Privacy Policy

01 Who we are

National Lumber & Building Materials Co. is an independent Rhode Island corporation supplying framing takeoffs and building-material packages to contractors across Rhode Island and New England. We operate online-first and do not run a walk-in yard. We are the party responsible for this website and for the plan files you send us.

Reach us at nationallumberri@gmail.com or (774) 488-7976.

02 What this site does not do

Most of a privacy policy is usually a list of tracking you have to accept. This site does none of it, so the list is short and it is a list of absences:

• No cookies are set by this site. There is no cookie banner because there is nothing to consent to.
• No analytics. No Google Analytics, no page-view counters, no session recording, no heatmaps.
• No advertising or social pixels. Nothing from Meta, LinkedIn, TikTok or an ad network runs here.
• No third-party fonts. Typefaces are served from our own domain, so no font provider sees your visit.
• We do not sell, rent or trade personal information. We have never done it and there is no arrangement under which we would.

You can verify this. Open your browser's developer tools, look at the Network and Application tabs, and load any page on this site.

03 What leaves your browser

Three things can send data off your device, and only one of them can happen without you pressing a button.

Browsing the catalog, searching products, building a project list and using the ballpark estimator all run entirely inside your browser. Nothing is transmitted.

04 Forms and email

The takeoff request, the contact form, the pro-builder application and the updates sign-up do not post to a server we control. Each one assembles what you typed into a pre-addressed email and hands it to your own mail application. Nothing is transmitted until you press send there, and you can read or edit the message first.

This has a consequence worth stating plainly: your request travels as ordinary email, with the privacy properties of ordinary email. It is not end-to-end encrypted. Do not send us anything you would not put in an email.

What we receive

Your name, company, email address, phone number, the project details you chose to include, and any files you attached. We use it to prepare your takeoff, quote your package, and follow up about that project. We do not add you to a marketing list from a takeoff request. The updates sign-up is the only list, and it exists only if you asked for it.

05 The AI plan read

The estimator at /estimate is the one feature that sends your files to a third party, so it gets its own clause.

The path a file takes

You select PDF sheets or photos and press run. The files are uploaded to our own cloud function, which passes them to OpenAI's API to be read. The model returns a measured scope, we price it against our own price book, and the result comes back to your screen.

Retention

Our function does not save your plan files. They exist in memory for the length of the request and are gone when it finishes. They are not written to storage, not attached to an account, and not used to train anything of ours.

OpenAI processes the files under its API terms. At the time of writing, OpenAI states that API data is not used to train its models and is retained for a limited period for abuse monitoring. Their policy is theirs to change, so treat this sentence as a pointer to their current terms rather than a promise we can make on their behalf. If your drawings are under an NDA that forbids this, skip the AI read and send the set to our estimating team instead. That path is free, it is the one we recommend anyway, and a human does the work.

Line corrections

If you edit a quantity, swap a SKU or remove a line before sending the list, that single edit is recorded so we can improve the assembly rules. The record holds the line as read, the line as you corrected it, the model used, and a hash of the files. It does not hold your name, your email, your project, or the drawings themselves, and it cannot be traced back to you.

Nothing is ordered from an AI read

Every AI list and its preliminary pricing is verified by a National Lumber estimator before anything is quoted or ordered. See the terms.

06 What stays on your device

The site uses your browser's local storage for a few working values. These are not cookies, they are not sent to us, and no other website can read them.

Clearing your browser data for this site erases all of it. The project list and workspace state are lost when you do, which is the trade for not having accounts.

07 Hosting, logs and abuse controls

The site is served by Google Firebase Hosting. Like any web server, it records requests, which includes your IP address, the time, the page and your browser's user-agent string. We use these logs to keep the site running and to investigate abuse.

The AI endpoint is protected by Firebase App Check with reCAPTCHA Enterprise, which checks that a request came from this site in a real browser rather than a script. It runs only on that endpoint. We also count requests per user token and per IP address so the free beta cannot be drained by one visitor. Those counters hold a token, an IP address and a tally, and nothing else.

08 Service providers

The complete list of outside companies that can process anything of yours through this site:

• Google (Firebase Hosting, Cloud Functions, Firestore, App Check with reCAPTCHA Enterprise): serves the site, runs the estimate endpoint, holds quota counters and anonymous line corrections.
• OpenAI: reads the plan files you submit to the AI estimator, and only those.
• Your own email provider, whichever one you use to send us a form or a message.

That is the entire list. If it grows, this clause changes with it and the revision letter at the top of the sheet moves.

09 How long we keep things

• Plan files sent to the AI estimator: not stored by us at all.
• Plans and messages you email us: kept in our business records for as long as the project is live and afterwards as long as we need them for accounting, warranty and legal reasons.
• Quota counters: daily counters roll over daily; per-user totals last for the beta.
• Anonymous line corrections: kept indefinitely, because they carry nothing that identifies anyone.
• Server logs: kept on our hosting provider's standard retention schedule.

10 Your choices

You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email nationallumberri@gmail.com and we will respond. Where a law such as the Rhode Island Data Transparency and Privacy Protection Act gives you a stronger right than this paragraph, that law wins and you can hold us to it.

There is nothing to unsubscribe from unless you joined the updates list. If you did, tell us and you are off it.

One limit worth being straight about: we cannot delete a project record we need to keep for tax or warranty purposes, and we cannot reach into a third party's systems on your behalf. For anything OpenAI or Google holds, their own processes apply.

11 Children

This site sells building materials to construction businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child sent us something, email us and we will remove it.

12 Changes and contact

When this policy changes, the issue date and revision letter in the title block change with it. Material changes to what we collect or who processes it will be described here rather than folded in quietly.

Questions about this policy, or about a specific project's files:

National Lumber & Building Materials Co.
Rhode Island corporation, online-first
nationallumberri@gmail.com
(774) 488-7976

See also the Terms of Use (Sheet NL-91).