Privacy Policy

• We collect what is needed to run your account and read your drawings. Nothing else.
• Your uploaded documents are not used to train AI models. Not ours, not anyone’s.
• Your company’s data is isolated from every other company’s in the database itself, not just in the interface.
• You can export everything at any time, and delete everything permanently.
• We do not sell data, and we do not run advertising trackers.

Account information. Your name, email address, and company name. If you sign in with Google, we receive your name, email and profile picture from Google — not your password.

The drawings you upload. PDF plan sets and the pages within them, plus anything the system reads from them: sheet numbers and titles, room names, dimensions, schedules, legends and notes.

The work you produce. Takeoffs, quantities, pricing, estimates and proposals, including edits you make and who made them. Review history is deliberate: the point of the product is being able to show where a number came from and who approved it.

Usage and billing records. Which features are used, how many sheets were analysed, credits consumed, and subscription status. Payment card details are handled by Stripe and never reach our servers.

Acceptance records. When you accept our terms we record your name as typed, the date, the version of the text, and the IP address the acceptance came from. That record exists so both sides can establish what was agreed and when.

Support messages. Whatever you send us, so we can answer it.

Uploaded documents are sent to AI providers for the sole purpose of reading them and returning results to you. They are not used to train or improve any model, ours or a third party’s.

This is a commitment we hold our providers to as well as ourselves. It is stated here because a contractor’s plan set can contain client names, addresses, pricing and unreleased designs, and “we might use it to improve our service” is not an acceptable answer about that material.

We use a small number of sub-processors. Each is here because the product cannot work without it.

• Supabase — database, sign-in, and file storage. Your drawings live here.
• Anthropic — the AI that reads the drawings. Documents are sent for processing and returned; they are not retained for training.
• Vercel — hosting. Handles web requests; does not store your documents.
• Stripe — subscription billing. Holds your payment details. We never see a full card number.
• Resend — sends account emails such as confirmations and password resets.

We will update this list before adding anyone new to it, not after.

Every row of your data carries your company’s identifier, and the database refuses to return a row belonging to another company — regardless of what the application asks for. This is enforced by the database, not by the interface, so a bug in a screen cannot expose another company’s work.

We test this rather than assert it: an automated check runs against every table, proving one company cannot read or write another’s data, and a companion check deliberately breaks the protection to prove the test would notice.

Deleted projects: 30 days. A deleted project sits in the trash and can be restored. At 30 days it is permanently removed, including the uploaded files.

Closed accounts: 30 days. Closing your account starts the same 30-day clock. During it, everything can be restored exactly as it was. At the end, all of it is permanently deleted — projects, drawings, takeoffs, estimates, proposals, and the files in storage. We use the same period for both so there is one number to remember rather than two competing ones.

Exporting does not stop deletion. It means you hold your own copy. We will tell you the exact date your data will be destroyed, not just “in 30 days”.

Billing and tax records are kept longer where the law requires it. These are invoices and payment records, not your drawings.

Export. Takeoffs and estimates export to Excel and CSV. Proposals export as PDF. Your original uploaded files remain downloadable for as long as the project exists.

Deletion. Delete individual projects from the project list, or close the whole account from Settings. Both are permanent once the 30 days elapse.

Access and correction. Ask us and we will tell you what we hold about you, correct it, or delete it. Under Canadian privacy law (PIPEDA) you have the right to both; we would do it if you asked regardless.

We use cookies for one thing: keeping you signed in. That is a session cookie set when you sign in and cleared when you sign out.

We do not use advertising, tracking, or third-party analytics cookies. There is no consent banner on this site because there is nothing to consent to — we do not set anything that requires it.

Data is encrypted in transit and at rest. Access to your files requires a signed, time-limited link tied to your account. Administrative access is restricted to a single named account, and every administrative action is recorded in an audit log the person taking the action cannot edit.

See the Security page for detail.

Our database and file storage are hosted by Supabase, and hosting by Vercel. Data may be processed in the United States as well as Canada. AI processing happens on Anthropic’s infrastructure, which is US-based.

If your work is subject to a requirement that data stay within Canada, tell us before uploading anything, because at present we cannot guarantee it.

This is a tool for construction professionals. It is not intended for anyone under 18, and we do not knowingly collect their information.

If we change anything material we will email account holders before it takes effect, not after. The date at the top of this page always reflects the current version.