The short version
SpecReview is a cloud-based drawing review and should-cost platform built for Indian SME manufacturers and job shops. This Privacy Policy explains how SpecReview ("we", "our", "us") collects, uses, stores, and protects information when you use our platform at specreview.in or the web application at specreview-web.web.app.
By creating an account and using SpecReview, you agree to the practices described in this policy. If you do not agree, please do not use the platform.
Who we are
SpecReview is operated as an AI-powered SaaS product. Our infrastructure runs on Google Firebase (Firebase Hosting, Firestore, Authentication) hosted in Google's Asia South 1 region (Mumbai, India). Our AI analysis is powered by Anthropic's Claude API.
For questions about this policy, contact us at support@specreview.in.
Data we collect
We collect the minimum data needed to run the platform and provide you a useful service.
| Category | What we collect | Why |
|---|---|---|
| Account data | Email address, password (hashed by Firebase Auth), company name, industry, designation, phone (optional) | To create and manage your account, contact you about your subscription, and personalise the experience |
| Analysis history | Drawing number, part name, audit score, commercial risk summary, analysis type, date — saved to your account for your own reference | So you can review past analyses and re-visit results without re-running |
| Rate card | Your shop rates (Rs/min, Rs/kg etc.) entered in the rate card editor | To compute your should-cost analysis. Stored in your account only — not visible to us or any other user |
| Credit & payment data | Credit balance, credit transaction log (deductions, grants, refunds), UPI payment reference codes you submit | To manage your credit balance and verify manual UPI payments |
| Usage data | Feature usage, analysis type counts, error events — logged by Firebase Analytics | To improve the platform and identify bugs. Not tied to your drawing content |
| Device / technical data | Browser type, operating system, IP address, session timestamps | Standard web server and Firebase security logs |
Your engineering drawings — the most important section
Your drawings are not stored on our servers. When you upload a PDF, JPG, or PNG drawing and click Run, the file is sent directly from your browser over an encrypted connection to our API function, which passes it to the Anthropic Claude API for analysis. Once the analysis is complete and the result is returned to your browser, the drawing data is not retained in our systems.
What happens to your drawing
- The file is uploaded from your browser over TLS 1.3 encrypted connection
- It is transmitted to Anthropic's API alongside the analysis prompt
- Anthropic processes the image/document and returns the structured analysis result (JSON)
- The drawing file itself is not written to any SpecReview database or storage bucket
- Only the analysis result (scores, gaps, cost figures, part name, drawing number) is saved to your account history — not the drawing itself
Anthropic's data handling
Your drawing is processed by Anthropic's Claude API. Anthropic's API usage policy states that API inputs (including your drawings) are not used to train Anthropic's models by default. For details, refer to Anthropic's Privacy Policy.
What you should not upload
Do not upload drawings that contain classified, export-controlled (ITAR/EAR), or legally privileged information beyond standard commercial manufacturing drawings. SpecReview is designed for commercial manufacturing drawings — not defence-classified or nuclear-related technical data.
How we use your data
- To provide the service — run drawing audits, should-cost analyses, DFM reviews, quality plans, and VA/VE analysis on your uploaded drawings
- To manage your account — maintain your credit balance, process payments, send transactional emails (verification, credit confirmation)
- To improve the platform — aggregate anonymised usage statistics to identify which features are used most, where errors occur, and what to build next. No individual drawing content is used.
- To communicate with you — respond to support queries sent to support@specreview.in, notify you of credit balance and platform updates
- To prevent fraud — detect unusual account activity or payment fraud using Firebase Authentication and security rules
We do not use your data for advertising. SpecReview is ad-free. We do not sell your data to third parties. We do not use your drawing content or rate card data for any purpose other than running the analysis you requested.
Who we share data with
We share your data only with the sub-processors required to run the platform:
| Sub-processor | Purpose | Location |
|---|---|---|
| Google Firebase | Authentication, Firestore database (account data, history, credits), Hosting | Asia South 1 (Mumbai, India) |
| Anthropic (Claude API) | AI drawing analysis — receives your drawing and returns structured analysis | United States (Anthropic's infrastructure) |
| api.qrserver.com | Generates UPI QR codes for payment display — receives the UPI URI string only | European Union |
We do not share your data with any other third party, including advertisers, analytics brokers, or data resellers.
