Your documents are yours. Full stop.

Your documents are yours. LODE claims no rights to them.

• We claim no intellectual-property rights to anything you upload — drawings, specs, or project files.
• Your drawings are never sold and never shared except as you direct. We train no AI models on them, and our AI provider’s API terms do not use them for model training.
• Download everything, anytime. The account Owner can export the whole account from Settings — every project, file, compiled set, annotation, markup, comment and revision-history record, with a manifest of its contents.
• Delete everything, anytime. When a cancelled trial or a plan ends you can export first; data is then retained for 30 days and permanently deleted — unless you move to Archive, which keeps it for as long as you pay.

Stored and processed in the United States, with named providers.

• Application data — accounts and project metadata — and uploaded sheets and outputs are managed and stored through Supabase.
• Uploaded and compiled documents are stored on AWS S3 (and in some cases Cloudflare R2).
• Projects you move to cold storage go to AWS S3 Glacier and stay there for as long as your plan or Archive is paid; restores take 12 to 48 hours.
• Real-time presence and live review rooms run on Liveblocks, which sees display names, presence and cursor positions — never your files.
• LODE maintains routine backups of its databases and file storage.
• Payments are processed by Stripe. We never store full card numbers; we receive billing status, the card’s last four digits, and transaction identifiers.

Standard, boring, correct.

• Data is encrypted in transit and at rest.
• Passwords are hashed. Sign-in with Google or Microsoft shares only basic profile information, revocable from your provider account.
• Access is restricted with least-privilege permissions and row-level security — every project row checks who’s asking.
• Guest surfaces (shared sets, the bid room, the contractor portal, punch lists) are token-credentialed, scoped, and revocable. A link can be revoked at any time, and a share can be given an expiry date.

DOC reads only what you allow. Permissions are per account and per class of data, with an off switch per project.

• Full drawings, specifications and project information are off until the account Owner turns them on; the general assistant and phase documents are on by default. Any project can have DOC turned off entirely, and then nothing from it is sent to any AI provider.
• Depending on which classes you enable, DOC can receive extracted sheet text, a rendered image of a drawing region you ask about, images you attach, specification text, submittal excerpts for DOC Review, project information, and the project’s team and contacts directory. It never receives whole PDF files, your login credentials or payment details. The full list is in the Privacy Policy, Section 2.4.
• LODE uses Anthropic’s API under Anthropic’s API terms, which do not use customer data for model training.
• Your DOC conversations are saved for you and are personal to you; usage is metered. Neither is part of the account’s record.