Privacy Policy

1. Overview

EstimateForge ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information. We believe in minimal data collection: your estimate data never leaves your browser, and we only store what is strictly necessary to provide our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address — used for authentication and transactional emails
• Password — stored as a cryptographic hash (bcrypt); we never store your plaintext password
• Subscription status — whether you have an active Pro subscription

This information is stored in a Redis database.

2.2 Estimate Data

Your estimates, quotes, line items, and related data are stored exclusively in your browser's localStorage. This data never leaves your device and is not stored on our servers. Clearing your browser data will remove your saved estimates.

2.3 AI-Assisted Autofill

If you use our AI autofill feature (powered by Google Gemini), the text you enter in the autofill prompt is sent to the Google Gemini API to generate suggestions. Please do not include sensitive personal or financial information in your AI prompts. Google's use of this data is governed by the Google Privacy Policy.

2.4 Analytics

We use Vercel Web Analytics, a privacy-friendly analytics solution that does not use cookies, does not track individual users across sessions, and does not collect personal identifiable information. It provides aggregate page-view counts to help us understand usage patterns.

2.5 Payment Information

Payments are processed by Lemon Squeezy, a third-party payment processor. We do not collect or store your credit card or billing details. When you upgrade to Pro, you are redirected to Lemon Squeezy's secure checkout. Their use of your data is governed by the Lemon Squeezy Privacy Policy. We receive only your subscription status and a subscription identifier.

3. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your session
• Send transactional emails (email verification, subscription confirmations) via Resend
• Verify and manage your Pro subscription status
• Provide AI-powered autofill functionality
• Understand aggregate usage to improve the service

4. What We Do Not Do

• We do not sell your data to third parties
• We do not use advertising networks or tracking cookies
• We do not store your estimate content on our servers
• We do not share your personal information with third parties except as described in this policy
• We do not build advertising profiles based on your usage

5. Cookies & Storage

We use a single HTTP-only authentication cookie (auth_token) to maintain your login session. This cookie:

• Is strictly necessary for authentication — no consent banner required
• Is HTTP-only (not accessible to JavaScript)
• Expires after 30 days
• Is not used for tracking or advertising

We use localStorage in your browser to store your estimates and application preferences (theme, currency). This data never leaves your device.

6. Data Retention

We retain your account information (email, hashed password, subscription status) for as long as your account is active. If you delete your account, all associated data is permanently removed from our servers. Your browser's localStorage data is not affected by account deletion — you can clear it manually through your browser settings.

7. Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing activities

You can delete your account at any time from your account settings page. For other requests, contact us at support@estimateforge.io.

8. Third-Party Services

We integrate with the following third-party services:

9. Security

We take security seriously. Passwords are hashed using bcrypt before storage. Authentication tokens are signed JWT-like tokens stored in HTTP-only cookies. Our infrastructure runs on Vercel with industry-standard TLS encryption. We do not store sensitive financial data.

10. Children's Privacy

EstimateForge is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top. Continued use of EstimateForge after changes constitutes acceptance of the updated policy. For significant changes, we will notify registered users by email.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us: