Privacy Policy

1. Information We Collect

Personal Information

We collect information that you provide directly to us when you:

• Create an account
• Use our services
• Contact customer support
• Subscribe to our newsletter
• Participate in surveys or promotions

Types of personal information we collect:

• Name and company name
• Email address
• Phone number
• Billing address
• Payment information (processed securely through Stripe)
• Business information (company size, service area)

Usage Information

We automatically collect certain information when you use EstimateKit:

• Browser type and version
• Device information
• IP address
• Pages visited and features used
• Time and date of visits
• Referring website
• Click patterns and navigation paths

Customer Data

When you use EstimateKit, you may input customer information including:

• Customer names and contact details
• Service addresses
• Equipment information
• Job details and estimates
• Photos and notes

Important: You own this data. We only process it on your behalf to provide our services.

2. How We Use Your Information

We use the information we collect to:

Provide and Improve Services

• Operate and maintain the EstimateKit platform
• Process your transactions
• Send service-related communications
• Provide customer support
• Improve and optimize our software
• Develop new features

Communication

• Send you updates about your account
• Respond to your inquiries
• Send promotional emails (you can opt out)
• Notify you about changes to our service
• Request feedback or reviews

Security and Legal

• Protect against fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Resolve disputes

Analytics

• Understand how users interact with EstimateKit
• Analyze usage patterns and trends
• Measure effectiveness of features
• Improve user experience

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in these limited circumstances:

Service Providers

We work with third-party service providers who help us operate our business:

• Stripe: Payment processing (PCI-compliant)
• Supabase: Database hosting and authentication
• Resend: Transactional email delivery
• Google Workspace: Business email
• Cloud hosting providers: Application infrastructure

These providers are contractually obligated to protect your data and use it only for providing services to us.

Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal processes
• Government requests
• Protection of our rights and safety
• Investigation of fraud or security issues

Business Transfers

If EstimateKit is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information with your explicit consent for specific purposes not covered in this policy.

4. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication (password hashing)
• Regular security updates and patches
• Secure backup systems

Organizational Safeguards

• Limited employee access to personal data
• Background checks for staff with data access
• Security awareness training
• Incident response procedures

Payment Security

• PCI-compliant payment processing through Stripe
• We do not store complete credit card numbers
• Tokenized payment information

Important: While we use reasonable security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Your Data Rights

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

• Request a copy of your personal data
• Export your customer data at any time
• Download your estimates and records

Correction

• Update your account information
• Correct inaccurate data
• Complete incomplete information

Deletion

• Request deletion of your account
• We will delete your data within 30 days
• Some information may be retained for legal/security purposes

Restriction and Objection

• Limit how we process your data
• Object to certain types of processing
• Opt out of marketing communications

Withdrawal of Consent

• Withdraw consent for specific data processing
• Unsubscribe from marketing emails
• Disable certain features

To exercise these rights: Email hello@estimatekit.com

6. Data Retention

Account Data

• Retained while your account is active
• Deleted within 30 days of account closure
• Some data retained longer for legal compliance

Customer Data (Your Business Data)

• You control retention of customer information
• Deleted when you delete it or close your account
• Backups retained for 30 days for recovery purposes

Usage Data

• Aggregated analytics retained indefinitely
• Individual usage data retained for 2 years
• Log files retained for 90 days

Payment Data

• Transaction records retained for 7 years (tax/legal requirements)
• Payment methods can be deleted anytime

7. Cookies and Tracking

Cookies We Use:

Essential Cookies

• Authentication (keep you logged in)
• Session management
• Security features
• Load balancing

Analytics Cookies

• Usage statistics
• Performance monitoring
• Feature adoption tracking
• Error reporting

Preference Cookies

• Language preferences
• Display settings
• Feature preferences

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

8. Third-Party Links

EstimateKit may contain links to third-party websites (e.g., customer websites, supplier links). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

9. Children's Privacy

EstimateKit is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it immediately.

10. International Data Transfers

EstimateKit is based in Canada and our servers are located in the United States. If you access our service from outside North America, your data may be transferred to, stored, and processed in countries with different data protection laws.

For EU/UK Users: We comply with applicable data protection laws including GDPR. We use standard contractual clauses for international data transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to Know

• Categories of personal information collected
• Sources of information
• Business purposes for collection
• Categories of third parties we share with

Right to Delete

Request deletion of your personal information (with certain exceptions)

Right to Opt-Out

Opt out of sale of personal information (Note: We do not sell personal information)

Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights

To exercise these rights: Email hello@estimatekit.com with "California Privacy Request" in the subject line.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA) or UK:

Legal Basis for Processing

• Contract: To provide our services
• Legitimate Interest: To improve and secure our platform
• Consent: For marketing communications
• Legal Obligation: To comply with laws

Your GDPR Rights

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

Data Protection Officer: For GDPR inquiries: privacy@estimatekit.com

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

13. Canadian Privacy Rights (PIPEDA)

EstimateKit complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Your Rights

• Access your personal information
• Challenge accuracy of data
• Withdraw consent (where consent is basis)
• File complaint with Privacy Commissioner

Contact: privacy@estimatekit.com

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date
• We will notify you via email for material changes
• Continued use of EstimateKit after changes constitutes acceptance

We encourage you to review this policy periodically.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

• Email: privacy@estimatekit.com
• Support: hello@estimatekit.com

Response Time: We aim to respond to privacy inquiries within 48 hours.

16. Your Consent

By using EstimateKit, you consent to this Privacy Policy and our collection and use of information as described.