I hold nothing
Your drawings, markups, takeoff and tool chests never reach me. Below is every connection the software makes and what travels over it. If you find one that isn't listed, tell me and I'll either fix it or add it here.
| Connection | When | What it sends | Turn it off |
|---|---|---|---|
| Update check against the public release page on GitHub | Every 30 minutes from the Office server, or hourly from an app with no server | A request for the latest version number. Nothing about your company, your people or your drawings. GitHub sees your IP address, the same as it would if you opened the page in a browser. | Sealed (planned) |
| Desktop app to your Office server | While people are working (Office only) | Drawings, markups and takeoff, moving between machines on your own network. None of it leaves the building. | It's your server |
| Office license check | When the server starts | Nothing. The license is a signed file your own server reads offline. | Nothing to turn off |
There is no usage tracking, no analytics and no crash reporting in the software. Not anonymized versions of those things. They aren't in there.
Where it's stored
For one person, in that person's own folders. With Office, the shared sets, markups and tool chests live in one folder on your server. Back up that folder and you've backed up the office.
Getting it back out
Markups get written into the PDFs the standard way, so any other PDF program can read them. Takeoff exports to Excel, CSV, PDF, XML and JSON. Nothing ends up in a format only I can open.
How updates are checked
Releases are signed with a key only I hold. Before an update installs, the app checks the signature, the SHA-256 and the file size, and refuses the update if any of the three doesn't line up.
Why it's built this way
Because I never receive your files there's nothing at my end to breach, subpoena or lose. That isn't a policy I could quietly rewrite at renewal either, since there's no pipe for your data to travel down in the first place.
The cost of that is real. I can't recover a file you deleted, and when something goes wrong I can't look at your job to work out why, so you'll be sending me screenshots. I'd still rather have it this way.