Privacy policy
planreviews.ai is a takeoff tool for construction estimators and plan reviewers in any trade: you upload a plan set (PDF), the service finds and counts the legend symbols on it, and you export the counts. This page says what data that involves, why we hold it, and how to get rid of it.
What we collect
- Account. Your email address and a stable user id, provided by our sign-in provider (Supabase Auth). If you sign in with Google we receive your email address, name and profile picture from Google; we use only the email address to identify your account. We never see your Google password.
- Session. A cookie (
pr_session) that keeps you signed in for up to 30 days. It holds a random id, nothing about you. - Plan sets you upload. The PDF is kept in memory on our server while you work on it. If you save a project, a copy of the PDF is stored on our server so the project can be reopened, together with the rows, counts, corrections and page selections you made.
- Symbol library. The symbols you define and name are stored with your account (their vector signatures and a small image crop), so they are recognised again on your next plan set.
- Server logs. Ordinary request logs (path, time, status, IP address) kept briefly for operating and debugging the service.
We do not use advertising or analytics trackers, and we do not sell or rent any of this data.
How we use it
- To provide the service: sign you in, show your projects, run the symbol recognition, and export your counts.
- To improve recognition for you: your symbol library and the review decisions you make apply only to your own account.
- To keep the service running: fix errors, prevent abuse, and understand load.
AI processing
Some optional steps ("Name with AI", "AI verify") send small image crops of your drawing, and the text of its legend, to Anthropic's API so a model can name or check symbols. Only the crops needed for that step are sent, never your whole plan set or your account details. Anthropic processes this data under its commercial API terms, which do not permit it to train models on customer content. You can review every count without using these steps.
Where the data lives
Our application server is hosted with Hetzner Online in the United States (Ashburn). Sign-in is handled by Supabase. DNS is provided by Cloudflare. These providers act as processors on our behalf and do not use your data for their own purposes.
Retention and deletion
- A plan set you upload but do not save is discarded when the server drops it from memory, at the latest on the next restart.
- Saved projects, including the stored PDF, are kept until you delete them from your dashboard.
- Your symbol library is kept until you delete its entries or reset it from your dashboard.
- Sessions expire after 30 days of inactivity or when you sign out.
- To delete your account and everything attached to it, email us (below). We remove it within 30 days.
Your rights
You can see, export and delete your projects and symbol library from the dashboard at any time. You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, by email. If you are in the EU, UK or a jurisdiction with similar rules you also have the right to complain to your data-protection authority.
Google user data
If you use Google Sign-In, our use of information received from Google APIs is limited to identifying your account and complies with the Google API Services User Data Policy, including its Limited Use requirements. We request only the basic profile scopes (your email address, name and picture) and do not access any other Google data.
Security
Traffic is encrypted (HTTPS). Access to the application and its data requires a signed-in, invited account. Server secrets are kept out of the code repository. No method is perfect; if you believe there has been a breach, tell us and we will investigate.
Children
The service is for professional use and not directed at anyone under 18.
Changes
If this policy changes materially we will note the new effective date here and, for signed-in users, mention it in the app.
Contact
Privacy questions and deletion requests: support@planreviews.ai.