Privacy Policy

Cove Estimates is operated by [LEGAL ENTITY NAME], located at [BUSINESS ADDRESS]. For any privacy question you can reach us at hello@coveestimates.com.

For the purposes of the GDPR and CCPA, [LEGAL ENTITY NAME] is the data controller (GDPR) and the business (CCPA) for information you provide while using Cove Estimates.

Account information

When you sign up we collect your email address, which we use to send a one-time login code (Supabase Auth — no passwords are stored). If you later fill in your profile we also store the fields you choose to provide: name, company name, phone, website, mailing address, logo, and market (e.g. LA, NYC). If you subscribe, our payment processor Stripe creates a customer ID and subscription ID which we store against your profile.

Content you create or upload

While using the product you generate and upload project data: estimates, briefs and treatments, client records, crew records, receipts, signatures, brand “personalities,” and any files you attach (PDFs, images, audio). This content belongs to you. We store it so the service can function.

Automatically collected

Our infrastructure logs technical information as you interact with the product — IP address, user agent, and request timestamps (via Supabase and Vercel). This is used for security, rate-limiting, and debugging. We do not run any third-party analytics, session recording, or advertising trackers.

• To provide the service — draft estimates, parse your briefs, store your documents, render PDFs, and surface your historical data inside your account.
• To send transactional email — for example, when you invite a collaborator or send a crew portal invite, we email that recipient on your behalf.
• To process payments for paid plans via Stripe.
• To respond to support requests and to investigate abuse or security issues.
• To comply with law — for example, honoring a valid legal process.

We do not sell your personal information. We do not share it with advertisers or data brokers. We do not train our own AI models on your uploads, estimates, or briefs. We do not use the content of your projects to generate content or features for other users.

We share information with only three categories of parties:

• Subprocessors who operate our infrastructure — Supabase (database, auth, storage), Anthropic (AI inference), Stripe (payments), Resend (transactional email), and Vercel (hosting). The full list is on our Data & Compliance page.
• Collaborators you invite — if you share an estimate or invite someone to a crew portal, that person receives the information you chose to share with them.
• Lawful requests — if we receive a valid subpoena or legally binding order we will comply while pushing back on overreach.

Cove Estimates uses Anthropic’s Claude API to power brief parsing, estimate generation, and receipt analysis. When you paste a brief, upload a file to be analyzed, or ask the AI to edit an estimate, the relevant text or file contents are sent to Anthropic’s API so it can return a response.

Under Anthropic’s Commercial Terms of Service, Anthropic does not use API inputs or outputs to train their models. They retain data only for a limited period to enforce usage policies and detect abuse, and permanently delete prompts and outputs from their systems after that period ends.

We also do not train our own AI on your content. Your briefs, files, and estimate data are sent to Anthropic solely to return a result to you — they are not fed into any separate dataset, fine-tune, or machine-learning pipeline we operate.

We keep your account and its content while your account is active. You can schedule deletion at any time from Settings → Your data → Delete account. We hold your data for a 30-day grace period after you click the button — if you change your mind, sign in any time during that window and click Cancel deletion to come back. Once the 30 days are up, a daily process permanently erases everything tied to your account, cascading across all your estimates, clients, crew, receipts, and uploaded files. You can also download a complete JSON archive of your data from the same screen.

If you’d prefer we handle it manually, email hello@coveestimates.com and we will delete your data within 30 days of an identity- verified request.

Some limited records — such as invoices and tax data required by law — may be retained in archived form after account deletion, for the minimum period required.

Depending on where you live (EU/UK under GDPR, California under CCPA, or other jurisdictions with comparable laws) you have rights to access, correct, delete, port, or restrict how we process your personal data. A detailed breakdown is on our Data & Compliance page. To exercise any of these rights, email hello@coveestimates.com.

We use only essential cookies. Specifically:

• sb-* cookies from Supabase to keep you signed in.
• Local-storage entries prefixed bidai- and cove- that save your preferences on the device — default currency, custom rate labels, active personality, theme. These never leave your browser.

We do not set advertising cookies or third-party analytics cookies, so we do not display a cookie consent banner.

Cove Estimates is a professional tool for adults working in commercial production. It is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.

When we make a material change to this policy we will update the effective date at the top of the page and, where appropriate, notify you by email. Continued use of the service after changes take effect means you accept the updated policy.

Questions, requests, or complaints? Email us at hello@coveestimates.com. For formal correspondence, our mailing address is [BUSINESS ADDRESS].