Legal

Privacy Policy

Last updated: July 9, 2026

1. Introduction

EasyBuilds LLC, operating as Lode ("Lode," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and retain information when you use our website and web application available at lode.build (collectively, the "Services").

This Privacy Policy is intended for users in the United States. The Services are not directed to individuals located in the European Union (EU) or European Economic Area (EEA), and we do not market the Services to the EU/EEA at this time.

By accessing or using the Services, you agree to this Privacy Policy and our Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

2. Information We Collect

We collect information to provide and improve the Services, process subscriptions, support users, and protect the security and integrity of the Services.

2.1 Information You Provide to Us

Depending on how you use the Services, you may provide:

  • Account information (required): your name and email address.
  • Project and document data (optional): construction drawings, revision issuances, PDFs, sheet metadata, project names, and other materials you upload or enter.
  • Communications: messages you send to customer support, survey responses, and feedback you submit.

You can choose not to provide optional information, but some features may not work without it.

2.2 Payment and Billing Information

If you purchase a subscription, payments are processed by our payment processor, Stripe. Stripe collects and processes your payment information (such as payment card details and billing address) in accordance with Stripe's terms and privacy policy. We typically receive limited information from Stripe, such as your billing status, the last four digits of a payment card, expiration date, and transaction identifiers, which we use for billing records, fraud prevention, and customer support.

2.3 Third-Party Sign-In (Optional)

If you choose to sign in with Google or Microsoft, we receive information from those providers such as your basic profile information (for example, name and email) as permitted by your account settings and the permissions you grant. You can revoke access at any time through your third-party account settings.

Lode's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2.4 AI-Assisted Features ("Doc")

Doc is our optional AI-assisted feature. It is disabled by default and can be enabled or disabled on a per-project basis. When Doc is disabled for a project (the default), no content from that project is sent to any AI provider.

When you enable Doc for a project, we send certain information from that project to our AI provider (Anthropic) to generate output. This includes document metadata (such as sheet numbers, titles, dates, and package names) and, for revision analysis and change annotations, extracted text from the affected drawing sheets. We do not send your account information (such as your name or email) or the raw PDF files themselves.

We do not use your User Content to train our own AI models. Lode uses Anthropic's commercial API; under Anthropic's commercial terms, inputs and outputs submitted through that API are not used to train Anthropic's models. AI output may be inaccurate or incomplete and is not a substitute for professional judgment; see our Terms of Service for details.

We keep minimal AI interaction logs only when needed for debugging, quality assurance, and abuse or security investigation.

2.5 Information Collected Automatically

Like most web services, we automatically collect certain information when you use the Services, such as:

  • Log and device data: IP address, browser type, device identifiers, operating system, and referral URLs.
  • Usage data: how you interact with the Services (for example, pages visited, features used, and actions taken).
  • Approximate location information inferred from your IP address (for example, city/region).

2.6 Cookies and Similar Technologies

We use cookies and similar technologies for authentication, security, and to remember your preferences. We may also use cookies and similar technologies for analytics (for example, PostHog and Vercel Analytics) to understand how the Services are used and to improve them.

You can control cookies through your browser settings. If you disable cookies, some features of the Services may not function properly.

2.7 Do Not Track Signals

We do not use the Services to track you across third-party websites for targeted advertising and therefore do not respond to "Do Not Track" (DNT) signals.

2.8 Information About Recipients of Shared Documents

When an account holder shares documents through the Services (for example, by sending a transmittal or a share link), we collect information about the people who receive or open those documents, even if they do not have a Lode account. This may include a recipient's name and email address (when provided at the time of access), IP address, browser and device (user-agent) information, and open and download activity. We use this information to deliver the shared documents, provide delivery and access confirmation, and maintain the sharing account holder's transmittal and audit records. This information is part of the sharing account's project records and is deleted when those records are permanently deleted, as described in Section 6.

3. How We Use Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Services;
  • Compile and manage your drawing sets, process revision issuances, and generate outputs you request;
  • Create and manage accounts;
  • Process subscriptions, payments, and billing;
  • Provide collaboration features you enable (for example, sharing projects with team members you invite);
  • Provide customer support and communicate with you about the Services;
  • Monitor, detect, prevent, and address fraud, abuse, security incidents, and technical issues;
  • Conduct analytics and product research, including aggregated and de-identified analytics;
  • Comply with legal obligations and enforce our Terms of Service; and
  • Provide optional AI-assisted document analysis features.

We may de-identify or aggregate information so it can no longer reasonably be used to identify you. We may use de-identified or aggregated information for product improvement, analytics, and research purposes.

4. How We Share Information

We do not sell your personal information. We also do not share personal information for cross-context behavioral advertising (also called "targeted advertising") as those terms are defined under many U.S. state privacy laws.

