Privacy
How Antevasin Design handles data
Last updated 21 August 2026.
Antevasin Design is practice-management and drawing software for architects. This page describes what is collected when you use it, why, and how to have it exported or removed.
Account and practice data
Creating an account stores your name, email address and a password hash. Drawings, contacts, projects and practice settings you create belong to your practice and are visible only to the people you invite into it — see the platform's tenancy model, which keeps every practice's data separated by policy at the database level, not only in the application.
Connecting a Google account
A practice's owner or admin can optionally connect a personal Google account to import its contacts into the practice's directory. This is opt-in, per practice, and off until somebody turns it on.
What that connection can do:
- Read-only. Nothing is written back to your Google contacts. Nothing is deleted there, either.
- Only what you choose. You pick a contact group to import from — not your whole address book — and review what would be created before anything is saved.
- Only a few fields. Name, organisation, job title, email, phone number and postal addresses. Nothing else about a Google contact is read or stored.
- Once imported, a contact belongs to the practice like any other — editing or deleting it in Google afterwards does not change what the practice has, and disconnecting does not delete what was already imported.
- Disconnecting revokes the connection at Google as well as locally, not only forgetting it on our side.
The access token this requires is encrypted before it is stored, with the key held outside the database — a copy of the database on its own is not enough to read it.
Subprocessors — who else this relies on
Running this depends on a small number of other companies, each given only what it needs to do its one job:
- Railway hosts the application, the database and file storage, in the EU.
- Resend sends transactional email on our behalf — password resets, invitations, share links and comment notifications — to whichever address you or your practice gives it.
- Sentry receives error reports for diagnosis. Email addresses are never included in what's sent; only a domain, where relevant.
- Google, only if a practice chooses to connect an account — see above.
Traffic analytics is the exception, not an addition to this list: it runs on infrastructure we control ourselves rather than a third party's, is cookieless, and records page paths rather than anything that identifies you.
How long data is kept
For as long as your account or practice exists, plus a limited backup retention period used for disaster recovery. Deleting your account or a practice's data before that period ends removes it from active use immediately; backups age out on their own schedule afterwards.
Exporting or deleting your data
A practice's owner can export everything the practice holds, or delete the practice entirely, from its own Settings page — no request needed. For anything that isn't, or for a question about what's held on you specifically, email [email protected] and it will be actioned by hand, within the timeframe UK GDPR requires for such a request.
Questions
Email [email protected] for anything not covered here.