Privacy Policy

Estiquik is estimating and invoicing software for renovation contractors. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to the Estiquik web application and marketing site.

1. Who we are

Estiquik is operated by Ted Kam Consulting Ltd., located at 21 Hartland Circle, St. Thomas, ON N5R 0P2, Canada. In this policy "we", "us" and "Estiquik" mean that entity, and "you" means the person or business using the service.

For privacy questions, contact privacy@estiquik.com.

2. Information we collect

Information you give us when you create an account

• Your name and email address
• Your business or company name (optional)
• Your phone number (optional)
• Your country and state or province — used to set your default tax rate and adjust regional starting prices
• A password, which is handled by Google Firebase Authentication and is never visible to us in readable form

Information you create while using the service

• Estimates, including project types, line items, quantities, prices, notes and supplier links you enter
• Invoices, including numbers, dates, tax settings, adjustments and payment amounts you record
• Client records you add (see section 3)

Billing information

Subscription payments are processed by Stripe. Card numbers and payment credentials are submitted directly to Stripe and are never transmitted to or stored on our systems. We receive from Stripe only a customer identifier, your subscription status, plan, and renewal date, which we store against your account so we know whether your subscription is active.

Technical information

Our hosting and database providers process standard technical data such as IP address, browser type and timestamps in the course of serving requests and maintaining security logs. Estiquik does not currently run third-party analytics, advertising, or behavioural tracking.

3. Information about your customers

Estiquik lets you store records about your customers — typically a name, company, email address, phone number, postal address and free-text notes — and attach them to estimates and invoices.

For this information, you are the controller and we are the processor. We process it only to provide the service to you: storing it, displaying it back to you, and populating the documents you generate. We do not use it for our own purposes, do not sell it, and do not market to the people in it.

4. How we use information

• To provide the service — authenticate you, store and sync your estimates, invoices and client records across your devices
• To apply regional pricing and tax — your country and state or province set default rates and price indices
• To take payment — manage your subscription through Stripe and control access based on its status
• To support you — respond when you contact us about a problem
• To keep the service secure and working — detect abuse, debug faults, and maintain backups
• To meet legal obligations — tax, accounting and record-keeping requirements

We do not sell personal information, and we do not share it with advertisers.

5. Legal bases for processing

Where UK or EU data protection law applies, we rely on the following bases:

6. Who we share information with

We share personal information only with the service providers needed to run Estiquik. Our current sub-processors are listed in full on the Sub-processors page:

• Google (Firebase) — authentication, database, hosting and serverless functions
• Stripe — subscription billing and payment processing

We may also disclose information if required by law, to enforce our Terms of Service, to protect the rights or safety of any person, or in connection with a merger, acquisition or sale of assets — in which case we will give you notice before your information becomes subject to a different privacy policy.

7. Where your data is stored

Account data, client records, estimates and invoices are stored in Google Cloud Firestore in a United States multi-region deployment. Static files are served from Firebase Hosting's global network. Stripe processes payments on its own infrastructure.

A copy of the estimate and invoice you are actively working on is also cached in your own browser's local storage so the app works quickly and can survive a brief loss of connectivity.

8. How long we keep it

• While your account is open — we keep your account, estimates, invoices and client records so the service works.
• After you close your account — we delete or anonymise your data within 90 days, except where we must keep records longer for tax or legal reasons.
• Billing records — retained as required by tax law, typically 7 years.
• Browser cache — cleared when you clear your browser data.

You can export your estimates as JSON or CSV at any time from within the app.

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct information that is wrong or incomplete — most of it you can edit yourself on the Account page
• Delete your account and associated data
• Receive a copy of your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Complain to your data protection authority — in Canada the Office of the Privacy Commissioner, in the UK the ICO, or your national authority in the EU

To exercise any of these, email privacy@estiquik.com. We will respond within the period required by applicable law. If your request concerns information held by a contractor who uses Estiquik about you as their customer, please contact that contractor directly — they control that record, and we will assist them in responding.

10. Cookies and local storage

Estiquik does not use advertising or behavioural tracking cookies, and does not run third-party analytics. We use browser storage strictly to make the app function:

• Authentication state — Firebase Authentication stores a session token so you stay logged in
• Local cache — your current estimate and invoice are cached so the app is fast and works briefly offline
• Small preferences — such as the last project type you opened

Because these are strictly necessary for a service you have asked for, no cookie consent banner is presented. Clearing your browser storage will sign you out and clear the local cache; your saved data remains in your account.

11. Security

Accounts are protected by Firebase Authentication, and database rules enforce that you can only read and write your own records — this is enforced on the server, not in the browser. Data is encrypted in transit over HTTPS and at rest by our infrastructure providers. Card data never reaches our systems. See the Security page for detail.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator as required by law.

12. Children

Estiquik is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the service changes. We will update the "last updated" date above, and for material changes we will notify you by email or an in-app notice before they take effect.

14. Contact us

Ted Kam Consulting Ltd.
21 Hartland Circle, St. Thomas, ON N5R 0P2, Canada
privacy@estiquik.com