Privacy Policy

Not legal, tax, or accounting advice

Estimatery is a tool for building estimates and an internal profit-and-loss view. The tax fields, margins, income set-aside, and every other calculation are arithmetic over numbers you enter. They are not professional advice, and we do not verify them — confirm anything that matters with a qualified professional. This policy is a description of our practices, not legal advice to you.

Who this policy is about

• You (the “Creator”) means the person using Estimatery — anonymously in your browser, or as a signed-in account holder.
• Client means your customer or prospect, whose details (name, company, address, contact info) you may type into an estimate. Estimatery has no relationship with your Clients; you control that information and are responsible for it (see Your Clients’ information).

What we collect and why

Estimatery is built to keep as little as possible on our servers. Much of the product runs entirely in your browser and never reaches us.

Information that stays in your browser (we don’t receive it). When you use the builder without signing in, your work is saved in your browser’s local storage and is never sent to us: your working estimate (the full version, including costs, margins, and internal notes), small interface preferences, and — for estimates too large to fit in a share URL — a compressed copy stored under a short key. This lives only on the device and browser you used, and only for a limited time (see Local storage). Because we never receive it, we cannot access, recover, or delete it for you.

Information we receive when you sign in or act:

• Account email address. Signing in is by magic link: you enter your email, we send a one-time link, and clicking it signs you in. We store your email (lowercased and trimmed) as the single identifier for your account — one account per email. We do not collect or store a password. We use your email to sign you in, show which account you’re in, and contact you about your account or support requests. If you change your account email in Settings, we hold the new address on your account as “pending” and ask for two confirmations: first a link to your current address, then a link to the new one (each expires after 15 minutes and works once). The new address replaces the old one only after both, at which point every device is signed out and we email a notice to the old address. If a change is never completed, the pending address stays on your account until you start another change or delete your account.
• Saved estimates (cloud saves). If you save an estimate to your account, we store the full estimate as one JSON record — the complete internal version, including your costs, margins, markup, income reserve, and internal notes. A saved estimate may contain your Clients’ personal information (name, company, address, contact details you typed in). Free accounts keep one cloud-saved estimate; Pro accounts have no limit. We use saved estimates only to provide the save/sync feature to you.
• Saved items (Pro only). If you build a Saved Items library, we store your reusable line items (label, category, industry, unit, rate, and optional internal cost and notes) linked to your account. We use them only to let you apply saved items to your estimates; deleting your account removes them.
• Branding (Pro only). If you set up branding, we store an optional record with your business name, a contact name, address, a contact line, and a logo. We use it to place your branding on your client-facing exports. You choose how the logo is provided: paste an https image URL (kept on your own host), or upload an image, which we host for you — see Logos.
• Purchase records. When you buy the one-time Pro unlock, our payment processor (the merchant of record) handles the transaction. We store only a minimal receipt: the processor’s order ID, a status (paid or refunded), the processor name, and the timestamp, linked to your account. We use it to grant and (on refund) remove Pro access. We do not store your card details, billing address, or the amount — those stay with the processor.
• Contact/support messages. If you message us through the help page, we receive your email, an optional subject, and your message, and deliver them to our support inbox (with your email as reply-to). We use these to respond to you. The same applies to anything you email us directly, including an account-recovery request (see If you lose access to your email). Our support inbox is hosted by our email provider, Resend: it receives and stores everything sent to hello@estimatery.com. Support email is not added to your account record, so deleting your account does not delete it; Resend keeps it for a limited period, currently up to 30 days, and then it is deleted. The lasting record of any change we make to your account is the administrator action log, described next.
• Administrator action log. When one of our administrators acts on an account (for example, changing its sign-in email during a recovery, granting or revoking Pro, recording a refund, exporting, suspending, or deleting an account), we record which administrator did it (their email and IP address), what was done and when, the account’s internal ID (and an order ID where one is involved), and a short reason the administrator writes. For an email change, the reason names the kinds of proof that were checked, not the details themselves (we refuse a reason that contains an email address or a card or order number), and the new address is recorded only in masked form (for example, pa***@example.com). Administrator sign-in attempts are logged the same way. We use this log only to keep our own access to accounts accountable and to investigate disputes or account-takeover attempts, and we delete each entry 3 years after it is written.
• Marketing email (we don’t send any). We don’t send marketing email, and we don’t currently ask for permission to. If we start, the only use we plan is telling Estimatery users about OpusDek, another LanRus LLC product, when it launches. We would update this policy first, email only people who have given explicit permission (an unchecked checkbox or a setting you turn on, never something bundled into sign-in or checkout), and include a working unsubscribe link and our postal address in every message. Unsubscribing would stop marketing immediately without affecting sign-in links, receipts, or messages about your account. If you opted in through an earlier version of Estimatery, we keep a record of when and how you did, and you can withdraw at any time in Settings. Your Clients are not our mailing list: we never send marketing to addresses that appear inside your estimates.

