Privacy
What we do with your drawing.
Issued 21 August 2026 · Varuni Systems
The short version. Your drawing is opened and measured inside your browser. It is not sent to us to be priced, and we cannot see it. If you keep a project to your account, the drawing is stored so you can open it on another machine — that is the one time it leaves your computer, and it happens because you asked.
The drawing
A DXF is parsed, built into a model and measured entirely in the browser on your own machine. Nothing about that requires a server and nothing about it involves one.
Pricing does use our server, and what it sends is a page of summary numbers — how many cubic metres of wall, how many square metres of glass facing west, how many electrical points. There are no coordinates in it and no outlines. Nothing in that payload can be turned back into a plan.
When you keep a project to your account, the whole document is stored, including the DXF, because that is what makes it openable on another machine. Drawings are held in object storage, keyed by a digest of their own contents, in a private bucket. Delete the project and the drawing goes with it once nothing else refers to it.
Your account
We keep what an account needs and nothing more:
- Your email address, so you can sign in and be sent a reset link.
- Your name, where you gave one, so a shared project can say who did what.
- A hash of your password. We never see the password itself.
- Which plan you are on, and whether it is paid up.
- Sessions, so a sign-in lasts, and can be ended from another machine.
- A record of sign-ins, password changes and shares, so you can see if somebody else has been in your account.
What we do not do
- No advertising, and no advertising trackers.
- No selling or renting of anything, to anybody.
- No analytics that follow you off this site.
- No reading of your drawings by us, by hand or otherwise.
Who else is involved
Three services, each doing one job:
- Backblaze B2 stores drawings, in a private bucket.
- Razorpay handles payment. Card details go to them and never reach us.
- An email relay delivers verification and reset links.
The server also fetches published exchange rates once a day so an estimate can be shown in your own currency. That request carries nothing about you.
Cookies
One cookie, holding your session, so that being signed in survives a
page reload. It is marked HttpOnly so scripts cannot read
it, Secure so it only travels over HTTPS, and
SameSite=Lax so another site cannot use it on your behalf.
There are no others.
How long we keep it
Projects stay until you delete them. A project's history is kept to the last thirty saves. Delete your account and the projects, drawings and sessions go with it; what remains is whatever a payment record obliges us to keep.
What you can ask for
A copy of what we hold, a correction, or deletion of the lot. Write to hello@plantobill.app and we will answer within thirty days.
Changes
If this page changes in a way that matters, the date at the top changes and anybody with an account is told by email. We will not quietly widen what we collect.
Who we are
Plan to Bill is made by Varuni Systems — varunisystems.com. Questions about any of this go to hello@plantobill.app.