Privacy Policy

Last updated: October 2026

What happens to your file

Signed out, the image you upload is deleted within 24 hours. With an account, it is kept alongside the conversion it produced, and deleting the conversion deletes it too.

  • The image you upload. Signed out, deleted within 24 hours, kept that long only so you can re-convert it with different settings, or sign in, without uploading it again. With an account, kept with the conversion so you can still see what a drawing was made from later. Delete the conversion and the image goes with it, and closing your account removes both.
  • The converted CAD file, and the preview picture drawn from it. If you are signed out, deleted within 24 hours. If you have an account, kept while that account is active so you can find and download it again. You can delete it yourself at any time.
  • A precision-editor draft. The edited document and its revision history stay server-side with the conversion so the editor can save safely and render PNG frames. An anonymous draft follows the same 24-hour expiry as its conversion; an account draft is retained while the account is active and removed with the conversion. The browser receives the raster frame and limited editing metadata during an unsubscribed trial. Subscribers can receive vector geometry for direct editing and eligible downloads. Deleting the conversion deletes its draft as well.
  • A Bevell Sketchpad workspace. When you sign in, we save your prompts and clarification replies, selected references, generated concepts, outline revisions and their placement so you can return to that workspace. Removing an item from the canvas hides it; it remains recoverable in History and is not a deletion request. The account inactivity rule also applies to saved Sketchpad content. During the preview, contact us below to permanently delete a Sketchpad workspace and its associated content.

An account unused for a year is treated as closed: its stored files and any free downloads left are removed together. Downloads you bought but have not used are kept.

We do not keep copies beyond that, and we do not use your files to train anything.

What is sent to OpenAI

Bevell uses OpenAI's API for the following requested AI features:

  • AI redraw and Logo conversion: your uploaded image or selected document page, to generate a clean drawing before tracing.
  • Logo refinement: the selected artwork, a labelled preview and your refinement instructions.
  • Sketchpad request planning: your request and summaries of the current drawing and selection. Choosing Reply also sends the earlier requests and questions in that clarification thread.
  • Sketchpad generation: your prompt, style and exact wordmark text, plus the selected reference image when making a variation. If you confirm generation after a clarification, that request thread is included too. We do not send the whole canvas or conversation by default.
  • Sketchpad outline checks: the selected source, a labelled contour preview, geometry summaries and exact text when supplied, to identify lettering and plan its consistency check.

OpenAI states that API data is not used to train models by default unless the customer opts in. Its default abuse-monitoring retention is up to 30 days, with legal and safety exceptions. We do not claim that our account has Zero Data Retention. See OpenAI's API data controls.

Direct tracing, non-AI conversion and ordinary manual editor actions do not send a request to OpenAI. Dragging a node does not run an AI model.

What we collect

When you use a conversion tool we temporarily process the file you upload in order to produce your CAD file. To enforce free conversion limits we store a fingerprint derived from your IP address, browser and language headers , it identifies a browser for quota purposes and cannot be reversed into your identity. If you join our waitlist we store your email address. If you make a purchase, Stripe processes the payment; we never see or store your card details.

If you send us feedback through the form in the converter or editor, we store what you wrote along with your IP address, and a copy is emailed to us. If you are signed in, or give an email address in the form, the copy includes it so we can reply to you. Editor feedback can optionally include the drawing ID, revision, format, units, subscription status and browser details; it does not attach your artwork or reference image. We keep error logs when a conversion fails, which include the IP address of the request, so we can diagnose the problem.

If you ask for early access to Bevell Sketchpad, we store your account's email address, your answers (how you heard about Bevell and what you will use Sketchpad for), when you asked, and our decision, and a copy is emailed to us so we can decide. Our analytics records that you asked and how you heard about us, never what you wrote.

How we use your data

  • Uploaded images: converted, deleted within 24 hours if you are signed out, kept with the conversion if you have an account, never used to train anything
  • Browser fingerprint: to count free conversions and rate-limit abuse
  • Email addresses: to notify you about product updates, if you opted in
  • Feedback and error logs: to fix bugs and improve conversion quality
  • Anonymous analytics: to understand which tools are useful and fix bugs

Generation history

Recent DXF previews are cached locally in your browser (IndexedDB) so you can revisit them. Local entries expire after 30 days, and you can delete any entry manually at any time. Signed-in conversion history and its files are also stored server-side as described above.

Analytics

We use Umami and PostHog to understand which parts of the site are useful and to diagnose errors. PostHog receives explicit product events such as conversion mode, file-type bucket, counts and outcome. Automatic DOM capture is disabled. Session replay is used on marketing and informational pages and on the converter. On the converter your uploaded image, every preview of the drawing and your file names are blanked out in your browser before anything is recorded, so a replay shows only the page around them. Replay stays off in the editor, including Sketchpad, where the whole screen is your drawing. Form inputs are masked and sign-in/account controls are excluded from replay. Analytics events and replay do not include your filename, drawing or uploaded image. When you sign in, PostHog can associate those events with your account identifier and email so we can understand account-level conversion flows. PostHog estimates your approximate location (country and city) from your IP address and then discards the address; it is not stored. Browser PostHog state is kept in local storage, not a tracking cookie. Server-side conversion and billing outcome events are sent directly to PostHog without uploaded file contents.

Third parties

  • OpenAI: AI redraw, Logo conversion and requested refinement, Sketchpad request planning, concepts and lettering checks (see above)
  • Stripe: payment processing (we never see your card details)
  • AWS ECS: hosting and file conversion
  • Cloudflare R2: stores queued/retry copies, source images, converted files, previews, editor drafts and Sketchpad artwork privately
  • Supabase: durable conversion and Sketchpad job status, Sketchpad workspace metadata and prompts, Sketchpad early access requests, quotas, payment records, rate limiting, error logs and feedback
  • Amazon SES: sends sign-in links and the emails we send you
  • Umami and PostHog: website and product analytics as described above

We do not sell your data to anyone. We do not use your uploaded images or chat content for training, marketing, or any purpose beyond providing the service.

Your rights

You can request deletion of your data at any time by emailing natalie@bevell.app. We will remove your information within 30 days.

Local storage

We do not set tracking or advertising cookies. We use your browser's IndexedDB to store recent generation previews locally (auto-deleted after 30 days), and PostHog uses local storage for its browser identifier. Download quotas are tracked server-side using an anonymous fingerprint, which requires no cookie.

Contact

Questions about this policy? Email natalie@bevell.app.