Privacy Policy

Last updated: October 15, 2026 · Effective: Blank to fill in: [date of publication]

This Privacy Policy explains what information Blank to fill in: [legal entity name], d/b/a Sillplate Plan Co. ("Sillplate," "we," "us") collects through our website and services, how we use it, who we share it with, and the choices you have. We're based in Missouri and our services are offered in the United States.

The short version:

• We collect what we need to sell and deliver plans and services, protect our licenses, and run the business.
• We do not sell your personal information, and we don't share it for cross-context behavioral advertising.
• Payments are handled by Stripe, so we never see or store your full card number.
• We use first-party cookies to remember how you found us (UTM campaign tags). We don't use third-party advertising cookies.
• Your project data (costs, lots, leads) is kept confidential.

1. Information we collect

Information you give us

• Account and contact information: name, company name, job title, email, phone, mailing and billing address, and login credentials.
• Business verification: for builder pricing, a contractor license number, EIN or business website.
• Order and license information: the plans, licenses and services you buy; the license holder entity; the project state and jurisdiction; and build registrations (street address, county, jurisdiction and, optionally, permit number) for each build under a license.
• Project information: surveys, plats, lot details, photos, sketches, plans you own and ask us to modify or render, program requirements, and cost or pricing data you share for a feasibility report or pro forma.
• Communications: emails, form submissions, call notes and messages you send us.
• Signed agreements: license acceptances (click-to-accept records), CAD agreements and proposals.

Information collected automatically

• Download and delivery records: for each file download, the user, date and time, IP address and browser information. We also store a cryptographic fingerprint of each delivered file and the license ID and set number written into it. This is how we protect licenses and trace leaked files.
• Usage and device information: pages viewed, referring page, browser type, device type, approximate location derived from IP address, and the date and time of visits, collected through server logs.
• Campaign attribution: if you arrive through a link with UTM tags (for example, from a Facebook post or an email), we store the source, medium, campaign, term and content values, your landing page and the referring site.
• Email delivery information: our email provider records whether transactional and marketing emails were delivered. [OWNER: confirm whether open and click tracking is enabled in Resend; if so, say so here.]

Information from others

• Stripe tells us whether a payment succeeded, plus limited details such as card brand, last four digits, expiration date and billing address.
• Licensed professionals you engage may send us direction and documents for your project.
• Data providers for feasibility reports (for example, a licensed real estate broker supplying MLS comparable sales) provide market data about properties. That data is about the market, not about you.

2. Cookies and similar technologies

We use a small number of first-party cookies and similar browser storage:

Swipe the table sideways →

We don't use third-party advertising cookies or sell cookie data. You can block or delete cookies in your browser settings. If you block authentication cookies, you won't be able to sign in.

3. How we use information

• Provide what you ordered: create your account, process orders, deliver files, perform modifications, custom design, renderings and reports, and provide support.
• Protect and enforce licenses: issue license IDs, watermark files, register and count builds, send annual build attestations for multi-build licenses, investigate unauthorized copies, and enforce our copyrights.
• State and jurisdiction compliance: apply the right state disclosures and restrictions, and check local submittal requirements for your project.
• Communicate with you: transactional emails (order confirmations, download links, license certificates, project updates) and, if you opt in or as allowed by law, occasional marketing emails. Every marketing email has an unsubscribe link.
• Understand our marketing: use UTM attribution to learn which channels bring in inquiries and orders.
• Security and fraud prevention: protect accounts, detect abuse of download links and prevent payment fraud.
• Legal, tax and accounting: keep records, respond to lawful requests, and establish or defend legal claims.
• Improve our plans and services: for example, which plans and options builders ask for. We use aggregated information for this.

4. Your project data

• Client cost data, lot lists and buyer leads are kept in the Sillplate system and are kept confidential.
• We don't use them to bid on your lots or approach your buyers.

5. How we share information

We share personal information only as described here:

• Service providers that run our business for us, under contracts limiting their use of the data:
  • Supabase for database, authentication and file storage;
  • Stripe for payment processing;
  • Resend for sending email;
  • [Website hosting provider — OWNER: confirm, e.g., Vercel] for hosting the site;
  • accounting, bookkeeping and IT providers.
• Licensed professionals, independent plan reviewers and data partners working on your project, as needed to do the work. An independent reviewer or broker partner receives only what they need (for example, the lot address for a comparable-sales search) and is bound to confidentiality.
• Building departments, when you ask us to prepare or submit documents on your behalf.
• Legal and enforcement: to comply with law, a subpoena or court order; to enforce our Terms and licenses (including providing build-registration and download records in a copyright matter); or to protect anyone's rights, property or safety.
• Business transfers: if our business is sold, merged or reorganized, information may transfer to the new owner under this policy.
• With your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Payment information

Stripe processes payments under its own privacy policy and security standards. We receive confirmation of payment and limited card details (brand, last four digits, expiration, billing address). We never receive or store full card numbers or security codes.

7. How long we keep information

8. Security

We use reasonable safeguards for a business of our size. These include encryption in transit, access controls that limit each builder to its own organization's records, private file storage with expiring download links, and limited staff access. No system is perfectly secure. If we learn of a breach affecting your personal information, we'll notify you as required by law.

9. Your choices and rights

• Access and correction: you can see and update most account information in your account. Ask us for anything else.
• Deletion: you can ask us to delete your personal information. We'll delete what we can. We may keep records we need to verify or enforce licenses, complete transactions, meet legal or tax obligations, or resolve disputes.
• Marketing emails: unsubscribe using the link in any marketing email, or email us.
• Cookies: control them in your browser.
• State privacy laws: depending on where you live, you may have additional rights to know, access, correct, delete or obtain a copy of your personal information. We'll honor verifiable requests from anyone regardless of state, as practical.

To make a request, email Blank to fill in: [privacy contact email] with the subject "Privacy request." We'll verify your identity before acting on it and respond within Blank to fill in: [45] days.

10. Children

Our site and services are for businesses and adults. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we'll delete it.

11. Location of processing

We operate in the United States, and our service providers store and process information in the United States. Our services aren't directed to people outside the U.S.

12. Changes to this policy

We'll post any changes here with a new "Last updated" date. If a change is material, we'll notify account holders by email before it takes effect.

13. Contact

Blank to fill in: [Legal entity name], d/b/a Sillplate Plan Co. Blank to fill in: [Mailing address], Missouri Blank to fill in: [Privacy contact email] · 636-542-0349