Privacy policy
Effective October 1, 2026. This is a pre-launch policy draft. The service owner must complete its identity, processing locations, retention schedule, and legal review before public launch.
Who we are and how to contact us
Contractor Estimating Pro provides estimating software for plumbing businesses. The legal operator’s name and mailing address will be added before launch. Contact support@example.com about this policy, access requests, deletion, or security concerns.
Information we collect
We process account identifiers, email addresses, business profile and branding, subscription status, price-book services and prices, customer names and contact details, job notes, optional uploaded photos, estimates, version snapshots, quote acceptance names, selected options, timestamps, and essential service/security logs. We do not collect contractor customer payment-card details.
How information is used
We use information to authenticate users, isolate business workspaces, calculate and preserve estimates, generate PDFs, present customer quotes, record views and responses, administer subscriptions, support the service, and protect it from abuse. Website sessions use essential cookies. We do not currently use advertising cookies, behavioral advertising, or sell customer personal information.
Customer information and contractor responsibility
Contractors control the customer records and job information they enter. They must have appropriate authority and give their customers any required privacy notices. Customer quote links disclose only the business contact information, relevant customer name/address, scope, prices, terms, and quote status. Anyone holding a link can access that quote until revocation or expiration; share it carefully.
Optional AI analysis
If the service operator enables OpenAI analysis, submitted job notes and selected photo content may be sent to OpenAI to structure scope or describe visible observations. We request no API-side response storage. AI must not set prices. Without this integration, typed notes still work with conservative deterministic matching. ChatGPT and Codex connections use their own policies; this service receives tool arguments and authorized account context rather than raw chat attachments by default.
Service providers and disclosures
Authentication uses Auth0; hosted records and private assets may use PostgreSQL/Supabase and the deployment provider; website subscription checkout uses Stripe; optional analysis uses OpenAI. These providers process relevant data under their own terms and applicable agreements. We may disclose information when legally required or reasonably necessary to protect users, enforce service terms, or investigate security incidents. Corporate transfers require appropriate safeguards and notice where required.
Quote tracking and acceptance
The first legitimate quote view records a view event and time; obvious crawlers are excluded when reasonably detectable. Acceptance or decline records the entered name, current version, selected option, decision and timestamp. This supports quote status tracking, not behavioral profiling. Acceptance is a quote response, not a representation that a verified electronic-signature service was used.
Retention and deletion
Versioned quotes and acceptance history are kept to support accurate records and dispute resolution. The final production retention periods, backup deletion window, billing-record obligations and account-deletion procedure must be published before launch. Contact support for export, correction or deletion requests. Archived customer records are hidden from active lists but retained when needed to preserve estimate history.
Security
We use tenant-scoped authorization, HTTPS in deployed environments, private storage, tokenized quote links, input validation, rate limits, and limited safe logging. No method is risk-free. Keep login credentials and quote links secure and notify support promptly about suspected access issues.
Your rights and international processing
Depending on your jurisdiction, you may request access, correction, export, deletion, restriction, objection or complaint to a regulator. We verify requests proportionately and apply legal exceptions. Provider processing may occur outside your country; deployment locations and applicable transfer safeguards must be finalized before launch. We do not intentionally collect information from children under 18.
Changes
We will update the effective date when this policy changes and provide notice of material changes as required. This draft is available for product review and does not substitute for a launch-specific privacy assessment.