swept.design

Your information

Privacy policy

swept.design saves your vehicle access designs so you can return to them. This page explains what information we handle, why we need it, and the choices you have.

Last updated

1. About this policy

This policy applies to swept.design, a browser-based vehicle swept path analysis service, including its website, accounts, saved projects and support communications. In this policy, “we” and “us” refer to swept.design. For privacy questions or requests, email privacy@swept.design.

You can read the public website without an account. To save and manage projects, you need an account. Providing information is voluntary, but we cannot provide account features without the details needed to sign you in and store your work.

2. Information we collect

  • Account details. Your name, email address, email verification status, account identifier, account creation and update dates, and display preferences such as your theme. If you use a password, we store a password hash rather than the readable password.
  • Projects and drawings. Project and layout names, uploaded DXF filenames and file contents, drawing placement and layer settings, vehicle choices, poses, manoeuvres, and other saved design settings. Your work is saved to our server as you edit it; uploaded drawings are not kept only in your browser.
  • Sign-in and technical information. Session identifiers, session expiry dates, IP addresses, browser information, and email verification or password-reset records. Our hosting services may also record request times, requested URLs, errors and similar operational information.
  • Messages you send us. Your contact details and the contents of support or privacy requests, including any attachments you choose to provide.

Site plans and filenames can contain addresses, client names and other information about you or other people. Only upload information you are authorised to provide, and remove personal or confidential details that are not needed for your design.

3. Google sign-in

If Google sign-in is offered and you choose it, Google provides your account identifier, name, email address, email verification status and profile image, where available. Our authentication service may also store authentication tokens and their expiry details to complete and maintain the connection to your account. We do not receive your Google password.

We use this information to create or link your swept.design account, sign you in and secure your account. Google sign-in requests basic identity information only; it does not give us access to your Gmail messages, Google Drive files, contacts or calendar. We do not sell Google user data or use it for advertising.

You can review or remove the connection through your Google Account connections. Removing that connection does not itself delete your swept.design account or saved projects. Google also handles information under its own privacy policy.

4. How we use information

We use the information described above to:

  • Create and maintain your account, verify your email, sign you in and help you reset your password.
  • Save, load and manage your projects, site plans and layouts, and provide design and export features.
  • Remember your preferences and answer support or privacy requests.
  • Investigate errors, prevent abuse and unauthorised access, and keep the service working.
  • Meet applicable legal obligations and resolve disputes.

Your saved projects are associated with your account and are not published in a public gallery or directory.

5. Service providers and sharing

We use service providers to host the website, store data and deliver account emails. They handle information needed to provide those services. Our current integrations include:

  • Vercel: website hosting and request processing, including information sent to the application and technical request data.
  • Database hosting: storage of account, session, project and uploaded drawing data in our hosted PostgreSQL database.
  • Resend: delivery of email verification and password-reset messages, including the recipient address, message content and delivery information.
  • Google Fonts: delivery of the fonts used on the website. Your browser connects to Google to load them, which exposes your IP address and request information to Google even if you do not use Google sign-in.
  • Google sign-in, when used: the identity service described above.

These providers may process information outside your country, including outside New Zealand and Australia. We do not promise that all information stays in a particular country. We use service providers for the purposes described in this policy.

We do not sell your personal information. We may disclose information where required by law, to respond to a valid legal request, or where necessary to investigate abuse or protect the security and rights of our users and the service. We may also share information at your direction.

6. Cookies and browser storage

We use cookies needed for authentication and session security. Your theme preference is saved with your account. Blocking or clearing authentication cookies may sign you out or prevent account features from working.

We do not currently use advertising cookies or third-party analytics tools on the website. This does not prevent our hosting and authentication services from processing the technical information described above.

7. Retention and deletion

We keep account information and saved work for as long as needed to provide your account and projects. You can delete projects, layouts and uploaded site plans using the controls in the app. Deleting a project removes its associated layouts and uploaded drawing from the active database.

To request deletion of your entire account and its associated projects, contact us using the details below. There is currently no self-service account deletion button. We may need to verify that you control the account before acting on a request.

Deletion from the active service does not necessarily remove copies immediately from backups or service-provider logs. Those copies may remain until they are overwritten or removed through the relevant retention process. We may retain information where needed for security, to resolve a dispute or to meet a legal obligation. Expiry of a session or reset link prevents its further use; it does not necessarily mean the stored record is immediately erased.

8. Your choices and rights

You can ask for access to the personal information we hold about you, request correction of inaccurate information, or ask us to delete your account. Contact us using the details below and identify the account involved. Please do not send your password. We may request additional information to verify your identity and will explain any limitation that applies to your request.

You can export your design drawings and delete saved work through the app. If you have a privacy concern, please contact us first so we can try to resolve it. You can also contact the New Zealand Office of the Privacy Commissioner or the privacy regulator where you live. Your rights depend on the law that applies to you.

9. Security

We use authentication, access checks and password hashing to help protect accounts and saved work. Access to a saved project through the app is restricted to its account owner. No online service can guarantee absolute security. Keep your sign-in details private, use a strong password and sign out on shared devices.

10. Changes and contact

We will update this page when our practices change and revise the date at the top. Where a change materially affects how we use your information, we will provide an appropriate notice. If we need consent for a new use of Google user data, we will ask before using it for that purpose.

Contact swept.design at privacy@swept.design for privacy questions, access or correction requests, and account-deletion requests.