Privacy Policy

Estiquik is estimating and invoicing software for renovation contractors. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to the Estiquik web application and marketing site.

1. Who we are

Estiquik is operated by Ted Kam Consulting Ltd. In this policy "we", "us" and "Estiquik" mean that entity, and "you" means the person or business using the service.

For privacy questions, contact privacy@estiquik.com.

2. Information we collect

Information you give us when you create an account

• Your name and email address
• Your business or company name (optional)
• Your phone number (optional)
• Your country and state or province — used to set your default tax rate and adjust regional starting prices
• A password, which is handled by Google Firebase Authentication and is never visible to us in readable form

Information you create while using the service

• Estimates, including project types, line items, quantities, prices, notes and supplier links you enter
• Invoices, including numbers, dates, tax settings, adjustments and payment amounts you record
• Client records you add (see section 3)

Billing information

Subscription payments are processed by Stripe. Card numbers and payment credentials are submitted directly to Stripe and are never transmitted to or stored on our systems. We receive from Stripe only a customer identifier, your subscription status, plan, and renewal date, which we store against your account so we know whether your subscription is active.

Technical information

Our hosting and database providers process standard technical data such as IP address, browser type and timestamps in the course of serving requests and maintaining security logs. Our public marketing and blog pages also use Google Analytics and the Meta and Reddit pixels — see Section 10 for what that means and the choice you have about it. Estiquik does not run advertising or behavioural-tracking cookies, and the signed-in app itself runs no analytics, with one narrow exception described in Section 10: if you accepted analytics cookies on our public pages, the Billing page tells Google Analytics when you start a checkout and when your free trial begins.

3. Information about your customers

Estiquik lets you store records about your customers — typically a name, company, email address, phone number, postal address and free-text notes — and attach them to estimates and invoices. This includes leads (enquiries that may not yet be customers) and site-visit bookings made through your public booking page.

When you send a document for electronic signature, the person signing gives us their name, email address and a drawn or typed signature image, and we record the date and time, their IP address, their browser identifier and a cryptographic fingerprint of the document they saw. We store this with the document so that you have a reliable record of what was agreed. The signing page shows the signer what is recorded before they sign.

For this information, you are the controller and we are the processor. We process it only to provide the service to you: storing it, displaying it back to you, and populating the documents you generate. We do not use it for our own purposes, do not sell it, and do not market to the people in it.

4. How we use information

• To provide the service — authenticate you, store and sync your estimates, invoices and client records across your devices
• To apply regional pricing and tax — your country and state or province set default rates and price indices
• To take payment — manage your subscription through Stripe and control access based on its status
• To support you — respond when you contact us about a problem
• To keep the service secure and working — detect abuse, debug faults, and maintain backups
• To meet legal obligations — tax, accounting and record-keeping requirements

We do not sell personal information, and we do not share it with advertisers.

5. Legal bases for processing

Where UK or EU data protection law applies, we rely on the following bases:

6. Who we share information with

We share personal information only with the service providers needed to run Estiquik:

• Google (Firebase) — authentication, database, hosting and serverless functions
• Google Analytics — usage analytics on our public marketing and blog pages, plus two sign-up events on the Billing page, and only for visitors who accept the cookie banner (see Section 10)
• Meta — advertising measurement on our public marketing and blog pages only, and only for visitors who accept the cookie banner (see Section 10)
• Stripe — subscription billing and payment processing

We may also disclose information if required by law, to enforce our Terms of Service, to protect the rights or safety of any person, or in connection with a merger, acquisition or sale of assets — in which case we will give you notice before your information becomes subject to a different privacy policy.

7. Where your data is stored

Account data, client records, estimates and invoices are stored in Google Cloud Firestore in a United States multi-region deployment. Static files are served from Firebase Hosting's global network. Stripe processes payments on its own infrastructure.

A copy of the estimate and invoice you are actively working on is also cached in your own browser's local storage so the app works quickly and can survive a brief loss of connectivity.

8. How long we keep it

• While your account is open — we keep your account, estimates, invoices, leads, client records and signature records so the service works.
• After you close your account — we delete or anonymise your data within 90 days, except where we must keep records longer for tax or legal reasons.
• Billing records — retained as required by tax law, typically 7 years.
• Browser cache — cleared when you clear your browser data.

You can export your estimates as JSON or CSV at any time from within the app.

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct information that is wrong or incomplete — most of it you can edit yourself on the Account page
• Delete your account and associated data — see how to delete your account
• Receive a copy of your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Complain to your data protection authority — in Canada the Office of the Privacy Commissioner, in the UK the ICO, or your national authority in the EU

To exercise any of these, email privacy@estiquik.com. We will respond within the period required by applicable law. If your request concerns information held by a contractor who uses Estiquik about you as their customer, please contact that contractor directly — they control that record, and we will assist them in responding.

10. Cookies and local storage

Estiquik does not use advertising or behavioural tracking cookies. Browser storage inside the signed-in app is used strictly to make the app function, with no consent banner needed for it because none of it is optional:

• Authentication state — Firebase Authentication stores a session token so you stay logged in
• Local cache — your current estimate and invoice are cached so the app is fast and works briefly offline
• Small preferences — such as the last project type you opened

Clearing your browser storage will sign you out and clear the local cache; your saved data remains in your account.

Analytics cookies on our public pages

Our marketing site and blog — not the signed-in app — use Google Analytics to understand how visitors find and use those pages. This is not strictly necessary, so it is off by default: a cookie banner asks first, analytics cookies are only set if you click Accept, and Google Analytics never loads at all if you click Decline or don't respond. Your choice is remembered on that browser so you're not asked again. Declining has no effect on your ability to use the Estiquik app itself.

The signed-in app does not use Google Analytics, with one exception. If you accepted the banner, the Billing page sends two events: that you started a checkout, and that your free trial began. Each carries the plan and billing period you chose, and which of our sign-up buttons you originally came from. It never includes your name, email address, clients, estimates, invoices or payment details. The app never shows the banner itself, and if you declined or never chose, the Billing page loads nothing from Google Analytics at all.

Advertising cookies on our public pages

The same public pages also carry the Meta pixel and the Reddit pixel, which measure which of our ads bring people to Estiquik and whether they go on to start a free trial. Both are covered by the same banner and the same choice as Google Analytics: neither pixel is fetched at all unless you click Accept. They tell Meta and Reddit the page address, a rough location and device type; neither ever receives your name, email address, clients, estimates, invoices or payment details, and neither runs anywhere in the signed-in app.

11. Security

Accounts are protected by Firebase Authentication, and database rules enforce that you can only read and write your own records — this is enforced on the server, not in the browser. Data is encrypted in transit over HTTPS and at rest by our infrastructure providers. Card data never reaches our systems. See the Security page for detail.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator as required by law.

12. Children

Estiquik is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the service changes. We will update the "last updated" date above, and for material changes we will notify you by email or an in-app notice before they take effect.

14. Contact us

Ted Kam Consulting Ltd.
privacy@estiquik.com