How we handle your plans and your bid.

This page describes current practice as implemented in the product. It is not a lawyer-reviewed security whitepaper.

What is collected and why

• Account data via Clerk, for sign-in.
• Billing data via Stripe. TakeoffSpeed does not store raw card numbers.
• Takeoff records in Postgres, so the bid workflow can be reopened.
• Uploaded plan PDFs in Vercel Blob, so a takeoff can be produced and previewed.
• Plan files are processed by Anthropic to produce the takeoff.
• Transactional and RFQ email via Resend.

Upload controls that already exist

Uploads require a signed-in account. The blob path is scoped to that user. Files must be PDFs, with a 200 MB cap and a 100-page cap. Failed runs delete the uploaded file. Guest subcontractor quote links use a token, not a new account.

What we are still tightening

Successful takeoffs currently keep the source PDF so you can reopen the preview. We are moving those files to private or expiring access before we spend heavily on public acquisition. Until that lands, treat TakeoffSpeed as a controlled paid beta, not an enterprise security review.

Deletion

Email support@takeoffspeed.io to request account or data deletion. More detail lives on the privacy page.