Collected automatically for security and hosting. When you request a magic link or send a contact message, we read your IP address (from standard proxy headers) and use it to rate-limit those endpoints against abuse; the rate-limiter sees your IP and, for sign-in, your email — never your estimate content. Our hosting providers also process standard request metadata (such as IP address and user agent) to run and secure the service.

Error log. When something fails on our servers, we record the error so we can find and fix it: when it happened, which part of the service it came from, the error message and technical trace (both shortened), and, if you were signed in, your account’s internal ID. We never record the contents of your request on purpose, and errors in the sign-in and contact steps carry no account ID or email address. An error message can occasionally include a fragment of personal data, such as part of something that was being saved. Only our administrators can see this log, and we use it only to keep the service reliable and secure.

Page-view analytics. We use Vercel Web Analytics, a privacy-friendly, cookieless page-view counter: it records which pages are visited along with aggregated referrer, country, and device-type information. It sets no cookies, does not track you across other websites, does not build behavioral profiles, and never sees your estimate content. We do not run advertising trackers of any kind.

Why we're allowed to process this

Estimatery is operated from the United States. If you are in the European Economic Area or the UK, the GDPR applies to your data; if you are in California, the CCPA/CPRA applies. Where that framing applies, our legal bases are:

• To provide the service you asked for (performance of a contract / your request): storing your account email, saving your estimates, applying your branding, and processing your Pro unlock.
• Our legitimate interests: keeping the service secure and available (rate limiting, hosting logs, abuse prevention), preventing account takeover (verifying ownership before we recover an account, notifying your current address of email changes, and keeping the administrator action log), recording server errors so we can keep the service working (the error log), and responding to your support messages, balanced against your privacy.
• Your consent: marketing email, if we ever start sending it, and only to people who opted in. You can withdraw at any time in Settings or by emailing us (and, once we send marketing, through the unsubscribe link in any message); withdrawing changes nothing else about your account.
• Legal obligation: retaining minimal records where the law requires.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are used under California law. LanRus LLC also builds other products under their own brands (such as OpusDek). If you have opted into marketing and we start sending it, LanRus LLC may use your email to tell you about those products as described in this policy; it is never sold, rented, or given to a separate company.

Cookies and local storage

We set two cookies, both used only to keep someone signed in — never for tracking. eg_session is your sign-in token, created when you sign in. If you leave “Keep me signed in on this device” checked on the sign-in confirm page, it keeps you signed in on that device for 30 days. If you uncheck it, it is a browser-session cookie that ends when the browser closes (some browsers restore sessions when they reopen), and the sign-in token inside it stops working after 12 hours either way. It can’t be read by JavaScript on the page (httpOnly), is marked Secure in production, and does nothing else. eg_admin is an internal, short-lived (30-minute) sign-in token set only when one of our own administrators signs in to the site’s admin area; ordinary visitors never receive it. We don’t use advertising or tracking cookies, and our page-view analytics (Vercel Web Analytics, described above) is cookieless — it sets no cookies at all and doesn’t follow you across other websites. Because nothing here tracks you across sites, we don’t treat browser “Do Not Track” (DNT) signals any differently — there’s nothing for them to switch off. Our hosting provider (Vercel) may set its own cookies for security and traffic management; see its privacy policy for details.

