Privacy Policy
Version: 2026-10-12
Steel Copilot is operated by AITECH HOUSES PTE LTD ("we", "us"), a company incorporated in Singapore, which is responsible for your personal information. We handle personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and other laws that apply to you. This policy explains what we process, why, who we share it with, where it is stored, how long we keep it and how you can exercise your rights.
1. What we collect
| When | What | Why |
|---|---|---|
| Sign-up and sign-in | Email address, password hash; your Google account identifier and email when you sign in with Google; the name and organisation you enter | Create and identify your account; sign-in security |
| Using the takeoff service | The drawings you upload, and the bill of materials, report, 3D model and run records generated from them | Provide the Service itself |
| Purchases | Purchase requests, plan, amount, payment status and the contact details you give us; for PayPal payments, the PayPal transaction ID and the payer email PayPal sends us | Activate plans, reconcile payments, after-sales support |
| Support | Your conversations with the online assistant and the contact details you leave | Answer questions and follow up |
| Security and operations | Sign-in and action times, IP address, browser type, error logs | Prevent account theft and abuse, fix faults, keep an audit trail of billing actions |
We store only a salted hash of your password; nobody can read it.
2. How we use it, and on what basis
- To provide the Service you signed up for (performance of our contract with you);
- To keep the Service secure and our accounts accurate (our legitimate interests, and legal obligations for accounting records);
- For anything else, only with your consent.
We do not use your drawings or results to train models, we do not sell personal information, and we never show your drawings to other users.
3. Processors and sharing
| Provider | Information | Purpose |
|---|---|---|
| AI model provider (currently mainly Google's Gemini service) | The content of the drawings you upload, and intermediate images and text produced for reading them | Read drawings and produce the takeoff |
| Alibaba Cloud (Singapore) | All service data — accounts, drawings, results (cloud servers, object storage, backups) | Hosting, storage and backups |
| Your Google account identifier and email, if you use Google sign-in | Sign-in | |
| PayPal | Order number, amount and the payment you make on PayPal's pages (PayPal processes your payment details under its own privacy statement; we never see your card or PayPal password) | Take payments and refunds |
| Hainan Aiwu Intelligent Technology Co., Ltd. (our affiliate, mainland China) | Order number, plan, amount, payment status, PayPal transaction ID and payer email | Collect PayPal payments on our behalf, reconcile them and process refunds |
These providers may only process the information on our instructions, for the Service, with appropriate security. Otherwise we disclose personal information only where the law requires it.
4. International transfers
Our servers and data storage are located in Singapore, and the AI model service is provided by Google, which may process data in other countries. If you pay through PayPal, the payment records listed in section 3 are also processed by our affiliate in mainland China, which collects PayPal payments on our behalf. Where the law of your country requires it, we rely on appropriate safeguards for these transfers (such as the providers' standard contractual commitments). All transfers are encrypted (HTTPS).
5. How long we keep it
- Drawings and results: kept for your current plan's retention period (30 days on the trial plan; kept long-term on paid plans). When it ends the files are deleted and only the job record (name, pages, usage) is kept for billing.
- Orders, payments and accounting records: kept for the periods required by accounting and tax law.
- Account details: kept while you use the Service; after closure they are deleted or anonymised, except where the law requires retention.
- Security and action logs: kept for security auditing.
6. Security
HTTPS everywhere; passwords stored only as salted hashes; each user's jobs run in isolation; admin access limited to authorised staff, with every admin change recorded (who, when, what); regular backups.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can view and download your jobs, results and orders in the app at any time; for anything else, contact us and we will reply within 30 days after verifying your identity. You also have the right to complain to your local data-protection authority.
8. Cookies and local storage
We use one session cookie (cad_session) only to keep you signed in — not for tracking or advertising. Preferences such as language and theme stay in your browser's local storage and are not uploaded.
9. Children
The Service is for businesses and professionals and is not intended for anyone under 16.
10. Changes
We may update this policy and will change the version date on this page. For important changes we will ask you to confirm again the next time you sign in.
11. Contact
- Operator: AITECH HOUSES PTE LTD
- PayPal payments collected by: Hainan Aiwu Intelligent Technology Co., Ltd. (our affiliate)
- WhatsApp: Emma Lee — scan the QR code on the Contact page