Your documents are yours.

Your documents are yours. LODE claims no rights to them.

• We claim no intellectual-property rights to anything you upload: drawings, specs or project files.
• Your drawings are never sold and never shared except as you direct. We train no AI models on them, and our AI provider’s API terms do not use them for model training.
• Download everything, anytime. The account Owner can export the whole account from Settings: every project, file, compiled set, annotation, markup, comment and revision-history record, with a manifest of its contents.
• Delete everything, anytime. When a cancelled trial or a plan ends you can export first; the data is then kept for 30 days and removed from LODE, unless you move to Archive, which keeps it for as long as you pay. After removal one sealed copy of the documents is kept for 90 days, solely so an error can be undone at your request, then destroyed.

Stored and processed in the United States, with named providers.

• Application data (accounts and project metadata) and uploaded sheets and outputs are managed and stored through Supabase.
• Uploaded and compiled documents are stored on AWS S3 (and in some cases Cloudflare R2).
• Projects you move to cold storage go to AWS S3 Glacier and stay there for as long as your plan or Archive is paid; restores take 12 to 48 hours.
• Live presence and review rooms run on Liveblocks, which sees display names, presence and cursor positions, never your files.
• The database is protected by point-in-time recovery. Every purge seals a copy of the documents it removes into a separate retention store before it removes them, verifies the copy, and keeps it for 90 days; a weekly audit checks every sealed copy against its manifest.
• Payments are processed by Stripe. We never store full card numbers; we receive billing status, the card’s last four digits, and transaction identifiers.

The standard measures, done properly.

• Data is encrypted in transit and at rest.
• Passwords are hashed. Sign-in with Google or Microsoft shares only basic profile information, revocable from your provider account.
• Access is restricted with least-privilege permissions and row-level security: every project row checks who is asking.
• Guest pages (shared sets, the bid room, the contractor portal, punch lists) work from a scoped token. A link can be revoked at any time, and a share can be given an expiry date.

Loupe, LODE's AI assistant, reads only what you allow. Permissions are per account and per class of data, with an off switch per project.

• Full drawings, specifications and project information are off until the account Owner turns them on; the general assistant and phase documents are on by default. Any project can have Loupe turned off entirely, and then nothing from it is sent to any AI provider.
• Depending on which classes you enable, Loupe can receive extracted sheet text, an image of the part of a drawing you ask about, images you attach, specification text, submittal excerpts for Loupe Review, project information, and the project’s team and contacts directory. It never receives whole PDF files, your login details or payment details. The full list is in the Privacy Policy, Section 2.4.
• LODE uses Anthropic’s API under Anthropic’s API terms, which do not use customer data for model training.
• Your Loupe conversations are saved for you and are personal to you, and usage is metered. Neither is part of the project files.