Privacy Policy
How PrecisionDocs collects, stores, protects, and processes data for website visitors and platform users.
PrecisionDocs ("we," "us," or "our") is operated by PrecisionDocs AI LLC. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website at precisiondocs.ai and our AI-powered civil engineering research platform (collectively, the "Service").
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, phone number, and authentication credentials. If you sign in via Google or Microsoft OAuth, we receive your name, email, and profile identifier from those providers, and we ask for your phone number before your account is created. A phone number is required so that one person holds one account; we do not verify it by text message.
Project & Usage Data
When you use the Service, we collect the data you provide, including project details (parcel addresses, project names), chat messages, uploaded documents, and generated reports. We also collect usage metadata such as which tools you use, session timestamps, and feature usage patterns.
Payment Information
Payments are processed by Stripe, Inc. We never receive, store, or have access to your full credit card number, CVV, or other payment card details. Stripe provides us with a transaction identifier, payment status, and the last four digits of your card for display purposes only. See Stripe's Privacy Policy for details on how they handle payment data.
Automatically Collected Information
We collect standard server log data (IP address, browser type, referring URL, timestamps) for security monitoring and service operation. We also use Vercel Web Analytics for aggregated website traffic insights and Vercel Speed Insights for public website performance metrics such as page load timing and Core Web Vitals. These Vercel products are designed to be privacy-friendly and do not use cookies or provide cross-site advertising profiles.
Google Analytics
We use Google Analytics 4 (Google LLC) on the website (precisiondocs.ai) and in the app (app.precisiondocs.ai) to understand how people find and use PrecisionDocs and to improve it. Google Analytics receives:
- Which kind of page you view, as a route template such as
/project/:id/home. In the app it never receives the real address of a page, its query string or its title, and never your project content: no parcel addresses, project names, chat messages, documents or reports. - Device and browser information, such as browser, operating system, screen size and language.
- Approximate location (city and country), which Google derives from your IP address. Google Analytics 4 does not log or store IP addresses.
- These events: creating an account (with the sign-up method), your account's first report (with the number of days since you signed up), buying credits (with the purchase value, currency and credit package), sending the consulting request form, clicking the website's main calls to action, using an ROI calculator, and reaching the end of an Insights article.
The first-report and purchase events are sent from our servers with the analytics identifier your browser already holds (the _ga cookie), never your name, email address or account ID, and they are not sent when you have not allowed analytics cookies. We do not send Google a user ID.
Consent and opting out. In the EEA, the UK and Switzerland, Google Analytics cookies stay off until you accept them in the cookie banner; until then Google Consent Mode v2 sends only cookieless signals. Elsewhere they are on unless you reject them. Wherever you are, the Cookie settings link in the website footer, on the sign-in page and in the app's account menu lets you accept or reject them at any time, and rejecting removes the Google Analytics cookies from your browser. You can also block Google Analytics on every site with the Google Analytics Opt-out Browser Add-on. Advertising storage and ad personalization are always off, and Google signals is off: we do not use Google Analytics for advertising. We do not use advertising pixels, retargeting tags, session replay, or cross-site tracking technologies.
2. How We Use Your Information
- Service operation: To provide, maintain, and improve the PrecisionDocs platform.
- AI processing: Your chat messages and project data are sent to third-party AI model providers (see Section 5) to generate responses, search results, and reports.
- Model improvement: If organization data sharing is enabled, we may retain direct-upload documents and related metadata in a private, access-controlled internal archive to develop, evaluate, and improve our own AI models and document-processing systems (see Section 5). Data sharing is off by default for new organizations unless an authorized user expressly opts in during signup or an owner enables it later in Account -> Organization -> Data sharing.
- Account management: To authenticate your identity, manage your subscription, and communicate service-related updates.
- Security: To detect and prevent fraud, abuse, and security threats.
- Legal compliance: To comply with applicable laws and respond to lawful requests.