4.1 With Service Providers

We use third-party service providers to help operate the Services. These providers process information on our behalf and subject to contractual confidentiality and security obligations. Service providers may include:

  • Web hosting and infrastructure providers (for example, Vercel for our website and web application, and Railway for our application backend and processing services).
  • Database providers (for example, Supabase) for accounts and project metadata.
  • Document storage providers (for example, Amazon Web Services (AWS) S3, and in some cases Cloudflare R2) for uploaded and compiled documents.
  • Long-term archival storage providers (for example, AWS S3 Glacier) for archived documents.
  • Job processing and queue providers (for example, a managed Redis service) used to process uploads and generate outputs.
  • Analytics providers (for example, PostHog and Vercel Analytics).
  • Error monitoring and debugging providers (for example, Sentry).
  • Payment processors (for example, Stripe).
  • AI providers (for example, Anthropic) when you enable Doc features for a project.
  • Email and communications providers (for example, Resend).

4.2 With People You Share With

If you invite collaborators to a project or otherwise share information through the Services, those people will be able to access the information you share with them, subject to the permissions you set.

4.3 For Legal and Safety Reasons

We may disclose information if we believe in good faith that disclosure is necessary to comply with law; respond to lawful requests; protect the rights, safety, and security of Lode, our users, or others; or investigate fraud or security issues.

4.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

5. Document Ownership

Your documents are yours — always. All construction drawings, revision issuances, PDFs, and other files you upload to the Services remain your exclusive property. Lode processes your files solely to compile and manage your drawing set as you direct. We do not claim any ownership interest in your documents. We do not use your documents to train AI models. We do not monetize your document data.

6. Data Retention and Deletion

We retain information for as long as necessary to provide the Services and for other legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing our agreements.

6.1 Deletion of Projects and Documents

When you delete a project or document, it enters a 30-day grace period during which you may restore it. After the 30-day grace period expires, all associated files — including uploaded PDFs, processed sheets, compiled sets, and AI-generated summaries — are permanently and irreversibly deleted from our storage systems. No copies of your documents are retained after permanent deletion.

While a project is active, Lode's document control intentionally preserves your revision history. Superseded and voided documents are not silently discarded — they are retained with full provenance as a core feature of the Services so you keep a complete, auditable record of how your set evolved. This retained history is permanently deleted together with the project or account under this Section when the grace period expires.

Projects owned by an organization are the organization's records. If you delete your individual account, projects that belong to an organization are not deleted along with your personal account; they remain with the organization and are subject to deletion by the organization.

6.2 Account Deletion

If you request account deletion, all projects and documents associated with your account enter the same 30-day grace period. After permanent deletion, we delete or de-identify personal information associated with your account, except where retention is required for legal, tax, security, or billing purposes.

6.3 Anonymized Data for System Performance

We retain anonymized, non-identifiable metrics about how the Services are used — for example, how many sheets were in a typical issuance, how long processing took, and what types of errors occurred. This data contains no names, no document titles, no file content, and cannot be linked back to you or your projects. We use it solely to improve Lode's performance and reliability for all users.

6.4 Audit Records

A record that your account existed and was deleted is retained permanently for legal and compliance purposes. This record contains no names, no email addresses, and no file content — only the fact that a deletion occurred and when.

7. Security and Data Breach

We use reasonable administrative, technical, and physical safeguards designed to protect information. We store and process information in the United States. Passwords are hashed, data is encrypted in transit and at rest, and access is restricted using least-privilege permissions and row-level security. Application data such as accounts and project metadata is managed and stored through Supabase; uploaded and compiled documents are stored on Amazon Web Services (AWS) S3 (and in some cases Cloudflare R2), with archived documents stored in AWS S3 Glacier. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

8. Your Choices and Privacy Rights

8.1 Access, Correction, Deletion, and Export

You may update certain information directly in the Services. You may also request to access, correct, or delete your personal information by contacting us at support@lode.build. We may need to verify your identity before responding to your request.

You can obtain a copy of your project documents as PDF files by requesting an export from support@lode.build. This export includes your uploaded and compiled document files; it does not currently include markups, comments, or revision-history metadata.

8.2 Marketing Communications

We may send you marketing emails or other promotional communications in the future. You can unsubscribe from marketing emails using the unsubscribe link included in the emails. You may also manage notification preferences within the Services.

8.3 State Privacy Rights

Depending on your state of residence (such as California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws), you may have additional rights regarding your personal information. These rights vary by state, but may include:

  • The right to know/access: confirm whether we process personal information and access it;
  • The right to correction: request that we correct inaccuracies;
  • The right to deletion: request that we delete personal information (subject to exceptions);
  • The right to data portability: obtain a copy of certain personal information in a usable format;
  • The right to opt out of certain processing, such as targeted advertising, certain profiling, or the sale of personal information (as defined by applicable law).

To exercise your rights, contact support@lode.build. In some states, you may also have the right to appeal a decision we make regarding your request. To submit an appeal, please reply to our response or contact support@lode.build with the subject line "Privacy Rights Appeal." We will not discriminate against you for exercising your privacy rights.

Authorized Agents (California): If you are a California resident, you may use an authorized agent to submit a request on your behalf, subject to verification requirements under applicable law.

9. Children's Privacy

The Services are not intended for individuals under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on the Services and update the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at support@lode.build.