Privacy Policy

Information we collect

• Account and business details: sign-in email, business name, phone, email, address, logo, tax and payment-term defaults, time zone and plan.
• Information Users enter about Clients: names, emails, phone numbers, addresses, and the estimates, invoices, change orders and payment records Users create.
• Signatures: when a document is signed, the typed name, drawn signature image, date and time, IP address, and a copy of the content signed.
• Payments: card details are collected and processed by Stripe; we never see or store full card numbers. We receive payment amounts, status and identifiers, and the status of Users' Stripe accounts.
• Technical data: server logs (such as IP address, browser type and errors) and cookies needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

How we use it

• To provide the Service: create and share documents, collect signatures and payments, and show your records.
• To send sign-in codes and notifications (for example, when a Client signs or pays).
• To bill subscriptions and platform fees.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To comply with law and enforce our Terms.

We do not sell personal information and do not use it for targeted advertising.

Who we share it with

• Service providers that run the Service for us: Supabase (database, authentication and file storage), Vercel (hosting), Stripe (payments and subscriptions) and Resend (email delivery). They may only use the data to provide their services to us.
• Between Users and Clients: a document's content, signatures and payment status are visible to the User who sent it and to anyone with its private link.
• Legal reasons: when required by law, or to protect rights, safety and the Service.
• Business transfers: as part of a merger, acquisition or sale of assets.

Clients

We process Client information on behalf of the User who sent the document. If you are a Client and want to access, correct or delete your information, please contact that business; we will help them respond. You can also email us.

Retention and deletion

We keep your information while your account is active. When you delete your account (Settings → Delete account), we delete your profile, Clients, documents, signatures and files. Encrypted backups are rotated within about 30 days. Records Stripe keeps about payments are subject to Stripe's privacy policy, and we may keep limited records where the law requires.

Your choices and rights

• Download your data anytime: Settings → Export my data.
• Correct your business details in Settings, or delete your account there.
• Depending on where you live (for example California), you may have additional rights to know, access, correct, delete or port your information, and to not be discriminated against for using them. Email us to make a request; we may need to verify your identity.

Security

Data is encrypted in transit, access is limited to each account by database rules, signatures are stored privately, and document links use long random tokens. No system is perfectly secure, so please keep your email account secure and share document links only with the intended Client.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect their information.

Changes and contact

We will post changes here and notify Users of material changes. Questions or requests: Estimate2invoice LLC, hello@estimate2invoice.app.