Privacy & cookies

Solid Takeoff is browser-based construction takeoff software. If you have a question about your data, email hello@solidtakeoff.com.

Account details — your name, email address and a securely hashed password. We record when you last signed in and the browser/device used, so we can support you and spot suspicious access.

Your content — the drawings you upload and the measurements, conditions and markups you create. These are stored so the app works across your devices, and are visible only to you and people you invite to your workspace (or anyone you deliberately send a view-only share link to).

Billing — if you subscribe, payments are handled by Stripe. We never see or store your card details; we keep only a customer/subscription reference and your plan status.

How you found us — when you create an account we record which website referred you (for example a search engine), the page on our site you signed up from, any campaign tags on the link, the type of device and browser, and an approximate location (town and country) worked out from your IP address. This comes from the request itself, not from a cookie. We use it to understand which channels and pages work, so we can improve the site; our lawful basis is legitimate interests. After your first measurement we may also ask, once and optionally, how you heard about us — you can ignore or dismiss it.

Product usage — events inside the app such as when you first measure, export, view plans or start a checkout, so we can see where people get stuck and what leads them to subscribe. These are linked to your account and never sold or shared for advertising.

Usage analytics — only with your consent (see below).

Essential cookies. A single session cookie keeps you signed in. Without it the app can't work, so it doesn't require consent. We also store some preferences (such as display units) in your browser's local storage.

Analytics cookies (optional). If you accept, we use Google Analytics and Microsoft Clarity to understand which features are used and where people get stuck. Clarity may record a replay of your session — form fields and text are masked by the provider. With the same consent we set a first-visit cookie (“st_attr”, 30 days) that remembers which site and page first brought you here, so a later signup can be credited to it. These only load after you accept, and choosing “Essential only” means none of them are ever set or loaded.

You can change your mind at any time: Cookie settings.

When you use the optional “auto-detect scale” feature, an image of that drawing page is sent to our AI provider (Anthropic) purely to read the scale, and a result is returned. It isn't used to train models. If you'd rather not, simply set the scale yourself — every AI feature is optional.

Only the providers needed to run the service: hosting and storage, Stripe (payments), Postmark (transactional email), and — with your consent — Google Analytics and Microsoft Clarity. We don't sell personal data or share it for advertising.

Data is hosted on servers in the EU/UK. We keep your account and content while your account is active. Delete a workspace and its projects, drawings and takeoffs are removed. You can also delete your whole account yourself, at any time, from your account page — it takes effect immediately, removes your personal data and every workspace you're the only member of, and takes you off our mailing list. We keep only a one-way fingerprint of your email address, so we can confirm the deletion happened without retaining the address, plus anything the law requires us to hold (e.g. invoice records).

You can request a copy of your data, ask us to correct or delete it, or object to how we use it. Deletion needs no request at all — do it yourself from your account page. For anything else, email hello@solidtakeoff.com and we'll respond within 30 days. If you're in the UK you can also complain to the Information Commissioner's Office (ICO).

Traffic is encrypted with HTTPS, passwords are hashed, and access to your workspace requires a valid session. Share links are unguessable and expire.