Draft: company details still to complete (LEGAL_COMPANY, LEGAL_SIRET, LEGAL_ADDRESS, LEGAL_EMAIL, LEGAL_HOST).

Privacy Policy

Last updated: October 18, 2026

Who is responsible

[to complete: company name and legal form], [to complete: registered address]. Contact: [to complete: contact email].

What we collect and why

• Account (name, email, hashed password): to give you access to the service.
• Business data you enter (clients, jobs, estimates, invoices, photos): to provide the service on your behalf. You stay in control of it.
• Billing: to manage your subscription and keep accounting records.
• Basic usage events (for example: account created, estimate sent): to understand what works and improve the product. No advertising profiles.

Who processes data for us

• Hosting: [to complete: hosting provider]. Data is stored on servers in Frankfurt, Germany (European Union).
• Payments: Whop processes payment details; we never see your card number.
• AI: Anthropic (Claude) receives what is needed for the request you make (for example the job description, your price list and the client name for an AI estimate). If you connect your own OpenAI or Claude key, that provider receives it instead.
• Email: Brevo sends service emails (password reset, receipts, reminders).
• Sign in with Google or Apple (if you choose it): they share your name, email and an account ID, nothing else.

What we don't do

We do not sell or share your personal information for advertising, and we don't use advertising cookies.

Cookies

One session cookie keeps you logged in, plus one that remembers your language choice. Both are strictly necessary.

How long we keep it

For as long as your subscription is active, then [to review: 12 months] to let you export it, then deleted. Accounting records are kept as long as the law requires. Daily backups are kept 14 days.

Your rights

You can access, correct, export or delete your data, and object to some uses. Export is available in your settings; for anything else write to [to complete: contact email]. Depending on where you live (for example California), you may have additional rights; we honor them on request.

Security

Hashed passwords (scrypt), encrypted API keys (AES-256-GCM), HTTPS everywhere, data separated by company, daily backups.