Legal
Privacy Policy
Draft, not yet in force. This page is a placeholder that describes how the product currently works. It has not been reviewed by a lawyer and must be replaced with reviewed terms before the service is offered to the public.
1. Who this covers
Account holders: people who sign up to use EstimatePaid for their business.
Their customers: people who receive an estimate or invoice from a business that uses EstimatePaid. For this information the business decides what is collected and why; we process it on their behalf.
2. What we collect
- Account details: your name, email address and a scrambled (hashed) form of your password.
- Sign-in records: the devices signed in to your account, with the network address and browser type, so you can review and revoke them.
- Business details you enter: business name, address, tax number, logo and document settings.
- Records you create: customers and their contact details, estimates, invoices, payments you record, expenses and notes.
- Document activity: when a shared document is first opened, and for an approved or declined estimate the name typed, the signature drawn, the time, and the network address and browser type.
- A history of important actions in your workspace, such as sending or voiding a document.
3. What we do not collect
We do not store card numbers. The site sets only the cookies needed to keep you signed in; your light or dark theme choice is kept in your own browser. It carries no advertising, and no third-party analytics or tracking scripts.
4. How we use it
To provide the service: showing you your records, producing documents and PDFs, delivering the emails you ask us to send, keeping accounts secure and preventing abuse. We do not sell personal information.
5. Who else handles it
Email is delivered through an email delivery provider, which receives the recipient’s address and the message. The hosting and database providers store the data on our behalf. A payment processor will be added when online payments launch. The named providers, and where they are located, are to be listed here before launch.
6. Keeping it safe
Each business’s records are kept separate from every other business’s. Links to shared documents are long random addresses that expire and can be switched off. Connections are encrypted in transit.
7. Retention, your rights and international transfers
How long data is kept, how to request a copy or deletion, and how transfers between countries are handled are still to be written with legal advice, and depend on where the service is offered.
8. Contact
Privacy questions: support@estimatepaid.com.