Scope and acceptance
This Privacy Policy describes how Redline (the "Service"), operated by Dram Build LLC ("we," "us," or the "Company"), collects, uses, stores, and discloses information about users of redline.best and any related applications or APIs. By creating an account or using the Service, you agree to the practices described here.
Contact information appears in Section 12.
The Service is intended for licensed professional engineers, engineering staff, and related construction and design professionals located in the United States. We do not direct the Service to users outside the United States.
Information we collect
Account information
When you sign up, we collect your email address, full name, and a password (stored only as a hashed value by our authentication provider). You may optionally upload a professional engineer seal image and a signature image for use in PDF exports.
Drawings and uploaded files
When you submit a drawing for analysis, we collect the PDF file you upload and any project metadata you enter (project name, discipline, project type, code edition, and focus areas). Drawings may contain information that identifies you, your firm, your clients, project addresses, and other details visible on the drawing.
Analysis output
We store the results of each analysis, including detected defects, severity ratings, code references, AI-generated comments, your review status (approved, in review, ignored), your written comments and notes, and dispute reasons.
Usage information
We collect basic technical information when you use the Service: IP address, browser type, operating system, pages visited, time spent, and timestamps of actions. We also track API token usage and estimated cost per analysis for operational and infrastructure purposes.
Communications
If you contact us by email, send us feedback, or receive a system email (such as a password reset or team invite), we retain that communication.
We do not collect: payment card numbers (no payments are processed at this time), social security numbers, driver's license numbers, biometric data, or precise geolocation data.
How we use information
We use the information described above to:
- Provide the core service — accept your drawing, analyze it, and return defect reports
- Maintain your account, authenticate you, and let you view your historical analyses
- Send transactional emails (password resets, invite acceptances, system notifications)
- Improve the Service over time, including refining defect detection through aggregate review patterns. Drawings themselves are not used to train any third-party AI model — see Section 4 for our processor commitments
- Monitor and prevent abuse, fraud, and excessive API usage
- Comply with legal obligations and respond to lawful requests
We do not sell, rent, or trade your information. We do not use your information for advertising, and we do not allow third parties to use your information for advertising.
Third-party processors
We rely on third-party service providers to operate the Service. Each is bound by its own privacy and security commitments, and each processes only the information necessary to perform its function.
| Category | Purpose | Data processed |
|---|---|---|
| AI processing provider | Analysis of uploaded drawings | Drawing contents, project metadata, prompts |
| Cloud database and storage provider | Authentication, data storage, file storage | Account information, drawings, analysis results, all stored user content |
| Application hosting provider | Web application hosting and request routing | HTTP request metadata, server logs |
| Email delivery provider | Transactional email delivery | Recipient email addresses, message contents |
| Supporting AI infrastructure providers | Search and retrieval features that improve analysis quality | Limited text snippets derived from analyses (not full drawings) |
We select providers that contractually agree not to use customer content to train their underlying models. Other than the providers described above, we do not share your information with any third party except as described in Section 7 (lawful requests) or with your explicit consent.
The current list of named providers in each category is available on request to admin@redline.best. We may change providers from time to time without updating this policy, provided the new provider operates under substantially similar privacy and security commitments.
Retention
We retain your information for as long as your account is active and for a reasonable period afterward, as follows:
- Account information — for the life of your account, plus up to 90 days after deletion to handle any final billing or support matters
- Uploaded drawings and analysis results — retained indefinitely while your account is active, so that you can return to them at any time. You may delete individual analyses through the Service at any time
- Usage logs — retained for up to 24 months for operational and security purposes, then deleted or anonymized
- Communications — retained for up to 36 months
You may request full deletion of your account and all associated data at any time by contacting us using the address in Section 12. We will complete deletion within 30 days of a verified request, except where retention is required by law.
Security
We take reasonable measures to protect your information:
- All connections to the Service use HTTPS / TLS
- Passwords are hashed using industry-standard algorithms by our authentication provider and are not stored in plaintext or accessible to us
- File storage is configured so that each user can access only files in their own account scope, enforced at the database level
- API keys for third-party services are rotated periodically
- Administrative access is restricted to the operator of the Service
No system is perfectly secure. We cannot guarantee that information transmitted over the internet or stored on our systems will never be compromised. We are not currently certified to any specific information security standard such as SOC 2, ISO 27001, or HIPAA. If a data breach occurs that materially affects your information, we will notify you without unreasonable delay.
Your rights
Regardless of where you live, you may:
- Access the information we hold about you
- Correct inaccurate information through your account settings or by contacting us
- Delete individual analyses or your entire account
- Export your analyses as PDF files at any time through the Service
- Withdraw consent by ceasing use of the Service and deleting your account
To exercise these rights, contact us at the address in Section 12. We may ask you to verify your identity before acting on a request. We will respond within 30 days.
California residents
If you are a resident of California, the California Consumer Privacy Act ("CCPA") gives you additional rights, including the right to know what personal information we collect about you, the right to delete that information, the right to correct inaccuracies, and the right not to be discriminated against for exercising these rights.
We do not "sell" or "share" personal information as those terms are defined under the CCPA. We do not have actual knowledge of selling or sharing personal information of consumers under 16 years of age.
To exercise CCPA rights, submit a request to the contact address in Section 12. We will verify your request by confirming the email address associated with your account.
Cookies and storage
We use a small number of cookies and browser-storage items to operate the Service. We do not use advertising or third-party tracking cookies.
- Authentication session cookie — required for the Service to function. Without it, you cannot stay logged in
- Theme preference — remembers your selection of light, dark, or system theme
- Last-report restore — remembers the last analysis you viewed so that the Service can return you to it after a refresh
- PDF export defaults — remembers your preferred export options on a per-report basis
You may clear these at any time using your browser's controls. Clearing the authentication cookie will sign you out.
Children
The Service is intended for professional users and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, post a notice in the Service or send you an email. Continued use of the Service after a change indicates your acceptance of the revised policy.
Contact
Questions, requests, or complaints about this policy should be sent to:
Dram Build LLC
d/b/a Redline
Email: admin@redline.best