Privacy Policy

• Account information. Name, company, email address, billing address, and login credentials.
• Submitted content. Drawings, PDFs, specifications, project metadata, comments, and any other files or notes you upload for review.
• Payment information. Processed by our PCI-compliant payment processor. We do not store full card numbers on our servers.
• Usage data. Log data, device and browser information, IP address, pages viewed, referring URLs, timestamps, and similar diagnostic data.
• Cookies and similar technologies. Used to keep you signed in, remember preferences, and measure site performance. You can control cookies through your browser settings.

• To deliver, maintain, and improve the Service, including producing your shop drawing reviews.
• To create and manage your account, process payments, and provide customer support.
• To communicate with you about your reviews, account, security, billing, and Service updates.
• To monitor, prevent, and investigate fraud, abuse, or violations of our Terms of Service.
• To comply with legal obligations and enforce our agreements.

We treat the drawings and project materials you submit as confidential. We use them solely to produce your review and operate the Service.

We do not train artificial-intelligence models on your drawings. Reviews are produced using Anthropic’s API, which does not train on data submitted through it under Anthropic’s API terms.

Retention. Source drawings are automatically deleted from Plumb-controlled storage thirty (30) days after upload. Finished deliverables (the marked-up PDF and Excel comment log) are retained for ninety (90) days after delivery, after which the download links expire and the files are deleted. Both windows are enforced automatically, unless a longer retention period is required by law or specified in a separate written agreement. Mutual non-disclosure agreements are available on Studio and Enterprise plans.

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers. Vetted vendors that host our infrastructure, process payments, or deliver email, under contractual obligations to protect your data. Our subprocessors are Stripe (payments), Supabase (database, authentication, and file storage), Anthropic (the model that performs the review), Modal (the compute that runs the review pipeline), Resend (transactional email), Vercel (web hosting), and GitHub (source control).
• Legal compliance. When required by law, subpoena, court order, or to protect the rights, property, or safety of Plumb, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.
• With your consent. When you direct us to share information with a third party.

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), encryption at rest for stored files, access controls, and routine security review. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. See our security overview for detail.

Account information is retained for as long as your account is active and for a reasonable period afterward to support legal, accounting, and operational needs. Submitted drawings auto-delete thirty (30) days after upload and deliverables ninety (90) days after delivery. You may request deletion of your account and associated data at any time by emailing hello@plumbreview.com.

Depending on your jurisdiction (including residents of California under the CCPA/CPRA and residents of the EEA and UK under GDPR), you may have the right to access, correct, delete, or port your personal information, to restrict or object to certain processing, and to withdraw consent. To exercise these rights, contact us at hello@plumbreview.com. We will respond within the timeframes required by applicable law.

You may opt out of marketing emails at any time by following the unsubscribe link in any such message. Transactional emails about your account and reviews will continue.

The Service is intended for use by businesses and professionals. It is not directed to children under the age of 16, and we do not knowingly collect personal information from children.

Plumb is operated from the United States. If you access the Service from outside the U.S., you understand that your information may be transferred to, stored, and processed in the United States, where data-protection laws may differ from those of your jurisdiction.

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the revised policy on this page and updating the “Last updated” date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

BKM Ventures LLC — hello@plumbreview.com