Privacy Policy

Version 1.0.0 · Last updated November 13, 2026

This policy describes the current Plan2Build prototype at builder.chaorders.com and its use of Google sign-in.

Information we receive

When you choose Google sign-in, Google provides your Google account identifier, name, email address and profile picture where available. We use this information to authenticate you and display your signed-in status. Google asks you to authorize this sharing.

When you upload a drawing, we receive its PDF and process it to produce extracted drawing information. Cloudflare, which hosts the site, may process request information such as IP addresses, browser information and technical logs to deliver and protect the service.

Storage and sharing

We use encrypted, HTTP-only browser cookies for the sign-in session and Google authentication data. The current session is configured to expire after one hour. Uploaded PDFs are stored in a private Railway bucket and processed by a Railway worker; extracted results and an account-derived ownership key are stored in Neon. Google provides authentication, Cloudflare operates the website, and Railway stores and processes uploaded drawings. These providers process information as needed to provide their services. Information may also be disclosed when required by law.

We keep one database record for compliance purposes: when you accept our Terms of Service and Privacy Policy, we store your Google account email address, the versions you accepted and the time of acceptance. This record lets us show the same acceptance the next time you sign in, and to ask you again when the documents change.

Plan2Build uses Google user data only for the purposes described in this policy. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Uploaded drawings: retention and deletion

When you upload a drawing, the original PDF is stored in a private bucket and kept only as long as needed to parse it and show you the results; it is retained for no other purpose. Parsed results (components, takeoffs, 3D models) belong to your project and are kept until you remove the project or drawing.

You can request deletion of your uploaded drawings, parsed results and your consent record at any time by emailing sunnyluyuan@gmail.com; we will delete them and confirm back. Deleting your consent record means the next sign-in asks you to accept the current Terms and Privacy Policy again.

Your choices

You can sign out, clear this site's browser cookies, and manage the app's access in your Google Account. Uploads are retained until removed; the prototype does not yet provide self-service deletion. For privacy questions or requests, contact sunnyluyuan@gmail.com.

Changes

If our data practices change, we will update this page, its version and its "last updated" date, and ask the next signed-in session to accept the new version before continuing.