Privacy policy

1. Who this covers

This policy describes how LumberSet ("we", "us") handles personal information when you visit this website or use the LumberSet application (together, the "service"). It covers the people at a yard who use the service, visitors to this website, and the customers of a yard whose details a yard enters in order to send them a quote.

Two roles matter. For account, billing and website data, we decide how the information is used. For the content a yard uploads or enters, including drawings and its customers' details, the yard decides, and we process it on the yard's behalf and on its instructions.

2. What we collect

Account information

Your name, work email address, the yard you belong to and your role in it, and your sign-in credentials, which are stored in a form we cannot read back.

Yard content

Plan sets you upload and the sheets rendered from them, the building models and takeoffs computed from them, your estimating standards, your catalog and prices, the customers you add (typically a business name, a contact name, an email address and a phone number), and the quotes you send.

Billing information

Payments are processed by Stripe. Card numbers are entered on Stripe's forms and are stored by Stripe, not by us. We keep your billing contact, the card brand and last four digits Stripe reports to us, and a ledger of every charge, credit and refund.

Usage and device information

Standard server logs: IP address, browser type, the pages and actions requested, timestamps, and errors. We use this to keep the service running and secure.

Messages

What you send us by email, and the record of quotes and invitations the service sends on your behalf.

Cookies

The application uses cookies that are strictly necessary to keep you signed in. This website does not use advertising cookies or third-party analytics trackers.

3. How we use information

• to provide the service: read drawings, compute takeoffs, price and deliver quotes;
• to review takeoffs and support you when you ask for help;
• to bill you and keep accurate financial records;
• to secure the service, prevent abuse and investigate problems;
• to improve the service, using reviewers' corrections and performance information that does not identify you or your customers;
• to send service messages, such as invitations, receipts and notices of changes;
• to comply with the law.

We do not sell personal information, and we do not use it for advertising.

4. AI reading and model training

Reading drawings into a building model is done with AI, through our provider's commercial API. Rendered sheets are sent for that purpose and for nothing else. We do not use your drawings to train machine learning models, and we do not permit our providers to, unless your yard opts in. Opting in is a choice an owner makes in the workspace, and it can be withdrawn.

5. Who we share information with

We share information with service providers that process it for us and under our instructions: payments (Stripe), file storage (Cloudflare), AI reading (Anthropic), transactional email (Resend), and hosting. They may not use it for their own purposes. The current list, with what each one processes, is on our security page.

We also share information when the law requires it, to protect the rights and safety of yards, their customers or the public, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

We never share one yard's content, catalog or prices with another yard.

6. Your customers

When a yard enters a builder's or contractor's details and sends them a quote, the yard is responsible for that data and for having a proper basis to use it. We email the customer only to deliver the quote the yard sent, and we do not market to them. If you are a customer of a yard and have questions about your details, contact the yard; we will help them respond.

7. How long we keep it

We keep a yard's content for as long as its workspace is open, because past quotes are part of how a yard works. When a yard deletes a project, its plan sets, sheets, takeoffs and quotes are removed from live systems, and backups age out on a rolling schedule after that. When a workspace is closed, we delete the yard's content and account information, keeping only the billing records we are required by law to retain. Server logs are kept for a limited period for security purposes.

8. Security

Traffic is encrypted in transit. Drawings are stored in Cloudflare R2, which encrypts them at rest. Each yard's data is isolated by the yard's identity on every record and every query. Access by our staff is limited to reviewing takeoffs and supporting you. More detail is on our security page. No system is perfectly secure, and if a breach affects your information we will tell you as the law requires.

9. Your choices and rights

You can see and correct your account information in the application. Owners can delete projects and close the workspace. Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, or to object to certain uses of it. To exercise them, email us at the address below. We will verify the request and respond within the time the applicable law sets. We will not treat you differently for exercising your rights.

10. Children

The service is for businesses and is not directed to anyone under 18.

11. Where information is processed

We are based in the United States and process information there. If you use the service from elsewhere, you understand that your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy. If a change is material, we will notify the owners of your workspace before it takes effect. The date at the top shows when it last changed.

13. Contact

Questions or requests about privacy: hello@lumberset.com.