Privacy Policy

The data controller is PAUL CONSTABLE ENGINEERING LTD, registered office 84 Strathyre Avenue Broughty Ferry, DD5 3GN, Scotland. For any privacy question or to exercise your rights, contact us at support@paulconeng.shop or by phone at +44 7313689262.

• Account data: name, email address and password credentials when you register or subscribe.
• Subscription and billing data: plan, billing country, subscription status and billing history. Card details are entered directly with our payment processor and are never received or stored by us.
• Build content you create: the text briefs you enter ("what are you building"), generated plans, cut lists and renders, and any reference photos or files you choose to upload.
• Support data: messages, enquiries and correspondence you send us through the contact and studio-enquiry forms.
• Technical and usage data: IP address, device and browser type, pages viewed and basic interaction events, collected to keep the service secure and working.

We use the following collection sources:

• Directly from you when you register, subscribe, use the build tool, upload files or contact us.
• Automatically from your device through essential cookies and standard server logs (see our Cookie Policy).
• From our payment processor (Stripe), which confirms subscription and payment status without sharing full card numbers.

• To provide the service — generate plans, drawings and exports and store your projects (contract).
• To take payment and manage subscriptions (contract).
• To provide support and respond to enquiries (contract and legitimate interests).
• To keep the service secure, prevent abuse and debug problems (legitimate interests and legal obligation).
• To send essential service messages such as billing and account notices (contract).
• To comply with tax, accounting and legal obligations (legal obligation).

User input — the text briefs you write, the dimensions and options you choose, and any reference photos, file uploads or example data you provide — is processed only to run the tool and produce your results. Generated results (plans, cut lists, dimensioned drawings, renders and assembly walkthroughs) are stored against your account so you can re-open a project.

Retention: file uploads, example data and unsaved working results are cached only as long as needed to generate and let you re-open a project, and are cleared from working storage within 30 days unless you save the project to your account. Deletion: you can delete any project, or request deletion of your account and all associated content, at any time by emailing support@paulconeng.shop.

AI provider boundary: to generate drawings and visual outputs we pass the minimum necessary build data to our AI provider infrastructure, acting as our processor under contract. The AI provider processes it solely to return your result and does not use it for its own purposes.

We do not use your user input, file uploads or generated results to train AI models, and we do not sell them or share them for advertising.

We share personal data only with processors that help us run the service, under contract and appropriate safeguards:

• Hosting and delivery: our cloud hosting provider (Vercel) serves the application and stores server logs.
• Payments: Stripe processes subscriptions and payments. Stripe acts as an independent controller for payment data; we never receive full card numbers.
• Database, authentication and file storage: Supabase stores account data, projects and uploaded files.
• Email and support: our email provider delivers transactional and support messages.
• AI provider: the AI generation infrastructure that renders drawings and visual outputs from your build data, used only to produce your results.

We do not sell your personal data and do not share it for third-party advertising.

Some processors may store or process data outside the UK or EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses (and the UK Addendum) to ensure your data receives an equivalent level of protection.

• Account and subscription data: for as long as your account is active and then as required for legal, tax and accounting purposes (generally up to 6 years for financial records).
• Build projects and uploads: until you delete them or close your account; unsaved working data is cleared within 30 days.
• Support correspondence: typically up to 24 months after your query is resolved.
• Server and security logs: typically up to 12 months.

We use encryption in transit, access controls, and reputable infrastructure providers. Payment card data is handled entirely by Stripe. No online service can be guaranteed completely secure, but we take reasonable steps to protect your information and to notify you and regulators of any breach as required by law.

Under UK GDPR and EU GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where applicable.
• Restrict or object to certain processing.
• Data portability — receive your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any right, email support@paulconeng.shop. We respond within one month.

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as defined by the CCPA/CPRA. To make a request, contact us at support@paulconeng.shop.

We use essential cookies to run the service and secure sessions, and limited, privacy-respecting analytics to understand usage. See our Cookie Policy for details and choices.

Rivet generates design suggestions from your inputs, but we do not make legal or similarly significant decisions about you by solely automated means. Rivet is not intended for children: it may not be used by anyone under 13, and users aged 13–17 must have consent from a parent or guardian. Tool and machine work described in generated plans must be carried out under adult supervision.

If you have a concern, please contact us first at support@paulconeng.shop. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your local EU data protection authority.

We may update this policy from time to time. Material changes will be posted here with a revised “last updated” date.