Privacy Policy

• Account data: your email address and, if you fill it in, your name. Your email is also your sign-in name and where we send account messages.
• Company data: the company name, phone, email, address, website and logo you enter in Settings.
• Work you create: estimates (customer and property details, scope, labor hours, wages, costs, your pricing), proposals, contracts, the monthly actual hours and costs you record, and a short activity log of what happened in your account.
• Billing data: which plan you are on, the subscription status, the amount, and the dates of the current billing period. Card numbers, expiry dates and security codes are handled by Stripe and never reach us.
• Usage data: see section 4.

To run the product: to show you your estimates, proposals, contracts and profitability figures, to keep your workspace private to your company, to bill for paid plans, and to keep the service working. We do not use your customer lists, prices or margins to market other products to you.

Only the accounts in your company. Access is enforced in the database: a signed-in account can only read or write rows belonging to a company it is a member of. Company logos are stored in private storage and served through signed links, not public URLs.

We share data with the providers who operate the service, and only for that purpose:

• Lovable Cloud — hosting, database, file storage and account authentication.
• Stripe — payment processing and the billing portal. Their privacy policy: stripe.com/privacy.
• Lovable — technical error reports when a page fails to load, so we can fix it.

We do not sell personal data, and we do not share it with advertisers. If we are ever required to disclose data to comply with a valid legal request, we will tell you where we are allowed to.

The public site uses Lovable's visitor analytics. It uses no cookies, stores nothing on your device, does not keep your IP address and cannot identify you or recognise you as a returning visitor. Each visit counts on its own.

It records: the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked.

Detailed data is kept for 90 days. Daily summaries (visit and page-view counts, and for each visit the pages seen and where the visitor came from) are kept for a year.

Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Pages load their typefaces from Google Fonts, so loading a page sends a font request to Google, which can see the requesting IP address. Account emails (confirm your address, reset your password) are sent by our authentication provider.

We keep your account and work for as long as your account exists. To delete your account and everything in it — estimates, proposals, contracts, recorded actuals, activity and billing records — email hello@marginmaniac.com from the address on the account. We will confirm when it is done. Cancelling a subscription does not delete your data; you can review and export your work before asking us to remove it.

The site and app are served over HTTPS, sign-in requires a password, and the per-company access rules described in section 3 are enforced by the database itself rather than only by the screens you see. No system is perfect, so please keep your password to yourself and tell us at once if you believe your account is compromised.

If this policy changes in a way that matters, we will update the date above and, for material changes, tell signed-in users. Questions, deletion requests, or anything else: hello@marginmaniac.com.