Draft. This page is a draft under review and may change before it takes effect. Questions in the meantime: [email protected].
What we collect
- Account details: your email address, your name if you give it, and sign-in records.
- Your projects: the scans and files you upload, the models and files made from them, your messages with the agent, the notes and points you leave in the viewer, and who is on each project.
- Billing records: credits bought and used, and payment references from Stripe. Card details go straight to Stripe; we never receive them.
- Technical data: IP address, browser and device details and logs, to keep the service secure and working. The website counts visits with privacy-friendly analytics that don't use advertising cookies or follow you across sites.
- What you send us: emails, contact forms and support conversations.
How we use it
To run the service you asked for (sign-in, converting scans, running the agent, estimates, billing and files), to email you about your account and projects (sign-in codes, deliveries, credit notices), to keep the service secure and prevent abuse, and to improve it. We don't sell personal data and we don't use it for advertising.
Your uploaded scans
- Private by default. A project's scans, models and conversation are visible only to the people on that project. Nothing is published unless you share it.
- Stored privately. Files go straight from your browser to private cloud storage over an encrypted connection and are reached only through short-lived signed links.
- Processed for you. Our servers convert each scan for the viewer and measure it for your estimate. The agent works on a copy in an isolated workspace for your project. To do its work it sends text and images from your project (for example views of the scan and model) to our AI model provider, which processes them on our behalf and does not use them to train its models.
- No training. We don't use your scans, models or messages to train AI models, ours or anyone else's, without asking you first.
- Staff access. Our team looks at a project only to run or fix the service, to help when you ask, or where the law requires.
Who helps us run the service
We use a small number of providers, each only for its part of the service and under contract to protect your data:
| Provider | What for |
|---|---|
| Cloudflare | Network, security and file storage |
| Lambda | The servers that convert scans and run the agent (United States) |
| Supabase | Sign-in and our database (United States) |
| OpenAI | The AI models the agent and the estimates use |
| Stripe | Payments |
| Resend | Email (sign-in codes and notifications) |
We may also disclose data when the law requires it, or to a buyer of the business, who would be bound by this policy.
Where your data is
We are a US company and store and process data in the United States. Where data comes from the UK or the EU, we rely on standard contractual clauses or equivalent safeguards for the transfer.
How long we keep it
We keep your account and projects while your account is open. When you delete a project or close your account, we delete its files and data within 30 days, and our encrypted backups age out within about two months. We keep billing records for as long as tax and accounting law requires (usually seven years).
Security
Connections are encrypted, storage is private, each project's agent runs in its own isolated workspace, and access to production systems is limited to the people who run them. No system is perfectly secure; if a breach affects your data, we'll tell you without undue delay.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it, by emailing [email protected] from your account's address. We answer within 30 days. Depending on where you live (for example in the UK, the EU or California) you may have further rights, including complaining to your data protection authority. We don't sell or share personal information for cross-context advertising.
Children and changes
The service isn't meant for anyone under 16 and we don't knowingly collect their data. If we change this policy in a way that matters, we'll email you and post it here first. Questions: [email protected].
Other legal pages: Terms of service · Privacy policy · Credits and refunds