Local storage. The builder uses your browser’s local storage to hold your working estimate, small UI preferences and functional markers (for example, a note that you asked to save an estimate just before signing in, a record of when the estimate was last open and edited, and a counter that limits how often we show certain prompts), and (when needed) share-link fallback data. This never leaves your browser on its own: nothing about it reaches us unless you share it, export it to a link, or save it to your account. Because a shared computer could show it to the next person, the builder limits how long the working estimate stays:

• By default, it is kept while a builder tab shows it and cleared 15 minutes after the last one closes. A refresh or an accidental close within that time loses nothing.
• “Keep on this device” (a button next to the Saved indicator) keeps it for 7 days after your last edit.
• An estimate you work on while signed in belongs to that account and is only shown to it. It lasts 30 days after your last edit if you chose “Keep me signed in,” and otherwise follows the 15-minute rule.
• Signing out from any tab removes the working estimate, those markers and any share-link fallback data from the browser, and blanks every other open builder tab.
• Inactivity: unless you chose to keep the estimate (“Keep on this device,” or “Keep me signed in” when signed in), after 60 minutes without input in any open builder tab we show a 2-minute warning and then clear it. If you chose not to stay signed in, you are also signed out, even when the builder is empty. A kept estimate is not cleared for inactivity.

“Last edit” means the last change to the estimate: opening it again does not reset the clock. The time limits are applied the next time the builder opens in that browser. Until then, an expired estimate stays in local storage, hidden from the app, where someone with access to the browser’s developer tools could still read it; signing out or clearing your browser’s site data removes it at once. An estimate stored by an earlier version of Estimatery, which has no record of when it was last used, is restored once and then follows these rules.

Share links — please read. When you create a share link, Estimatery builds a client-safe copy of the estimate (costs, margins, and internal sections are physically removed — see the privacy wall), compresses it, and encodes it directly into the link’s URL. Anyone who has that link can open and read that copy — including client-facing details like your Client’s name, company, and address — without an account or password. The link is not encrypted or secret; treat it like the estimate itself and share it only with people you intend to see it. (For estimates too large for a URL, the copy is stored in your own browser and the short link opens only in that browser.)

The privacy wall

Your client-facing outputs — client views, exports (PDF, Excel, CSV), and share links — are never built from your raw estimate. They are built from a whitelisted copy that is physically rebuilt with only client-facing fields. Costs, cost rates, margins, markup, the income reserve, internal notes, and internal-only sections are not present in that copy, and there is no toggle that can accidentally leave them in. Note that client-facing content you deliberately include — such as your Client’s name, company, and address — is part of that copy by design.

Who we share information with

We don’t sell your data. We use a small set of service providers (“subprocessors”) to run Estimatery. Each sees only what it needs:

• Neon (Postgres database) — hosts all server-side data: your account email, saved estimates (including any Client details in them), branding, purchase records, sign-in and email-change link tokens and the addresses they were sent to (expired ones are deleted within a day), the administrator action log, and the error log.
• Resend (email delivery and our support inbox) — sends your sign-in links and account emails (such as email-change confirmations and notices), and hosts our support inbox: it receives and stores email sent to hello@estimatery.com, including contact-form messages and account-recovery requests, which can contain details such as your Clients’ names. If we ever send marketing email to people who opt in, it would send it and hold the mailing and unsubscribe lists.
• Upstash (Redis, rate limiting) — stores rate-limit counters keyed by IP address and, for sign-in, email. It does not receive estimate content. If it is unavailable, we fall back to a per-server in-memory limit — reduced protection, but never fully off.
• Vercel (hosting) — runs the app and its API, processes standard request metadata (including IP addresses) to host and secure the service, stores logo images you upload (Vercel Blob), and provides our cookieless page-view analytics (Vercel Web Analytics, described above).
• Cloudflare — provides domain registration and DNS for estimatery.com. It does not handle our email or store your account data.
• Payment processor / merchant of record — currently LemonSqueezy. When you buy Pro, this provider is the seller and merchant of record: it hosts checkout, collects and handles your card and billing details, remits sales tax/VAT, and issues your receipt. We send it your email (to prefill checkout and send your receipt) and an internal account reference so we can match the purchase to your account. We never see or store your card data. We may change payment processors over time; this policy names the one live at the time of your purchase.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, or security of our users or the service. If Estimatery is ever involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy.

Our providers are located in the United States and elsewhere, so your information may be processed outside your own country. For transfers of personal data from the EEA/UK to the US, our processors rely on Standard Contractual Clauses, the EU-U.S. Data Privacy Framework where the provider is certified, and other mechanisms permitted under the GDPR; email hello@estimatery.com for details.

