Privacy Policy —
Effective date: October 2, 2026
("the app") is provided by . This policy explains what data the app collects, how it is used, and your choices.
Data we collect
- Account information: your email address and a password. Passwords are stored only as a salted, one-way hash (PBKDF2-SHA256); we cannot see your password.
- Business profile: the business name, license text, address, phone, email, website, logo, default rates and terms you choose to enter.
- Content you create: estimates, projects and invoices (which may include your clients' names, phone numbers, emails and project addresses), payment records you enter, expenses, and your material catalog and prices.
- Client approvals: when you send a proposal or invoice link, your client can view it without an account. If they approve or decline a proposal, we store the name they type, their drawn signature, any comment, and the time, IP address and browser type of that response, as a record for you and your client.
- Technical data: a session cookie to keep you signed in, and your IP address, used briefly to limit repeated failed sign-in attempts. Our hosting provider (Cloudflare) processes standard request logs.
We do not request GPS or phone address-book access, or use advertising identifiers. Client contact information you enter is stored to provide client management. Photos, including business logos, job photos and receipt images, are uploaded only when you choose to provide them. Failed product searches may be logged for troubleshooting. The app contains no ads or third-party analytics SDKs.
How we use data
Only to provide the app's features: signing you in, storing and showing your estimates, invoices, projects and catalog, and generating your PDF and Excel files (generated on your device). We do not sell your data or use it for advertising.
Third parties
- Cloudflare hosts the app and stores its database and uploaded photos.
- Voice dictation: optional dictation starts only when you choose Dictate notes and allow microphone access. Your browser or its speech provider may process audio online. The app does not upload or save audio on our servers. Recognized text is added to your editable job notes; it is sent to OpenAI only when you generate a draft.
- OpenAI: for the home-page AI notes dispatcher, we send your submitted note, local date, and up to 200 of your recent job names and client names to suggest a job folder and a note or reminder. Contact details, photos, estimates and payments are not automatically sent. Nothing is saved until you review and confirm. For AI estimate requests, the submitted job description and selected job type are sent to OpenAI's API to generate a draft. We do not automatically include your client contact details or existing estimate. Avoid entering private client information in the description. We keep a daily per-account usage count; we do not separately save the AI prompt or response on our server. If you add the draft to an estimate, it becomes part of your normal estimate records. We request that responses are not stored for later API retrieval. OpenAI's handling and retention of submitted content are subject to its API data controls and terms. See OpenAI's API data controls.
- Resend processes recipient addresses and email contents on our behalf to deliver account recovery and proposal notifications.
- Product price lookups: when you look up a SKU or paste a product link, the SKU or link is sent to the retailer's website and/or to SerpApi (a search API) to retrieve the product name and price. No personal information is included in these requests.
- Google Fonts may be loaded to display text.
Your clients' information
If you enter information about your clients, you are responsible for having a lawful basis to do so. We store it only so you can access it, and it is deleted with your account.
Data retention and deletion
Your data is kept while your account exists. You can delete individual estimates, invoices, payments, projects and catalog items at any time. To delete your account and all associated data, use Settings → Delete Account in the app, or the account deletion page. Deletion is immediate and permanent. Failed sign-in records are erased automatically within minutes to hours.
Security
All traffic is encrypted with HTTPS. Sessions use secure, HTTP-only cookies. Access to your data requires your password.
Children
The app is intended for business use by adults and is not directed to children under 13.
Changes
We may update this policy; the effective date above will change when we do.