a salted hash of your IP address and browser, not the address itself. We use this information for security, abuse prevention, troubleshooting and reliability.

Cookies and browser storage

When you sign in, we set a cookie that keeps you signed in for up to 30 days. Free trials use cookies that count trial runs, for up to 30 days. The studio also saves preferences, drafts and example model state in your browser's storage, which stays on your device. Provider keys you enter stay in your browser for the session, or until you remove them if you choose to remember them on that device. We do not use analytics or advertising trackers, and we do not serve targeted advertising. Some service providers we use, such as our content delivery network or payment processors, may set their own cookies to provide their services.

How we use information

We use the information we collect to:

• Provide the Services: run the jobs you or your agent request, save and show your models, and deliver what you buy
• Create and secure your account, sign you in, and connect the agents you approve
• Measure usage, reserve and charge credits, process payments, and keep billing records
• Respond to inquiries, provide support, and schedule meetings
• Prevent fraud, abuse and unauthorized access, and enforce usage limits
• Maintain, troubleshoot and improve the Services

AI processing

Some features send your content to an AI model to generate a result. Which model receives it depends on how you run the job:

• Managed jobs. When MBEstudio's own AI generates or edits a model for you, your prompt and the model content needed for the task are sent to Anthropic, which provides the model.
• Your own provider key. If you run a job with your own key, your content is sent to the provider you choose (for example Anthropic, OpenAI, Moonshot or DeepSeek) under your account with that provider. Your key is kept in your browser and sent with that request only. We do not store it, and it is removed from the job record.
• Agent-authored jobs. When your own AI agent writes the specification and MBEstudio compiles and checks it, we do not send your content to an AI provider.
• Models on our own servers. Some features, such as free trial runs, the website chat assistant and supplier suggestions in the studio, use AI models that run on servers we operate. Your content is not sent to an outside AI provider for these.

AI providers process this content to return the result, under their own terms and privacy policies. We do not use your engineering content or prompts to train AI models.

How we share information

We do not sell your personal information. We share it only as described here.

• Service providers. We use vendors to operate the Services: Cloudflare (website hosting, content delivery, security, and storage of contact and licence records), Stripe and PayPal (payments), Resend (sign-in and notification emails), the AI providers described above, and GitHub if you choose to connect a repository. They process information on our behalf to provide their service.
• Parts search. When the studio looks up parts to buy for a model, it sends the part search terms and your selected country to search services and retailers, such as Brave Search, SerpAPI, eBay, DigiKey, Mouser, Amazon and Adafruit. It does not send your account details or your model. Some retailer links carry our affiliate tag, so we may earn a commission on a purchase; we record which items were clicked, without your account or model.
• Agents you connect. An AI agent you connect can read the results of the jobs it runs, your credit balance, and the other information its tools return. What that agent does with the information is governed by its provider's terms.
• Legal and safety. We may disclose information if required by law or if we believe disclosure is necessary to protect the rights, safety, and security of Vector Stream Systems, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of all or part of our business, information may be transferred as part of that transaction.

Data retention

We keep information only as long as we need it for the purposes in this Policy:

• Sign-in links expire after 15 minutes, and sign-in sessions after 30 days.
• Agent connections expire 30 days after you approve them, and you can revoke them at any time. Unused agent registrations expire after one year.
• Your account, models and job records are kept while your account is open. When you delete a model, it is removed from your account and kept in an archive until we permanently erase it, which we do on request. When you delete your account, or ask us to, we delete or anonymize your account, models and job records, and erase your saved models including deleted ones, except where we must keep records as described next.
• Payment, credit and billing records are kept as long as needed for accounting, tax and legal obligations.
• Contact messages are kept as long as needed to respond and to keep ordinary business records.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. For example, sign-in links, API keys and agent refresh tokens are stored only in hashed form, agent access tokens expire after one hour, and provider keys you supply are never stored by us. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices

You can see and disconnect connected agents and revoke API keys from your account page in the studio, delete saved models, and unlink a model from its GitHub repository at any time. Unlinking leaves the GitHub repository as it is. You can delete your account yourself from the Billing and credits page of your studio account, once any subscription is cancelled. You may also request access to, correction of, or deletion of your personal information, or deletion of your account, by contacting us at streamline@vectorstreamsystems.com. We will respond consistent with applicable law.

Where information is processed

We are based in the United States. Information is processed in the United States and in other countries where our service providers operate.

Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and update the dates above. If a change materially affects how we handle information you have already given us, we will tell you by email or in the studio before it takes effect.

Contact us

Questions about this Privacy Policy can be sent to streamline@vectorstreamsystems.com.