Logos

A Pro logo can be provided two ways. If you paste an https image URL, we do not fetch, copy, or store the image on our servers — it is loaded by the browser that views or exports the estimate (yours or your recipient’s), directly from the URL you provided, and whoever hosts that URL may observe requests for it.

If instead you upload an image, we store that single file with our hosting provider (Vercel Blob) and record its URL on your branding. It is served from a public, unguessable URL and loaded the same way — by the viewer’s browser. Uploading a new logo replaces the previous one, and deleting your account removes the hosted image. A broken or unreachable URL falls back to showing your business name text.

How long we keep information

• Browser-only data (working estimates): kept in your browser only as long as described in Local storage (15 minutes after you close the page by default; 7 days after your last edit if you keep it on the device; 30 days after your last edit if you were signed in and chose “Keep me signed in”), or until you sign out or clear your site data. We never receive it.
• Sign-in and email-change links: the secret part of each link is stored only as a one-way hash, together with the email address it was sent to (for the link that completes an email change, also your account’s internal ID). Each link works once and expires 15 minutes after it’s issued. A link is deleted when it’s used, and expired ones, with the address stored alongside, are deleted from our database within a day, even if you never finished signing in.
• Account email, saved estimates, saved items, branding, and purchase records: retained for as long as your account exists. We do not automatically delete inactive accounts or expire this data; it persists until you delete your account. When you delete your account it is disabled immediately, any logo we host is removed right away, and the remaining data is permanently erased from our database within 30 days, including error-log entries linked to your account. The administrator action log and support email are the exceptions, described next.
• Administrator action log: each entry is deleted automatically 3 years after it is written. Until then it is kept even if the account it concerns is deleted, because it is the record of what we did to that account and is what we would rely on to answer a dispute about access to it. After an account is erased, its entries refer to an internal account ID that no longer links to an email address or any other account data we hold, apart from a masked address or what the administrator wrote in the reason.
• Support email, including contact-form messages and account-recovery requests: kept by our email provider (Resend) for a limited period, currently up to 30 days, then deleted. Deleting your account does not delete it sooner.
• Error log: entries linked to your account are erased with your account, and every entry is deleted automatically 30 days after it was recorded.
• Marketing preferences and consent records: if you opted into marketing (we don’t currently ask), we keep a record of when and how you opted in for as long as your account exists, including after you withdraw, so we could show that any marketing we sent was permitted. If you delete your account, that record is erased with everything else within 30 days, as described above. If we begin sending marketing email, we will keep a suppression list of addresses that opted out or deleted their account, used only to make sure we never send marketing to them again.
• Session cookie: expires 30 days after sign-in if you chose “Keep me signed in.” Otherwise it ends when the browser closes and stops working 12 hours after sign-in at the latest. Either way it ends immediately when you sign out, and every device is signed out when your sign-in email changes.
• Rate-limit counters and hosting logs: short-lived operational data, retained per each provider’s own policy.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to not be discriminated against for exercising them. Here’s how those work with Estimatery — most of them self-serve, directly in the app:

• Access / export / portability. Self-serve: Settings → Download my data gives you a structured, machine-readable JSON copy of everything tied to your account — your profile, saved estimates, saved items, branding, and purchase records (fulfilling data-portability rights such as GDPR Article 20). You can also export any single estimate at any time via Export → Download JSON (the full internal version) or the PDF/Excel/CSV exports, entirely in your browser.
• Correction. You can edit your estimates and branding directly in the app, and change your account email yourself in Settings → Change email (confirmed from your current address, then from the new one). For anything you can’t change yourself, email us.
• Deletion. Self-serve: Settings → Delete account (you’ll type your email to confirm). Your account is disabled immediately — sign-in stops working and any logo we host is removed right away — and its data (saved estimates, saved items, branding, purchase records) is permanently erased from our database within 30 days. Prefer email? Write to hello@estimatery.com from the address you signed up with and we’ll do it for you. The administrator action log and support email are kept as described in How long we keep information; you can ask us for the log entries about your account. Browser-only data isn’t ours to delete: it is cleared automatically as described in Local storage, and you can remove it at any time by signing out or clearing your browser’s site data.
• Marketing opt-out. We don’t send marketing email at the moment. If you opted in through an earlier version of Estimatery, you can withdraw at any time in Settings, or email us. If we start sending marketing email, every message will include an unsubscribe link, and using it will stop marketing without affecting sign-in links, receipts, or account notices.
• Signing out. Signing out immediately expires your session cookie on that device and clears the working estimate, its markers and any share-link fallback data from that browser, in every open tab (you are offered the chance to save first).

