Draft — not ready for release. This document still has placeholder values (legal entity name, contact email). Fill in lib/legalInfo.ts before this goes live to real users.

Privacy Policy

Last updated October 10, 2026

This Privacy Policy explains what information EstiMate ([EstiMate LLC — Mississippi limited liability company, formation pending], "we," "us") collects, how we use it, and the choices you have. It applies to the EstiMate website, app, and Nova (together, the "Service"). It should be read alongside our Terms of Service.

Our commitment: we do not sell your data

We do not sell your personal information, and we never will. Where we share data with other companies at all, it's strictly to operate the Service on your behalf — a processor performing a task we've asked them to do, never a third party using your data for their own independent purposes. Section 4 below names every such processor and exactly what it receives.

1. Information we collect

We collect:

Account information — email, name, and password (handled by our authentication provider; we never see your raw password).
Task and calendar data — the tasks, events, reminders, routines, and categories you create, plus how long things actually took (used to improve your own future estimates).
Onboarding profile answers — optional questions about how you plan to use EstiMate, your daily routine, and your biggest time-management challenges, shown back to you in Settings.
Connected calendar data — if you link a Google or Outlook calendar, we read (never write) your busy/free time so Nova doesn't schedule over it. We store only the access needed to make that connection, and you can disconnect it at any time.
Technical data — your device's time zone (stored in a first-party cookie so your schedule displays correctly) and standard request/log data.

2. How we use your information

We use the information above to:

Operate the Service — display your calendar, generate estimates from your own history, and run Nova's scheduling tools;
Improve your personal predictions over time, based only on your own completion history;
Communicate with you about your account (e.g. email verification, password resets);
Maintain the security and integrity of the Service, including enforcing usage limits.

3. Other service providers

We use a small number of providers, strictly to operate the Service — Nova has no AI model or other third-party processor behind it; its scheduling tools run entirely on our own servers against your own data:

Supabase — hosts our database, handles authentication, and stores your account and task data.
Google / Microsoft — only if you choose to connect a Google or Outlook calendar, to read your busy/free time.

None of these providers is permitted to use your data for their own independent purposes.

4. Community Average (opt-in)

Community Average is an optional Pro feature showing the average time a task takes across users who have chosen to share. Your own completed-task times are only included if you've opted in — during onboarding, or later in Settings — and even then, only as part of an anonymous, aggregated number, never shown individually or linked back to you, and only once at least five different people have contributed data for that task. You can opt out at any time, and it takes effect immediately.

5. Data retention and deletion

We keep your data for as long as your account is active. If you delete your account (Settings → Delete account), all of your data — tasks, routines, history, connected-calendar tokens, everything — is permanently deleted, immediately and irreversibly.

6. Your choices

Update or correct your profile information anytime in Settings;
Opt in or out of Community Average sharing anytime in Settings;
Disconnect a Google/Outlook calendar anytime in Settings;
Delete your account and all associated data anytime in Settings.

If you're in a jurisdiction that grants additional privacy rights (for example, California or the EEA/UK), contact us at legal@estimateapp.example (placeholder) and we'll work with you on your request.

8. Children's privacy

The Service isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has provided us information, contact us and we'll delete it.

9. Security

We use reasonable technical and organizational measures to protect your information, including row-level access controls so your data is only ever readable by you, and encryption at rest for the access tokens used to connect a Google or Outlook calendar. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

11. Contact

Questions about this policy, or a request about your data? Reach us at legal@estimateapp.example (placeholder).