Privacy Policy

This Privacy Policy explains how Estval LLC ("Estval," "we," "us," or "our") collects, uses, and shares information when you use the Estval platform at estval.net and its related services (the "Service"). It is part of, and incorporated into, our Terms of Service.

• Account information. Your name, email address, password (stored only in hashed form by our authentication provider), account type (general contractor or subcontractor), and, for subcontractors, your selected trade.
• Content you provide. The files you upload (plans, specifications, drawings, PDFs, and images), the project details and line items you enter, and the estimates, takeoffs, change orders, and bid packages generated for you.
• Billing information. If you engage us for estimating work, we collect the business contact details needed to quote and invoice you (name, company, email, phone). Payment is handled by invoice — we do not collect or store card numbers through the Service.
• Usage and technical data. Log data such as your IP address, browser type, pages and features used, timestamps, and error reports, which we use to operate and secure the Service.
• Authentication and security data. Session cookies and two-factor authentication data used to keep your account signed in and secure.

• Provide, maintain, and improve the Service.
• Generate the estimates, takeoffs, change orders, and bid packages you request.
• Quote and invoice estimating work, and send billing and service-related messages.
• Secure the Service, prevent abuse, enforce our Terms, and comply with legal obligations.
• Respond to your requests and provide support.

To generate your outputs, the documents and project data you submit are transmitted to our AI provider (Google) for processing. This data is used to produce your estimate and is not used to train Google's or our own models. We do not sell your project data. Processing is limited to what is needed to deliver the Service to you.

We do not sell your personal information. We share information only in these limited ways:

• Service providers. With vendors who process data on our behalf to run the Service: Supabase (database, authentication, and file storage), Vercel (application hosting), Google (AI processing), Resend (transactional email), and Cloudflare (bot protection via Turnstile). Each is bound to handle data on our instructions.
• Legal reasons. When required by law, subpoena, or legal process, or to protect the rights, safety, and property of Estval, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your direction. When you choose to export or share your content.

We use essential cookies to keep you signed in and to secure your session, and we use Cloudflare Turnstile to protect sign-in and sign-up from automated abuse. These are necessary for the Service to function. We do not use advertising cookies. You can control cookies through your browser, but disabling essential cookies may prevent you from signing in.

We keep your account and content for as long as your account is active and as needed to provide the Service. You can delete a saved estimate or change order at any time, or ask us to delete your account and the data tied to it. We may retain limited information as required to comply with legal obligations, resolve disputes, and enforce our agreements, after which it is deleted or de-identified.

We use technical and organizational measures to protect your information, including encryption in transit, row-level access controls that keep each company's data isolated, and required two-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident.

You can access and update your account information at any time, and you may request to access, correct, export, or delete your personal information by emailing admin@estval.net. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including:

• The right to know what personal information we hold and how it is used.
• The right to request correction or deletion of your information.
• The right to data portability and, where applicable, to object to or restrict certain processing.
• The right not to receive discriminatory treatment for exercising these rights.

Because we do not sell personal information, there is no sale for you to opt out of. To exercise any right, contact us at admin@estval.net. We will verify your request and respond as required by law.

We operate in the United States, and your information is processed there and in other countries where our service providers operate. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data-protection laws than your country.

The Service is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us at admin@estval.net and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will post the updated version with a new "Last updated" date and, for material changes, provide reasonable notice. Your continued use of the Service after an update means you accept the revised Policy.

Questions about your privacy or this Policy? Email admin@estval.net and we'll get back to you.