To make any request, email hello@estimatery.com. We’ll verify the request against your account (typically by confirming it comes from your signed-up email) before acting, and aim to respond within the time required by applicable law. If you’re in the EEA or UK and believe we’ve mishandled your data, you may also lodge a complaint with your local data-protection authority.

If you lose access to your email

Your email is the only way into your account: there is no password and no backup address, so there is no self-service recovery. If you lose access to your inbox, write to hello@estimatery.com from the address you want to use instead. Before we move an account, we need to be confident it is yours, because moving it to the wrong person would hand them your estimates and your Clients’ details. To check, we may ask for:

• For a Pro account: the order number and purchase date from your receipt, and the last 4 digits of the card you paid with, which we compare with the merchant of record’s records;
• For any account: details only the owner would know, such as the titles of saved estimates, client names in them, the business name in your branding, or roughly when you signed up.

We use these details only to verify the request. We never ask for a full card number, a password, or identity documents. Your request and the details you send are kept in our support inbox, hosted by Resend, for a limited period, currently up to 30 days (see How long we keep information). We may refuse if we can’t verify ownership. If we go ahead, an administrator starts the change, which is recorded in the administrator action log (naming the kinds of proof checked, not the details you sent, and kept for 3 years): we send a confirmation link to the new address and a notice to your current address, so an owner who still reads it can object. Nothing changes until the new address confirms; then every device is signed out and the old address gets a second notice that the change is complete.

California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it; to request deletion of information we collected from you; to correct inaccurate information; and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of, and we do not use or disclose sensitive personal information for purposes that would require a right to limit. We use your information to provide the service. We don’t send marketing email; if we start, we will use your email for our own marketing only with your opt-in consent. To exercise a right, use the self-serve tools in Settings (Download my data, Delete account) or email hello@estimatery.com; we will verify your identity (typically via your signed-up email) before responding.

Your Clients' information

Estimates you create may contain personal information about your Clients (names, companies, addresses, contact details) that you typed in. For that information:

• You are the controller (or “business”) — you decide to collect it and put it into an estimate. Estimatery processes it on your behalf as your service provider, to store and display the estimate for you.
• You are responsible for having the right to provide that information to us and to include it in estimates, exports, and share links, and for handling any requests your Clients make about their own data. If you need a formal processor arrangement, see our Data Processing Addendum.
• Remember that anything you place in a client-facing view, export, or share link is visible to whoever receives it (see Share links).

Security & incident notification

We take reasonable measures to protect information: sign-in tokens are hashed and single-use with a short lifetime; session tokens are signed and delivered as httpOnly cookies, and you can choose a short session on a shared computer; changing the sign-in email needs confirmation from both addresses, notifies the old one, and signs out every device; administrator actions on accounts are logged; the browser copy of your working estimate is cleared on a schedule and on sign-out; access to your saved data is scoped to your own account; client-facing outputs are built from the whitelisted copy described above; and the payment processor handles card data so we never hold it. No method of storage or transmission is perfectly secure, and we can’t guarantee absolute security — in particular, share links are readable by anyone who has them, by design.

If a data breach affects your personal information, we will notify you as required by applicable law — including California Civil Code §1798.82 for California residents — by email to your account address, without unreasonable delay. For security concerns, contact hello@estimatery.com.

Children

Estimatery is a business tool for adults — our Terms require users to be at least 18 — and it is not directed to children. We do not knowingly collect personal information from anyone under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us information, email hello@estimatery.com and we’ll delete it.

Changes to this policy

We may update this policy as the product changes (for example, if we change payment processors or add features that touch personal data). When we do, we’ll revise the effective date above, and for material changes we’ll take reasonable steps to let account holders know. Questions or requests about this policy or your data: hello@estimatery.com. Governing law: California, USA.