Privacy policy

1. Who this covers

This policy describes how LumberSet (LavaFocus) ("LumberSet", "we", "us") handles personal information when you visit this website or use the LumberSet application (together, the "service"). It covers the people at a yard or a builder who use the service, visitors to this website, people who write to us, and the customers and suppliers whose details a workspace enters in order to send them a quote or a request for quote.

Two roles matter. For account, billing, support and website information, we decide how it is used. For the content a workspace uploads or enters, including drawings and its customers' and suppliers' details, the workspace decides, and we process it on the workspace's behalf and on its instructions.

2. What we collect

Account information

Your name, work email address, the workspace you belong to and your role in it, and your sign-in credentials, which are stored in a form we cannot read back.

Workspace content

Plan sets you upload and the sheets rendered from them, the building models and takeoffs computed from them, estimating standards, a yard's catalog and prices, the customers or suppliers you add (typically a business name, a contact name, an email address and a phone number), the quotes, budget estimates and requests for quote you send, and the replies suppliers give.

Billing information

Payments are processed by Stripe. Card numbers are entered on Stripe's forms and are stored by Stripe, not by us. We keep your billing contact, the card brand and last four digits Stripe reports to us, and a ledger of every charge, credit, coupon and refund.

Support

What you send us by email, through the contact form, in a ticket or to the help assistant, including your name, email address, phone number if you request a call, and the page you wrote from. Bug reports and feature requests are copied to our private issue tracker on GitHub so that they get fixed, with your name but never your email address.

Usage and device information

Standard server logs: IP address, browser type, the pages and actions requested, timestamps, and errors. We use this to keep the service running and secure.

Cookies

The application uses cookies that are strictly necessary to keep you signed in. This website sets no cookies of its own, and neither uses advertising cookies or third-party analytics trackers. Details are in our cookie policy.

3. How we use information

• to provide the service: read drawings, compute takeoffs, price quotes and budgets, deliver quotes and requests for quote, and export files;
• to review takeoffs and to support you when you ask for help;
• to bill you and keep accurate financial records;
• to secure the service, prevent abuse and investigate problems;
• to improve the service, using our Reviewers' corrections and performance information that does not identify you or your customers;
• to send service messages, such as invitations, receipts, notices of changes and, where your workspace has opted in, announcements;
• to comply with the law.

We do not sell personal information, and we do not use it for advertising.

4. AI: reading drawings and the help assistant

Two parts of the service use AI, both through Anthropic's commercial API. Reading turns rendered sheets into a building model. The help assistant answers questions from our help articles and opens a ticket when it cannot. Quantities in a takeoff are computed by rules, not by AI. We do not use your drawings to train machine learning models, and we do not permit our providers to, unless your workspace opts in. Opting in is a choice an owner makes in the workspace, and it can be withdrawn.

5. Who we share information with

We share information with service providers that process it for us and under our instructions. They may not use it for their own purposes.

We also share information when the law requires it, to protect the rights and safety of workspaces, their customers or the public, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

We never share one workspace's content, catalog or prices with another workspace. A supplier who receives a request for quote sees the material list it is asked to price, not the other suppliers, their replies or the budget estimate.

6. Your customers and suppliers

When a yard enters a customer's details and sends a quote, or a builder enters a supplier's email and sends a request for quote, the workspace is responsible for that data and for having a proper basis to use it. We email the customer or supplier only to deliver what the workspace sent and to collect the reply, and we do not market to them. If you received a quote or a request for quote and have questions about your details, contact the business that sent it; we will help them respond.

7. How long we keep it

We keep a workspace's content for as long as its workspace is open, because past quotes and takeoffs are part of how a business works. When a workspace deletes a project, its plan sets, sheets, takeoffs, quotes and requests for quote are removed from live systems, and backups age out on a rolling schedule after that. When a workspace is closed, we delete its content and account information, keeping only the billing records we are required by law to retain. Support tickets are kept while they are useful for supporting you. Server logs are kept for a limited period for security purposes.

8. Security

Traffic is encrypted in transit. Drawings are stored in Cloudflare R2, which encrypts them at rest. Each workspace's data is isolated by the workspace's identity on every record and every query. Access by our staff is limited to reviewing takeoffs and supporting you. More detail is on our security page and in our data processing and security summary. No system is perfectly secure, and if a breach affects your information we will tell you as the law requires.

9. Your choices and rights

You can see and correct your account information in the application. Owners can delete projects and close the workspace. Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, or to object to certain uses of it. To exercise them, email us at the address below. We will verify the request and respond within the time the applicable law sets. We will not treat you differently for exercising your rights.

10. Children

The service is for businesses and is not directed to anyone under 18.

11. Where information is processed

We are based in the United States and process information there. Our providers may process it in other countries under their own safeguards. If you use the service from elsewhere, you understand that your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy. If a change is material, we will notify the owners of your workspace before it takes effect. The dates at the top show the version you are reading.

13. Contact

Questions or requests about privacy: hello@lumberset.com.