3. Cookies & Browser Storage
We use strictly necessary cookies and browser storage for authentication, security and workflow continuity, and Google Analytics cookies on the website and in the app, subject to the choice described in Section 1. We do not set advertising cookies. Vercel Web Analytics and Vercel Speed Insights are implemented without cookies. We do not use cross-site tracking technologies. Nothing about the website or the app is gated on answering the cookie banner.
| Storage item | Type | Purpose |
|---|---|---|
pd_authed | Cookie | Lets the public website know whether to show app-oriented navigation for a signed-in user. |
pd_analytics_consent | Cookie | Remembers whether you accepted or rejected Google Analytics cookies, on the website and in the app. |
pd_country | Cookie | The country our hosting provider detected for your request, kept for one day, so the cookie banner appears where consent is required. |
| Supabase auth token | Local storage | Maintains your authenticated session. |
pd_session_id | Local storage | Maintains a per-device backend session for account security and device-limit enforcement. |
pd_device_fp | Local storage | Stores a hashed device fingerprint used only for device/session security. Raw browser signals are not sent to the server. |
| Workflow tokens and drafts | Session storage | Preserves temporary flows such as invite acceptance, Turnstile verification, and interrupted project creation in the current browser session. |
| Vercel Web Analytics | Cookieless telemetry | Aggregated public website traffic insights. |
| Vercel Speed Insights | Cookieless telemetry | Public website performance and Core Web Vitals measurement. |
Google Analytics 4 (_ga, _ga_*) | First-party cookies, only where analytics is allowed | Website and app usage measurement (see Section 1). |
4. Data Sharing & Third Parties
We share your data with the following categories of service providers, solely to operate the Service:
- Supabase, Inc. -- Authentication, database hosting, and file storage.
- Stripe, Inc. -- Payment processing.
- OpenAI, Inc. -- AI language model provider. Chat messages and project context are sent to OpenAI's API to generate responses.
- Anthropic, PBC -- AI language model provider. Used for certain model routing, ordinance image analysis, and report generation.
- Government APIs -- We query FEMA, USDA, USGS, and USFWS public APIs on your behalf using parcel coordinates you provide. These are public government services.
- Regrid -- Parcel boundary and ownership data lookups.
- Google Maps Platform -- Places and geocoding for parcel search.
- Mapbox -- Premium map rendering, satellite imagery, and terrain/context tiles for site-plan and GIS overlay maps when enabled.
- Google LLC (Google Analytics 4) -- Website and app usage measurement (see Section 1).
- Vercel, Inc. -- Frontend hosting, CDN, and privacy-friendly web analytics.
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
Subprocessor List
The following third-party processors handle data on our behalf:
| Subprocessor | Purpose | Data Shared |
|---|---|---|
| Supabase, Inc. | Authentication, database, file storage | Account info, project data |
| Stripe, Inc. | Payment processing | Transaction data |
| OpenAI, Inc. | AI model provider | Chat messages, project context |
| Anthropic, PBC | AI model provider | Chat messages, project context |
| Regrid | Parcel data lookup | Property coordinates |
| Google Maps Platform | Places and geocoding | Addresses, coordinates |
| Mapbox | Premium map display and imagery | Coordinates, browser map requests |
| Google LLC (Google Analytics 4) | Website and app usage measurement | Route templates (never page content), device and browser metadata, approximate location, sign-up, first-report and purchase events with the purchase value, website click events |
| Vercel, Inc. | Frontend hosting, CDN, web analytics, speed insights | Browser metadata, aggregated page-view telemetry, public website performance metrics |
| Resend | Transactional email delivery | Email addresses, names |
5. AI Data Processing Disclosure
PrecisionDocs is an AI-powered platform. When you interact with the agent or generate reports, your messages and project data are transmitted to third-party AI model providers (currently OpenAI and Anthropic) for processing. These providers process your data according to their own privacy policies:
AI provider training and PrecisionDocs model improvement: AI providers that process your requests do not use your API inputs or outputs to train their models unless a separate provider opt-in is enabled. PrecisionDocs does not enable third-party provider training for customer API content. Separately, when organization data sharing is enabled, we may retain direct-upload documents and related metadata in a private, access-controlled internal archive to develop, evaluate, and improve our own models and document-processing systems. This is internal use only -- we do not sell your data or share it with third parties for their own purposes. Data sharing is off by default for new organizations unless an authorized user expressly opts in during signup or an owner enables it later in Account -> Organization -> Data sharing; once data sharing is disabled, newly shared documents are not added to this archive. AI-generated content should be treated as a research aid and independently verified by a qualified professional before use.
6. Data Retention & Deletion
We retain your account information while your account is active. For active organizations, we warn the project owner after 90 days without project activity and schedule permanent deletion no earlier than 120 days without activity. For inactive organizations, including expired evaluations or services, we warn after 30 days without project activity and schedule permanent deletion no earlier than 60 days without activity. A successful warning provides at least 30 days' notice. Activity by any project collaborator resets the inactivity clock. Approved retention exemptions are not automatically deleted; contact info@precisiondocs.ai to request an exemption through support.
