Privacy Policy

When you start a pilot, subscribe, or sign in, we store your name, email address, pilot period or subscription plan, and billing status. A pilot lasts 14 days, requires no card, and does not create an automatic charge. Access codes are short-lived and stored only as a cryptographic digest. When you open a seller referral link, we may store a signed first-party referral pointer for up to 30 days and bind the first valid code only when a new email verifies its account. Admin reports use aggregate referral counts and do not expose lead PII. We also use a server-generated HMAC pseudonymous digest to prevent a deleted account from restarting the pilot; that anti-abuse record does not retain the raw deleted email. We store support submissions, including the name, email, subject, and message provided. When a professional creates an estimate, we store the customer and job information they enter. While an estimate is being composed, a browser backup of the draft may be kept in that browser's local storage so it can be recovered after an interruption or temporary loss of connectivity. When a customer views or responds to an estimate, we record the response, time, IP address, browser user agent, and exact estimate version to provide an activity and acceptance trail.

We use your information to provide and improve EstimateLoop, operate the pilot, manage subscriptions, attribute a verified signup to a seller code when one is valid, produce aggregate pilot reports, send configured transactional emails such as access codes and estimates, route support requests, display your profile in the dashboard, preserve estimate revisions, prevent abuse, and show delivery, viewing, and response activity to the professional. Referral links do not create a public lead list.

We use Stripe for subscription checkout and billing. Transactional email is sent through the supported provider configured for the service, currently Resend; SendGrid may also be supported. Payment card details are handled by Stripe, and we do not store full card details. These providers process information under their own privacy terms and as needed to deliver their services.

Account and estimate data is stored in a PostgreSQL database. During composition, the app may also keep a browser recovery backup in local storage. This is a separate on-device copy, not a service-worker cache; it remains on the device until the draft is submitted or cleared, the account is signed out or deleted, or browser storage is removed. Do not use a shared browser for sensitive drafts. Sessions use signed, HTTP-only, secure cookies with a 7-day expiry. The cookie is designed to prevent browser scripts from reading it; its contents are signed, not encrypted.

We keep account, estimate, billing, security, and support records for as long as needed to provide the service, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements. Browser draft backups remain on the device until cleared by the app, the account, or the browser. Account deletion removes or de-identifies service data unless a limited record must be retained for legal, security, or billing purposes.

You can manage or cancel your subscription through the billing portal. Account deletion is available from Dashboard Settings or, after a paid subscription has fully ended, through the former-account deletion flow. Deletion is permanent and cannot be undone. Depending on where you live, you may also have rights to access, correct, delete, or restrict certain processing. Submit requests through the Support page.

We may update this policy from time to time. Changes will be posted on this page with an updated date. EstimateLoop is a product operated by 4LLs. Privacy questions and requests can be submitted through the Support page.