Privacy Policy

This policy covers the people who use Estimate City and visit estimatecity.com. Most information in the Service belongs to a company account (the “Customer”): its plans, takeoffs, estimates, bids and the contacts it keeps. The Customer controls that information and decides who in its company can see it. We handle it on the Customer’s behalf, as the Terms describe.

• Account information: your name, email address, phone number, company and role.
• Content you add: plans and other files you upload, and the takeoffs, estimates, bids, notes and contact records you create.
• Usage information: sign-in times, the time spent in each area of the Service, your IP address, and your browser and device type.
• Billing information: your plan, seats and billing email. Card and bank details go directly to our payment processor, Stripe; we never receive or store them.
• Acceptance records: when you accept these policies, we record the version, the time, your IP address and your browser.
• Messages: what you send us by email or through the Service.

• To provide the Service: store and display your files, render plan pages, read their text so they can be searched, and look up the addresses you type.
• To support you, bill you, and send service emails such as invitations, notices and receipts.
• To keep the Service secure: for example, allowing one active sign-in per person, and detecting misuse.
• To operate, improve and develop the Service, including features that automate takeoff and estimating.
• To produce industry statistics and benchmarks, only in aggregated, de-identified form that is combined across multiple customers and cannot be traced back to any customer or person.

• Service providers that run parts of the Service for us, under contracts that limit their use of the information: Supabase (database, sign-in and file storage), Google Cloud (file storage, plan rendering and text recognition), Google Maps Platform (address lookup), Stripe (payments), Resend (email), Vercel (hosting), Cloudflare (network and security), and OpenFreeMap (map images). Microsoft OneDrive is used only if your company connects it.
• Our staff and contractors, some of whom are located outside the United States. They access Customer information only to perform services the Customer has ordered, such as managed takeoffs, or to support the Service. They are bound by confidentiality obligations.
• People you choose to share with: members of your company, other companies you share a project with, and anyone you send a share link.
• As required by law, or to protect the rights, safety or property of our users, MM or others.
• A buyer or successor. If MM is involved in a merger, acquisition, financing, reorganization or sale of all or part of its business, or in negotiations for one, information may be transferred or disclosed as part of that transaction.

The Service does not use advertising trackers or third-party analytics.

The Service uses only the cookies needed to keep you signed in. We do not use advertising or tracking cookies.

Our service providers store information in the United States. Contractors outside the United States may access it remotely for the purposes in Section 4.

We keep information while the account is active, and after it closes, unless the Customer asks us to delete it. On a Customer’s written request, we will delete its data or de-identify it so it no longer identifies the Customer or any person. Aggregated or de-identified data is kept. Billing, acceptance and security records are kept as long as law or legitimate business needs require. Deleted data leaves our database backups within 7 days.

Wherever you live, you may ask us to:

• give you a copy of the personal information we hold about you;
• correct it;
• export it in a common format;
• delete it, unless we must keep it by law or for a legitimate business purpose such as billing or security.

Email [email protected]. We will confirm your identity and respond within 45 days, or tell you if we need up to 45 more. For information held in a company account, such as a contact record another company created, we may refer your request to that company and help it respond. We will not treat you differently for making a request.

Information is encrypted in transit. Plan files are stored privately and served through links that expire. Access is limited by company, role and project. No system is perfectly secure; if a breach affects your information, we will notify affected Customers as the law requires.

The Service is for businesses and is not directed to anyone under 16. We do not knowingly collect their information.

We will notify you in the Service or by email at least 30 days before a material change takes effect.

Maverick Metrics LLC, Austin, Texas — [email protected].