Ventdraft is HVAC design software operated by Code Sense (South Africa). This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have over it. We keep data collection to the minimum needed to run the service, and we never sell your data.
Information we collect
Account information
When you create an account we store your email address and a securely hashed password, and we create a workspace for your projects. We use your email to verify your account, send transactional messages, and for sign-in.
Project data
The floor plans, equipment, pipe routing, catalogues and quotes you create are stored so we can provide the service and show you your work across sessions. This content belongs to you.
Billing information
Payments for Ventdraft Pro are processed by Paystack. We do not see or store your card details — we only keep your plan status and the Paystack customer/subscription references needed to manage your subscription.
Technical information
To operate and secure the service we process basic technical data such as your IP address, browser type and request logs (used for security, abuse prevention and rate-limiting).
How we use your information
- Provide, maintain and secure the Ventdraft service and your projects.
- Verify your email address and let you sign in.
- Process your subscription and payments (via Paystack).
- Send transactional email — email verification, password resets, and a welcome message. We do not send marketing email without your consent.
- Respond to support requests and protect against fraud and abuse.
Cookies
We use only essential cookies — a secure session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
Service providers we share data with
We share the minimum data necessary with trusted providers who help us run Ventdraft. We do not sell your personal information to anyone.
- Paystack — payment processing for Pro subscriptions.
- Brevo — sending transactional email (verification, resets, welcome).
- Cloudflare — content delivery, DNS and security (DDoS/abuse protection).
- Hosting — our application and database are hosted in South Africa.
Some of these providers may process data outside South Africa; where they do, they are bound to protect it under their own data-protection commitments.
Data retention
We keep your account and project data for as long as your account is active. If you close your account or ask us to delete your data, we remove it (subject to any records we must retain for legal or accounting reasons, such as invoices).
Your rights
Under South Africa's POPIA (and the GDPR where it applies) you have the right to access, correct, export or delete your personal information, and to object to certain processing. To exercise any of these, email us and we'll action it promptly.
[email protected]Security
We protect your data with encryption in transit (HTTPS everywhere), securely hashed passwords, and per-workspace isolation so tenants can't see each other's data. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data we hold.
Children
Ventdraft is a professional tool intended for businesses and adults. It is not directed at children and we do not knowingly collect data from anyone under 18.
Changes to this policy
We may update this policy from time to time. We'll revise the "last updated" date above, and significant changes will be highlighted where appropriate.
Contact us
Questions about privacy or your data:
[email protected]