Payments and billing
SpecReview uses a credit-based system. Credits are purchased via UPI bank transfer. We do not collect or store your bank account number, card number, or UPI PIN.
Manual UPI payments
When you purchase credits, you make a bank transfer to our UPI ID and email us your transaction reference code and a screenshot. We verify the payment manually and add credits to your account within 24 hours. The reference code and your email are stored as your payment record.
Future card payments
When we integrate Razorpay (planned for when we reach ~15 paying customers), card and UPI transactions will be processed entirely by Razorpay, which is PCI-DSS Level 1 compliant. SpecReview will not store any card data.
GST
On request, we provide a GST invoice. Your GSTIN, address, and company name provided for the invoice are stored as a billing record. We are not currently GST-registered; invoices will be issued once registration is complete.
How we protect your data
- TLS 1.3 encryption in transit — all data between your browser and our servers is encrypted
- Firebase Authentication — passwords are hashed using industry-standard algorithms; we never see your raw password
- Email verification required — all accounts require email verification before accessing the platform
- Firestore security rules — each user can only read and write their own data; other users' accounts are inaccessible
- Append-only credit log — your credit transaction history cannot be modified or deleted even by our admin tools, preventing tampering
- No drawing storage — drawings are not written to disk or database at any point in our infrastructure
How long we keep your data
| Data type | Retention period |
|---|---|
| Account profile (name, company, email) | Until you delete your account, or 2 years of inactivity |
| Analysis history (scores, summaries) | Until you delete individual entries or close your account |
| Credit transaction log | 7 years (financial records obligation under Indian law) |
| Payment references (UPI ref codes) | 7 years |
| Drawing files | Not retained — processed and discarded immediately after analysis |
| Rate card / shop rates | Until you clear or overwrite them, or close your account |
| Firebase Auth logs | 90 days (Firebase default) |
To request deletion of your account and all associated data, email support@specreview.in with the subject line "Account deletion request". We will complete deletion within 30 days, except where records must be retained for legal or financial compliance.
Your rights over your data
Under India's Digital Personal Data Protection Act 2023 (DPDPA) and applicable data protection principles, you have the following rights:
- Right to access — request a copy of the personal data we hold about you
- Right to correction — ask us to correct inaccurate data (you can also update most data directly in the app under Profile settings)
- Right to erasure — request deletion of your account and personal data, subject to legal retention obligations
- Right to withdraw consent — you can withdraw consent at any time by closing your account. This will not affect analyses already completed.
- Right to grievance redress — if you have a complaint about how we handle your data, contact us at support@specreview.in. We will respond within 30 days.
To exercise any of these rights, email support@specreview.in from the email address registered to your account.
Cookies and local storage
SpecReview uses minimal cookies and browser storage:
- Firebase Authentication session cookie — stores your login session so you stay signed in. Cleared when you sign out.
- Firebase Analytics — uses anonymised identifiers for aggregate usage statistics. No personally identifiable information is linked to analytics data.
- No advertising cookies — we do not use Google Ads, Meta Pixel, or any advertising tracking.
- No third-party tracking — no social media widgets, no heat-mapping services, no A/B testing platforms on this platform.
You can clear all cookies and local storage for specreview.in using your browser's developer tools or privacy settings. This will sign you out of the platform.
Children's privacy
SpecReview is a professional B2B platform intended for business users. We do not knowingly collect data from individuals under the age of 18. If you believe a minor has created an account, contact us at support@specreview.in and we will delete the account promptly.
Changes to this policy
We may update this Privacy Policy as our platform evolves. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify active users by email at least 14 days before the change takes effect
- Display a notice inside the app on your next login
Continued use of SpecReview after the effective date of a revised policy constitutes acceptance of the new terms. If you disagree with a change, you may close your account before the effective date.
Contact us
For any privacy-related questions, data requests, or complaints:
We're here to help
Email: support@specreview.in
Subject line for data requests: "Privacy request — [your account email]"
Response time: within 5 business days for general queries, within 30 days for formal data access or deletion requests.
SpecReview · specreview.in · For Indian SME manufacturers