Privacy Policy

1. Overview

This policy explains what information DrawRight (operated by The Sky Floor, LLC, 10611 Maple Grove Rd, Charlevoix, Michigan, USA) collects, how we use it, and the choices you have. It applies to drawright.build and the DrawRight application. The short version: we collect what we need to run the product, we don’t sell your data, and your project data belongs to you.

2. Information we collect

• Account information — name, email address, password (stored hashed), company name, and profile details you provide. If you sign in with Google, we receive your name and email from Google.
• Project and financial data — the sworn statements, line items, draws, change orders, lien waivers, documents, and contacts you enter or upload. This may include information about third parties (subcontractors, owners, lenders) that you choose to add.
• Billing information — handled by Stripe. We never see or store your full card number; we store your Stripe customer ID, plan, and subscription status.
• Usage data — pages visited, features used, device and browser type, and approximate location derived from IP, collected via Google Analytics cookies and our own logs.
• Communications — feedback you submit, support emails, and emails the Service sends on your behalf (e.g., draw notifications to an owner).

3. How we use information

• To provide, maintain, and improve the Service.
• To process payments and manage subscriptions.
• To send transactional email (draw notifications, invites, receipts, account messages).
• To power AI features you invoke — see section 5.
• To understand aggregate usage and improve the product (analytics).
• To prevent fraud and abuse and to comply with legal obligations.

We do not sell your personal information, and we do not use your project data for advertising.

4. Who we share it with

We share data only with the service providers that make the product work, and only what they need:

• Stripe — payment processing and subscription billing.
• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Resend — transactional email delivery.
• AI infrastructure providers — processing for AI features (section 5).
• Google Analytics — usage analytics (section 6).
• Mapbox — rendering project location maps from addresses you enter.

We also share data at your direction: when you invite an owner to a project, email a draw request, or send a lien waiver request, the recipients see the data you send them. We may disclose information if required by law, and in a merger or acquisition your data would transfer under this same policy.

5. AI features

When you use an AI feature (draw checks, PDF import, drafting, project Q&A), the relevant project data is sent to our AI infrastructure providers to generate the response. These providers process the data solely to provide the feature and are contractually restricted from using your data to train their models. AI features run only when you invoke them or when clearly indicated in the interface.

6. Cookies and analytics

We use cookies for authentication (keeping you signed in) and Google Analytics cookies to measure how the Service is used and how visitors find us, including measuring the effectiveness of advertising. You can block analytics cookies with your browser settings or extensions without affecting core functionality. We honor the essential/authentication distinction: signing in requires cookies; analytics does not.

7. Data retention

We keep your account and project data while your account is active. After account termination, we make data available for export for 30 days on request, then delete it from production systems within a reasonable period (backups age out on a rolling schedule). Usage logs and analytics are retained in aggregate.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is restricted, and application-level row security ensures customers can only access their own projects. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you promptly.

9. Your rights

You can access and update most of your information directly in Settings. You may request a copy of your data, correction, or deletion by emailing drawright@theskyfloor.com. Depending on where you live (e.g., California, EU/UK), you may have additional statutory rights — we honor reasonable requests regardless of jurisdiction.

10. Children

The Service is for business use and not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy as the product evolves. For material changes we’ll notify you by email or in-app notice before they take effect. The “Last updated” date above always reflects the current version.

12. Contact

Privacy questions or requests: drawright@theskyfloor.com, or by mail at The Sky Floor, LLC, 10611 Maple Grove Rd, Charlevoix, MI.