Privacy policy

Last updated:

The short version. To review a model, the Lookover extension sends an outline of it, a few screenshots and the answers to read-only questions about it to our server, which passes them to an AI model through OpenRouter. We never upload your .skp file. We do not keep your model data in our database after the review; we keep your email, your license information in protected form, and a record of each review (time, status, counts, cost). If you leave finding feedback on, we also keep which kinds of findings you dismiss or fix, never their content. AI requests are sent only to endpoints that keep no copy. Polar handles payments. We do not sell your data or use it to train AI models.

1. Who is responsible

Lookahead Labs LLC, a New Jersey (United States) limited liability company, runs Lookover and is the controller of the personal data described here. Contact: support@lookoverreview.com. This policy covers the Lookover SketchUp extension, the review service at api.lookoverreview.com, and the website lookoverreview.com.

2. What happens during a review

When you run a review, the extension sends our server:

The extension does not upload your .skp file. Clicking “Fix it” runs the fix locally in SketchUp; the edit itself does not go to our server.

Our server forwards this review content to an AI model through OpenRouter. Prompt logging is turned off on our OpenRouter account. On every request we tell OpenRouter to use only providers that do not collect data for their own purposes such as training (data_collection: "deny") and only Zero Data Retention endpoints (zdr: true), which do not retain prompts or outputs after answering. The model we currently use is Anthropic’s Claude, served through one of its Zero Data Retention endpoints: Google Cloud Vertex AI, Amazon Bedrock or Anthropic’s own API.

While a review runs, its content is held in our server’s memory. It is discarded when the review finishes, is cancelled or times out. We do not save outlines, screenshots, query results or findings to our database.

3. What we store

DataWhy
Your email address and Polar customer ID (copied from Polar when your key is created, updated when you change it in Polar)To send you your key, reset links and service messages, and to link your key to your purchase
Your license key, stored as a one-way hash (for lookups) and encrypted (so we can email it to you again), plus its last 4 characters; hashes of keys you have resetTo recognize your key and tell you when an old one was replaced
Your plan (Free or Pro), billing interval and subscription start date, as last read from PolarTo apply the right review limit, including when Polar is briefly unreachable
One record per review: an ID, status, start and finish times, number of findings, AI token usage and cost, a short error code if it failed, and a fingerprint (SHA-256 hash) of the model outlineTo count reviews against your limit, find faults and track costs
Finding feedback (anonymous usage events): when you dismiss, mark helpful, fix or undo a finding, the review ID, the kind of finding, its severity and what you did (and the reason you picked, if any). IDs and categories only: no titles, names, geometry or code. Turn it off under Extensions > Lookover > Settings… > “Share finding feedback”To see which checks are useful and which are noise
Short-lived signup and order-processing records (checkout IDs, status)To deliver your key after checkout

Server logs. Our server writes operational logs, hosted by Render and kept for 7 days. They can include review content: your focus note, finding titles, excerpts of the AI’s notes and the read-only scripts it ran, and therefore names from your model. Our own log lines mask email addresses and IP addresses, and do not include license keys. Our hosting provider also records requests, including IP addresses, at its edge. Access to logs is restricted.

IP addresses. We use your IP address to apply rate limits (held in memory only) and pass it to Polar when we create a checkout for you, which Polar uses for tax and fraud checks.

4. Stored on your computer

5. The website

lookoverreview.com is hosted on Vercel and uses Vercel Web Analytics to count page views. It does not use cookies; it records the page, referrer, browser, operating system, device type and country, and identifies visits with a short-lived hash rather than storing your IP address. The site sets no cookies of its own and has no advertising or third-party trackers. If you arrive through a partner’s link (for example?ref=sketchucation), the site keeps that partner’s name, and nothing about you, in your browser’s local storage for 90 days and adds it to the checkout link, so we can credit the partner if you sign up; we keep it with your license key for the same reason. The demo video on the home page is a YouTube privacy-enhanced embed: YouTube sets no cookies unless you play it. Checkout and the customer portal are run by Polar on its own pages, under its own cookie and privacy policies.

6. Who we share data with

We share personal data only with these service providers, only to run Lookover:

ProviderWhat they doLocation
Polar Software, Inc.Merchant of record: checkout, payments, tax, receipts, subscriptions, customer portal. Polar is an independent controller for payment data; see the Polar privacy policy. We never see your full card details.US
OpenRouter, and the Zero Data Retention AI endpoint it routes to (Google Cloud Vertex AI, Amazon Bedrock or Anthropic)Runs the AI part of each review; prompt logging off, no retentionUS
RenderHosts our review server and its logsUS (Virginia)
CloudflareNetwork edge in front of our server (through Render)Global
NeonHosts our databaseUS (AWS, US East)
ResendSends license key and key reset emailsUS
VercelHosts the website and its analyticsGlobal

We may also disclose data if the law requires it, to protect our rights or users’ safety, or to a buyer if the business is sold (this policy would continue to apply). We do not sell or rent personal data, and we do not use your models to train AI.

7. Legal bases (EEA and UK)

8. International transfers

We are based in the United States and our providers process data mainly in the US. If you are outside the US, your data is transferred there. We rely on our providers’ data processing terms for these transfers; where a provider offers them, those terms include the EU Standard Contractual Clauses and the UK addendum.

9. How long we keep data

10. Your rights

You can ask us for a copy of your personal data, to correct it, or to delete it, and you can object to or ask us to restrict how we use it. Email support@lookoverreview.com from the address on your key. Deleting your data means your key stops working. Depending on where you live (for example the EEA, the UK or California), you may have further rights, and you can complain to your local data protection authority. We handle these requests by hand and answer within the time the law requires. We do not sell or share personal data for targeted advertising. For payment data held by Polar, you can also contact Polar directly.

Data stored on your computer (your key in SketchUp’s preferences, past reviews saved in your models) is under your control: delete it in SketchUp or turn off saving as described in section 4.

11. Security

Traffic between the extension, our server and our providers is encrypted (HTTPS). Keys are stored hashed and encrypted, and access to our systems is restricted. No system is perfectly secure; if a breach affects your personal data, we will tell you as the law requires.

12. Children

Lookover is a professional tool and is not directed at children. You must be at least 18 to use it. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.

13. Changes

We will update this policy when what we collect or how we use it changes, and change the date at the top. For significant changes we will tell you by email or in the extension before they take effect.

14. Contact

Lookahead Labs LLC. Email support@lookoverreview.com.