Project owners may also permanently delete one project or select up to 25 owned projects for immediate sequential deletion. Deleting a project or account removes live operational project data, uploads, chat, memory, and project search indexes. If organization data sharing is enabled, direct-upload documents and related metadata may also be retained in our separate internal model-improvement archive (see Section 5). Copies already incorporated into that archive or into trained models may persist, and we will delete archived copies on request where technically feasible. You may request deletion of your account and associated data at any time by contacting us at info@precisiondocs.ai. We will process deletion requests within 45 days.
Retention Schedule
| Data Type | Retention Period | Deletion Trigger |
|---|---|---|
| Account profile | Active account lifetime | Account deletion request |
| Live project data, chat history, uploads, memory, and project search indexes | Until owner deletion or lifecycle threshold: active organizations warn at 90 days and delete no earlier than 120 days without activity; inactive organizations warn at 30 days and delete no earlier than 60 days without activity | Owner deletion, account deletion, or automatic retention deletion after at least 30 days' notice; approved exemptions are skipped |
| Documents shared for model improvement | Retained in internal model-improvement archive only when organization data sharing is enabled | Disabling data sharing stops new additions; deletion request for archived copies where feasible |
| Server logs (IP, user agent) | 90 days | Automatic rotation |
| Payment records | 7 years | Legal/tax requirement |
| AI processing logs | 30 days | Automatic rotation |
Deletion requests: You may request immediate deletion of any project or your entire account at any time by contacting info@precisiondocs.ai. We will process these deletion requests within 15 business days.
Project archive is a personal workspace organization feature. Archiving hides a project from your active project list and pauses primary editing actions in the user interface, but it does not delete project data, reset project activity, or exempt the project from applicable retention deletion.
7. Data Security
We implement industry-standard security measures including HTTPS encryption (TLS 1.2+), secure authentication via Supabase (PKCE flow), rate limiting on all endpoints, row-level security policies on database tables, and input validation. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Breach Notification
- We will notify affected users within 72 hours of confirming a data breach.
- Notification will be delivered via email and in-app notice.
- Disclosure will include: the nature of the breach, the data affected, remediation steps taken, and contact information for follow-up.
8. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request that we delete the personal information we have collected from you.
- Right to Correct: You may request that we correct inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. If this changes, we will provide a conspicuous opt-out mechanism.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
Global Privacy Control (GPC): We honor the Global Privacy Control browser signal as a valid opt-out request under CCPA. If your browser sends a GPC signal, we will treat it as a request to opt out of any sale or sharing of your personal information.
To exercise any of these rights, contact us at info@precisiondocs.ai. We will verify your identity and respond within 45 days.
9. European Privacy Rights (GDPR)
For users in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:
Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: Processing necessary to provide the Service you have requested (account management, project data handling, AI processing).
- Legitimate interests: Processing necessary to provide and improve the platform, ensure security, prevent fraud, and maintain service quality. You may object to processing based on legitimate interests. Internal model-improvement retention of direct-upload documents occurs only when organization data sharing is enabled, and organization owners can disable future additions in Account -> Organization -> Data sharing.
- Consent: Processing for optional marketing communications, and Google Analytics cookies, which you may withdraw at any time (for analytics, through Cookie settings).
Data Subject Rights
Under the GDPR, you have the right to:
- Access your personal data and receive a copy of it.
- Rectification of inaccurate or incomplete personal data.
- Erasure ("right to be forgotten") of your personal data under certain circumstances.
- Restriction of processing in specific situations.
- Data portability -- receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
Automated Decision-Making
Our AI processing constitutes profiling as defined under the GDPR. You have the right to request human review of any significant decisions made through automated processing.
International Transfers
Your data is processed in the United States. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to provide adequate data protection safeguards.
Contact for Data Subject Requests
To exercise any of these rights, contact us at info@precisiondocs.ai.
PrecisionDocs AI LLC is based in the United States. We do not currently have a designated EU representative. If you are located in the EEA and have concerns about your data, please contact us directly at info@precisiondocs.ai. You may also lodge a complaint with your local data protection authority.
10. Children's Privacy
PrecisionDocs is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on this page with a revised "Last updated" date. A material policy change that shortens project retention will be emailed before the shortened schedule is enforced. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
PrecisionDocs AI LLC Email: info@precisiondocs.ai