Privacy policy

What we store

• Account: your email address, display name, a hash of your password, and, if you sign in with Google, the identifier Google gives us. Used to sign you in and to email you about your account.
• Documents: the sheets you draw, the floor plans and images you upload, and who they are shared with. Stored so you can open them again and so shared people can see them.
• Teams: the groups you create or join, and your role in them.
• Sessions: a cookie that keeps you signed in, and the IP address and browser of each active session so you can review and revoke them.
• Contact messages: what you send through the contact page, with the name and address you gave, kept for as long as the conversation is open.
• Email: verification, password-reset, invitation and account notices. Marketing email goes out only with your consent.

How it is used

Personal data is used to run the service for you and for the people you share with. It stays with us and the providers that host and deliver the service on our behalf under contract. Disclosure to authorities happens only where the law requires it. The site and the editor run first-party code only; the editor keeps a few preferences, such as the colour theme, in your own browser.

How long

Account data is kept while your account exists. When you delete your account, your documents and personal data are deleted within 30 days, except where a record must be kept for legal or accounting reasons. Backups roll off within a further 30 days.

Your rights

You can see and change your account details on the account page, and delete your account there. To ask for a copy of your data, or for it to be corrected or erased, use the contact page. If you are in the EU or UK you also have the right to complain to your data-protection authority.

Cookies

One cookie: the session that keeps you signed in. It is first-party and HTTP-only.

Changes

Material changes to this policy are announced by email or in the editor before they take effect.