Privacy Notice
Last updated: 18 October 2026
This Privacy Notice explains how EstimoAI ("EstimoAI", "we", "us") collects, uses and protects personal data when you use our website at estimoapp.com and our AI price intelligence services (the "Service"). EstimoAI is the data controller for the personal data described here.
1. Personal data we collect
- Account data: name, email address, password (hashed), authentication provider identifiers.
- Profile & usage data: preferences, plan, credit balance, projects, estimates and quotes you create.
- Uploaded content: photos, PDFs, contractor quotes and descriptions you submit for analysis.
- Support data: messages you send to us and business enquiries.
- Technical data: device identifiers, IP address, browser type, log and telemetry data, cookie identifiers.
- Payment data: processed by Stripe (see "Data sharing" below). We receive limited billing metadata (plan, status, last four digits, country) but not full card details.
2. How we use personal data
- To create and operate your account and deliver the Service (contract).
- To generate AI estimates, valuations and quote checks from your inputs (contract).
- To provide customer support and respond to enquiries (legitimate interests / contract).
- To secure the Service, prevent fraud and abuse, and maintain reliability (legitimate interests / legal obligation).
- To improve product quality and develop new features using aggregated or de-identified data (legitimate interests).
- To send service and transactional emails (contract). Marketing emails are sent only with your consent, and you can unsubscribe at any time.
- To comply with legal obligations, including tax and accounting.
3. Legal bases
We rely on contract performance, legitimate interests, consent (where required, e.g. non-essential cookies and marketing), and legal obligations as the legal bases for processing.
4. Data sharing
We share personal data only with:
- Payment provider: Stripe Payments Europe, Ltd. and its affiliates, which process payments, manage subscriptions, issue invoices and help with tax calculation.
- Infrastructure & subprocessors: hosting, database, storage, email delivery, analytics and error monitoring providers acting on our instructions.
- AI model providers: our AI gateway forwards prompts and uploaded content to model providers strictly to generate the requested output.
- Professional advisers: legal, accounting and compliance advisers under duties of confidentiality.
- Authorities: where required by law, court order or to protect rights, safety or property.
5. International transfers
Some of our providers are located outside the UK/EEA. Where we transfer personal data internationally we rely on appropriate safeguards such as the UK International Data Transfer Agreement, Standard Contractual Clauses, or adequacy decisions.
6. Data retention
We keep personal data for as long as your account is active and as needed to provide the Service. Estimates and uploaded files are retained while your account is active and deleted or anonymised within a reasonable period after account closure, unless a longer retention period is required by law (e.g. for tax records).
7. Your rights
Subject to applicable law (including UK GDPR and EU GDPR), you have the rights to access, rectify, erase, restrict and port your personal data, to object to processing, to withdraw consent, and to complain to a supervisory authority (in the UK, the ICO). We aim to respond to verified requests within one month.
8. Security
We use appropriate technical and organisational measures including encryption in transit, access controls, least-privilege permissions, row-level security on user data, and monitoring.
9. Cookies, device storage and visitor counting
We use strictly necessary cookies and device storage to run the Service (sign-in, security, and remembering your cookie choice). These don't need consent.
Visitor counting (optional). If you choose “Accept” in our cookie banner on the website, or “Accept”/“Allow” in the Estimo iPhone or Android app (or under Settings), we store a random ID and a visit ID on your device and record which Estimo page you view, which guides and help links you open or click, the date and time, whether you're on our public website or the signed-in app, and whether that's on the web, iPhone or Android. If you're signed in, we also record your account ID so the same account counts once across devices. We use this only to produce Estimo's own visitor and user totals. Our team sees totals, not individual visitors. We don't record IP addresses, browser details, search terms in links or anything you type, and we don't use it for advertising or share it with advertisers. Records are deleted after about 13 months. Our lawful basis is your consent.
Nothing is stored or recorded for visitor counting until you accept, on the website or in the apps. Your choice is saved on that device or app only, so you may be asked again on another device. Rejecting has no effect on how Estimo works. You can change your mind at any time with “Cookie settings” at the bottom of any page of the website, or in Settings in the app; withdrawing stops counting straight away and deletes the ID from your device. If your browser sends Global Privacy Control or Do Not Track, we don't count your visits. Visits by our own staff accounts and obvious automated traffic are excluded.
These totals are estimates: one person on two devices, or who clears their browser storage, may count more than once. Separately, when you're signed in we record on our servers which Estimo features you use (for example, completing an estimate), linked to your account, to run, secure and improve the Service. This stores nothing extra on your device, and isn't part of visitor counting.
10. Children
The Service is not directed to children under 16 and we do not knowingly collect their personal data.
11. Changes to this notice
We may update this notice from time to time. Material changes will be notified in the app or by email.
12. Contact us
For privacy questions or to exercise your rights, contact privacy@estimoapp.com.
