1. Who we are
LET'S SPOT IT is currently developed and operated by , an individual based in France. For data-protection purposes, this person is the controller of the personal data described in this policy.
2. Your drawings, PDFs and images
The core comparison workflow runs in your browser. When you select a PDF or image, the application reads and renders that file locally on your device.
- Your comparison documents are not uploaded to a LET'S SPOT IT document server.
- LET'S SPOT IT does not maintain a cloud database of your drawings.
- Comparison content and annotations are not stored as projects on our servers.
- Exports are generated locally and downloaded or printed from your device.
This local-processing design is separate from account authentication: account information is processed online so that the service can identify users and control access to the application.
3. Personal data we process
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, account identifier, creation timestamps, plan and access status. | Create and operate your account and determine whether access is active. |
| Authentication data | Login/session information and authentication events processed by our authentication provider. | Sign-in, session management, email confirmation and password reset. |
| Transactional email data | Recipient email address and delivery/message metadata for account emails. | Send confirmation, password-reset and other essential account messages. |
| Technical and security data | IP address, request timestamps, browser/user-agent information and security logs that may be generated by infrastructure providers. | Deliver the website, prevent abuse, troubleshoot and protect the service. |
| Support communications | Your email address and anything you choose to include in a support or contact message. | Answer questions, investigate problems and provide support. |
Data we do not currently collect through the application
- We do not collect your PDFs, technical drawings or images for server-side storage.
- We do not currently collect payment-card information because the service is free during beta.
- We do not use your account data to build advertising profiles.
4. Why we process personal data
Depending on the context, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Create your account, authenticate you and provide access to the service. | Performance of our agreement with you and steps taken at your request to use the service. |
| Send essential account emails such as confirmation and password reset messages. | Performance of our agreement with you. |
| Protect the service, prevent abuse and investigate security problems. | Our legitimate interests in operating a secure and reliable service. |
| Respond to support and contact requests. | Performance of our agreement where the request concerns your account or service use; otherwise our legitimate interest in responding to inquiries. |
| Comply with binding legal requirements. | Legal obligation where applicable. |
LET'S SPOT IT does not currently send marketing newsletters through the account system. If optional marketing communications are introduced later, this policy and the relevant consent choices will be updated first.
5. Browser storage and cookies
The application uses browser storage that is necessary to keep your authenticated session available between visits. This allows you to remain signed in unless you log out, your session expires or the browser storage is cleared.
LET'S SPOT IT does not currently use third-party advertising cookies in the application. Infrastructure providers may use strictly necessary technical mechanisms for security, routing or service delivery.
6. Service providers
We use a small number of providers to operate the online parts of the service:
- Cloudflare — website delivery, DNS, network security and email routing.
- Supabase — authentication and the account/profile database.
- Resend — SMTP delivery of transactional account emails.
These providers process only the information needed for their role. They do not receive your locally opened technical drawings from the comparison workflow.
7. International data transfers
Some service providers or their subprocessors may process personal data outside the European Economic Area. Where required, transfers are handled using applicable safeguards made available by those providers, such as Standard Contractual Clauses or another legally recognised transfer mechanism.
8. How long we keep personal data
Account/profile information is generally retained while your account remains active. If your account is deleted, we will remove or anonymise account data that we control when it is no longer required, subject to limited residual copies in backups, security logs or records that must be retained for legal or security reasons.
Support messages and technical/security records are retained only for as long as reasonably necessary for the purpose for which they were collected and according to the retention settings or obligations applicable to the relevant service provider.
9. Your privacy rights
Depending on applicable law, you may have the right to request access to your personal data, correction, deletion, restriction of processing, objection to certain processing and portability of data you provided.
To exercise a right or request deletion of your LET'S SPOT IT account, email support@letsspotit.com. We may need to verify that the request relates to your account before acting on it.
If you are in France or otherwise protected by the GDPR, you also have the right to lodge a complaint with the competent data-protection authority, including the CNIL in France.
10. Security
We use technical and organisational measures designed to protect account data, including authenticated access and database access controls. No online service can guarantee absolute security, so you should use a unique password and keep your login credentials confidential.
11. Children
LET'S SPOT IT is a professional technical-review tool and is not directed to children. We do not knowingly invite children to create accounts.
12. Changes to this policy
We may update this policy when the service, providers or legal requirements change. The current version will always show its latest update date at the top of this page. Material changes affecting how personal data is used will be communicated when appropriate.
13. Contact
Questions about privacy or your account can be sent to: