Privacy Policy

1. Information we collect

• Account data such as email address and authentication identifiers.
• Business and customer data entered into estimates, including names, emails, addresses, project descriptions, pricing, and contract details.
• Payment and subscription status from Stripe. CotizaListo does not store full card numbers.
• Electronic acceptance records, including signer name, consent text, timestamp, IP address when available, and browser information.
• Technical and security data such as request logs, device information, and error diagnostics.

2. How we use information

We use information to create and store documents, generate PDFs, authenticate users, process subscriptions, send requested estimate emails, record customer responses, prevent fraud, secure the service, provide support, and meet legal obligations.

3. Service providers

We may disclose data to infrastructure and service providers acting on our behalf, including Supabase for authentication and databases, Stripe for billing, Resend for transactional email, and hosting or monitoring providers. Their handling of data is governed by their agreements and privacy terms.

4. Retention and deletion

We retain account and document data while an account is active and as reasonably needed for service, security, dispute, tax, and legal purposes. Electronic acceptance records may be retained to preserve contractual records. Users may request deletion, subject to lawful retention exceptions.

5. U.S. privacy rights

Depending on your state and whether applicable legal thresholds are met, you may have rights to know, access, correct, delete, or obtain a copy of personal information and to appeal a denied request. CotizaListo does not sell personal information. We will not discriminate against users for exercising applicable rights.

6. Security

We use encrypted transport, access controls, row-level database policies, hashed public-link tokens, and restricted server credentials. No system is completely secure, and users must protect their account access and configure third-party services correctly.

7. Children

CotizaListo is a business service and is not directed to children under 13. Do not submit children's personal information.

8. Contact and requests

Send privacy inquiries and rights requests to privacy@yourdomain.com. Identity verification may be required.

9. Changes

We may update this policy as the service and legal requirements change. Material updates will be posted with a revised date.