Privacy Policy

We collect information you provide directly and information generated as you use the Service.

Information you provide

• Account details such as your name, email address, and company name.
• Project content you upload or create, including plan and blueprint PDFs, measurements, takeoffs, estimates, invoices, and notes.
• Messages you send to the Onyx AI assistant.
• Communications with us, such as support requests and feedback.

Information collected automatically

• Usage data: features used, actions taken, and timestamps.
• Device and log data: IP address, browser type, operating system, and error reports.
• Cookies used to keep you signed in and remember your preferences.

We do not use analytics, advertising, session-replay, or other third-party tracking vendors.

Payment information

Subscription payments are handled by Stripe. When you subscribe, you enter your card and payment details directly on Stripe's hosted checkout and billing portal. We do not receive or store your full card number. We receive limited billing information from Stripe, such as your subscription status and the last four digits of your card, so we can manage your account.

We use the information we collect to operate, maintain, and improve the Service. Specifically, we use information to:

• Provide takeoff, estimating, invoicing, and project management features.
• Provide AI-assisted features, including Auto Room detection, AI page naming, and the Onyx AI assistant.
• Authenticate users, secure accounts, and prevent abuse.
• Process subscription payments and manage billing.
• Send transactional and customer-facing emails, such as sign-in codes, estimates, and invoices.
• Respond to support requests and communicate about product updates.
• Maintain the reliability and performance of the Service.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use it for advertising.

CostLogic includes optional AI-assisted features. These features are usage-gated, meaning they run only when you choose to use them, and they transmit only the content needed to deliver the feature you requested. When an AI feature runs, the relevant content is sent to a third-party AI provider that performs the processing and returns a result.

Auto Room (Tectly)

When you run the Auto Room feature, the image of the drawing or plan page you are working on is sent to Tectly, which detects rooms and areas and returns them so we can build takeoff layers for you.

AI page naming and Onyx assistant (Fireworks AI)

AI page naming sends the text from a plan page to Fireworks AI so it can suggest a page name. The Onyx AI assistant sends relevant project, takeoff, and estimate data along with the chat messages you write to Fireworks AI so it can generate a response. These features run only when you invoke them.

Each AI provider processes the content it receives under its own terms and privacy policies, which may govern how it retains or uses that content. We share only what is needed to provide the feature you requested, and we do not control how these providers operate their own systems. If you would rather not have particular content processed by a third-party AI provider, do not run the AI features on that content.

We share information only as necessary to operate the Service, with your direction, or as required by law. We do not sell your personal information. The service providers below process data on our behalf so we can deliver the Service:

• Supabase (Supabase Inc.): database, authentication, and file storage, including the plan and blueprint PDFs you upload.
• Vercel: application hosting and content delivery. Vercel processes requests in transit.
• Stripe: payment processing for CostLogic subscriptions. Stripe collects card and payment details directly on its own hosted checkout and billing portal.
• Tectly: powers the Auto Room feature. When you run Auto Room, the drawing or plan page image is sent to Tectly to detect rooms and areas.
• Fireworks AI: the AI provider that powers AI page naming and the Onyx AI assistant. It receives plan-page text for naming, and project, takeoff, and estimate data plus your chat messages for Onyx, in order to generate results.
• Resend: sends transactional and customer-facing emails, such as estimates and invoices, including PDF attachments.
• Google: provides "Sign in with Google" OAuth authentication when you choose to sign in with your Google account.

Authentication verification emails, such as sign-in and confirmation codes, are delivered through the email provider configured in our Supabase project.

We may also share information in these situations:

• Recipients of content you choose to send, such as estimates and invoices emailed to your customers.
• Authorities, when required by law or to protect the rights, property, and safety of CostLogic, our users, or the public.
• Acquirers in connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.

We retain account and project information for as long as your account is active. When you delete content or your account, we remove the associated data from active systems within a reasonable period. Backup copies may persist for a limited time before they are overwritten. We may retain some information longer when required by law or to resolve disputes and enforce our agreements.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or limit certain processing. You can update your account profile in Settings, or contact us at support@costlogic.co to exercise other rights. We will respond consistent with applicable law and may need to verify your identity before acting on a request.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use analytics, advertising, or tracking vendors. The third parties we work with are service providers and AI processors that help us deliver the features you use.

We use cookies to keep you signed in and remember your preferences. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser, but parts of the Service may not function correctly without them.

We use administrative and technical safeguards to help protect your information, including encryption of data in transit. Data is stored with our cloud infrastructure providers, such as Supabase, which apply encryption at rest and access controls to the data they hold. No system is perfectly secure. Sign-in uses one-time codes sent to your email, so keep your email account secure and never share a sign-in code. If you believe your account has been compromised, contact us at support@costlogic.co.

The Service is a business tool that is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

CostLogic is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States and other countries where we and our service providers operate. These locations may have data protection laws that differ from those in your country.

This Privacy Policy and any dispute arising from it are governed by the laws of the State of Delaware, USA, without regard to its conflict of laws principles.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. If the changes are material, we will communicate them in-app or by email where practicable.

Questions about this Privacy Policy or your information? Prodigy Labs LLC operates CostLogic, and you can reach us at: