Privacy Policy

FabProposal is software for metal fabrication shops, operated by Alchemy Labs LLC (“FabProposal”, “we”, “us”). This policy covers fabproposal.com, the FabProposal app, its customer portal and our public blog.

Questions or requests: kilgasadam@fabproposal.com.

Fabrication shops (“Shops”) subscribe to FabProposal and invite their staff and their own customers. Information a Shop puts into FabProposal — its customers, quotes, drawings, jobs, invoices and time records — belongs to that Shop. We process it on the Shop’s behalf to run the service, and the Shop decides what it collects and how it uses it.

If you are a Shop’s customer or employee and have a question about your information, please contact that Shop first; we will help them answer it.

Account information. Names, email addresses, job titles, roles, company names, phone numbers and business addresses for Shop staff and Shop customers, plus passwords (stored only as secure hashes by our authentication provider).

Shop applications. When a shop applies for access we collect the shop name, contact name, email and, optionally, a phone number and a note, plus the campaign tags in the link you arrived from (for example “utm_source=linkedin”).

Business content. Requests for quote, drawings and other uploaded files (PDF, DXF, images), quotes, purchase orders, jobs, change orders, shipments, invoices, vendor quotes, messages between a Shop and its customers, notes and notifications.

Time tracking. If a Shop uses time tracking: which employee worked at which station and when, and any edits a supervisor makes. We do not collect location.

Billing. Our payment processor, Stripe, collects card details directly; we never see or store full card numbers. We keep the Stripe customer reference, subscription status and payment history (amounts, dates, status).

Connected services. If a Shop connects Microsoft 365 or QuickBooks, we store the connection settings and access tokens (encrypted) and the information exchanged with those services, described below.

Usage records. Records of important actions (for example who approved a quote or changed an invoice), and counts of AI requests per feature with their cost. We do not store the text of AI chat conversations.

Website visits. On our public pages we count visits per page and per referral source per day. We do not store your IP address, your browser details or any identifier, and we do not set a tracking cookie. Our hosting providers keep standard server logs (which include IP addresses) for security and troubleshooting.

• To provide FabProposal: quoting, pricing, nesting, production scheduling, purchasing, time tracking, invoicing and the customer portal.
• To send service emails: invitations, password resets, quotes, invoices, order and shipping notices, and messages. A Shop’s customers can choose which notices they receive under Account → Notifications. We do not send marketing email to Shop users or their customers.
• To review shop applications, set up new shops and provide support. Our staff can enter a Shop’s workspace for support only after the Shop’s owner approves the request, and only for a limited time.
• To bill subscriptions, prevent abuse, keep the service secure and fix problems.
• To understand which pages and marketing campaigns bring visitors and applications, using the anonymous counts described above.

We do not sell personal information, and we do not use Shop content for advertising.

Some features use AI from Anthropic (Claude) — for example reading a drawing or PDF print to fill in part details, mapping a bill of materials, drafting or reading vendor emails, and answering questions in the in-app assistant. When you use these features, the relevant file or text is sent to Anthropic to produce the result. Anthropic processes it under commercial terms that do not allow it to train its models on that content.

A Shop may use its own Anthropic account key, in which case its AI requests run under that account. AI output can be wrong: estimators should review what it fills in before relying on it.

We share information only with the service providers that run FabProposal, and only what each needs:

• Supabase — database, sign-in and file storage.
• Vercel — website and application hosting (United States).
• Stripe — subscription billing and card payments.
• Anthropic — AI features, as described above.
• Resend — delivery of service emails.

And, only when a Shop chooses to connect them:

• Microsoft 365 — to save job files to the Shop’s SharePoint or OneDrive, to send email from the Shop’s own mailbox, and to read replies from vendors in that mailbox so they can be attached to the right request.
• Intuit QuickBooks — to send invoices, customers and time records to the Shop’s QuickBooks, and to show when invoices are paid. Online invoice payments are taken by QuickBooks, not by us.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a sale or reorganization of our business (in which case this policy continues to apply).

FabProposal’s own marketing tools connect to FabProposal’s own YouTube, LinkedIn, Instagram, Facebook and TikTok accounts so that our team can publish posts we have approved and see how they perform. These connections are used only by FabProposal staff; Shops and their customers never connect their social media accounts to FabProposal.

FabProposal uses YouTube API Services. With the account owner’s permission we upload videos and thumbnails to our YouTube channel, read the channel’s name and subscriber count and each of our videos’ views, likes and comment counts, and read YouTube Analytics reports for our own videos: watch time, average view duration, audience retention, traffic sources, subscribers gained and thumbnail click-through. We store the resulting video IDs and daily totals to report on our marketing and to help our team (with AI assistance) decide what to make next, and keep access tokens encrypted. We do not access any other YouTube data and do not share it with anyone.

By using these features you also agree to the YouTube Terms of Service, and Google’s handling of data is described in the Google Privacy Policy. Access can be removed at any time from Platform → Marketing → Connections (Disconnect deletes the stored tokens) or from your Google account security settings.

FabProposal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use only the cookies needed to keep you signed in, plus a short-lived security cookie while a FabProposal administrator connects a social media account. We do not use advertising or third-party tracking cookies.

The app also saves a few preferences in your browser (for example light or dark mode, and which panels you collapsed), and remembers the campaign tags of the link you arrived from until you close the tab.

Information is encrypted in transit (HTTPS). Each Shop’s data is separated from every other Shop’s by access rules in the database, and Shop customers see only their own company’s requests, quotes and files. Passwords are stored as hashes, and access tokens for connected services are kept in an encrypted vault. Important actions are logged. No system is perfectly secure, but we work to protect your information and will notify affected Shops of a breach as the law requires.

We keep a Shop’s information for as long as the Shop has an account, because Shops rely on quote, job and invoice history. Cancelling a subscription does not immediately delete data, so a Shop can return or ask for a copy.

A Shop’s owner can ask us to delete the Shop’s workspace. We then delete its records, files and user accounts. We keep billing records and security logs where we need them for legal, tax or security reasons; AI cost records and our own administrative log are kept without the Shop’s content.

• You can update your name and contact details in your account settings, and Shop customers can choose which emails they receive.
• You can ask us for a copy of your personal information, to correct it, or to delete it, by emailing kilgasadam@fabproposal.com. If your information is held for a Shop, we may refer your request to that Shop.
• Depending on where you live (for example California or the EU/UK), you may have additional rights, such as to object to certain processing or to complain to a regulator. We will honor the rights that apply to you.

FabProposal is a business tool and is not directed to children. We do not knowingly collect information from anyone under 16.

FabProposal is operated from the United States and our providers store data in the United States. If you use FabProposal from elsewhere, your information is transferred to and processed in the United States.

We will post any changes on this page and update the date at the top. If a change materially affects how we use information, we will notify Shop owners by email or in the app before it takes effect.

Alchemy Labs LLC, 176 S Grant St, Little Chute, WI 54140, USA — kilgasadam@fabproposal.com. See also our Terms of Service.