Privacy Policy

1. What We Collect

When you create an account, we collect:

• Name and email address — required to create your account
• Password — stored as a one-way hash (bcrypt). We never store or see your plain-text password.
• Estimate history — project names, client names, material lists, and generated estimate data, stored so you can access past estimates
• Usage data — how many estimates you've generated this month, for plan limit enforcement

We do not collect payment card information directly (handled by our payment processor when billing launches).

2. How We Use Your Data

We use your data to:

• Provide the Zracle service and generate estimates on your behalf
• Authenticate your account and maintain session security
• Store your estimate history so you can retrieve past PDFs
• Enforce plan limits (free vs. paid)
• Send transactional emails (e.g., billing notifications) when applicable

We do not sell your data. We do not use your project or client information for advertising or marketing purposes.

3. Third-Party Services

To provide the Service, we use the following third-party services:

• Anthropic API — processes your material list to search for prices (your materials are sent to Anthropic's API; Anthropic's privacy policy applies)
• Search APIs — used to fetch live prices from the public web

We only share the minimum data necessary with these services to fulfil your request.

4. Data Retention

Your account data and estimate history are retained as long as your account is active. If you delete an estimate from the My Estimates page, it is permanently removed from our database. If you wish to delete your entire account and all associated data, contact us at [email protected] and we will process the request within 30 days.

5. Security

We take reasonable technical and organisational measures to protect your data, including:

• Passwords hashed with bcrypt before storage
• Authentication via short-lived JWT tokens
• All API endpoints require valid authentication

No system is 100% secure. Please use a strong, unique password for your account.

6. Cookies and Local Storage

We use your browser's localStorage to store your authentication token and basic account details (name, plan, remaining estimates). No tracking cookies are used. We use Microsoft Clarity to understand how visitors use our site. Clarity collects anonymised usage data (page views, clicks, scrolls) and does not use cookies or collect personally identifiable information. Clarity Privacy Policy

7. Your Rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all data
• Withdraw consent — by deleting your account

To exercise these rights, contact [email protected].

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the effective date at the top of this page. Continued use of the Service after a policy update constitutes acceptance of the revised policy.

9. Contact

Privacy questions or data requests: [email protected]