Privacy and Plan Data

Information you provide

The review form collects a required email address, phone number, project notes, and PDF plan set. A name and ZIP code are optional. The PDF may contain additional information placed there by the document author, including names, addresses, parcel details, signatures, or professional information. Review the file before uploading it.

The service also receives network and device-security signals needed to operate Cloudflare Turnstile and prevent repeated free submissions. PlanDecode converts the normalized network address into a keyed, one-way HMAC hash before storing the submission quota and does not store the raw address in that quota record.

How the information is used

• Create and operate the private project workspace.
• Send the private return link and service messages through Resend.
• Send submitted contact and project details to Cecilia Home's configured Telegram group for follow-up.
• Process plan pages and saved analysis evidence through OpenRouter and the selected AI model providers.
• Validate security challenges through Cloudflare Turnstile and enforce one free review per network address.
• Store application records in the configured database and plan files in private Vercel Blob storage or the configured private storage backend.
• Diagnose failures, prevent abuse, and maintain the service.

Private project links

The return link contains a high-entropy access token. The application stores a hash of that token and removes the token from the browser address after authorization. Anyone who receives a valid link may be able to open the workspace, so keep it confidential and do not forward it publicly.

Search engines

Project workspaces, access-token routes, reports, document downloads, admin pages, and API routes are excluded from the public sitemap and return search-engine noindex instructions. These signals are additional safeguards, not the access-control mechanism.

Retention and deletion

Project information and generated analysis remain available while the project exists so the private link can reopen the report. The project workspace includes a deletion control. Deleting a project removes its application records and initiates deletion of its private file from the configured storage workflow. The one-way submission-quota hash remains after project deletion so deleting a project cannot be used to obtain another free AI review. Provider logs or backups may persist for their own limited operational periods.

Security and limitations

PlanDecode uses private storage, signed actions, access tokens, automated abuse controls, and encrypted HTTPS connections in production. No online system can promise absolute security. Do not upload information that is unrelated to the requested plan review.

Contact

For privacy questions or a deletion problem, contact Cecilia Home through its official contact page.