Privacy Policy

1. Scope and organization-managed accounts

This Policy applies to website visitors, customers and authorized users of the Services. The installer app is intended for people authorized by an organization using Estimart. Access to an app download link does not grant access to an organization’s CRM records.

If your account is provided by your employer or another organization, that organization determines your assignments, access permissions and how its work records are used. We process organization-managed CRM information to provide the Services on that organization’s behalf. We also handle information for our own account administration, support and service security purposes.

Your organization may provide its own workplace privacy notices and retention rules. Contact your organization about its employment practices and use of work records. You may also contact us directly using the details below; where appropriate, we will coordinate your request with the organization responsible for the records.

2. Information we collect and process

The information involved depends on your role, the features you use, your organization’s configuration and the permissions you grant.

• Account and organization information: name, email address, company membership, role, authentication and session information, and account preferences.
• Business and work records: customers and business contacts, estimates, proposals, projects, addresses, schedules, assignments, samples, materials, tools, equipment, inventory movements, tasks and comments, timesheets, invoices, expenses and related records entered in the Services.
• Photos, receipts and files: images or documents you choose to capture or upload, associated project or expense information, uploader identity, timestamps and information needed to store and synchronize the attachment.
• Location and work-session information: precise device location when permitted, project-site coordinates, location accuracy, and derived arrival, departure and on-site or off-site intervals. Section 3 explains how the installer app uses this information.
• Motion observations: device movement information used to identify stationary periods during eligible on-site work sessions, associated times, and sensor-availability information. We do not use this feature to monitor calls or general phone use.
• Notification information: push notification tokens, account/device association, time zone, reminder preferences and information about notifications being read, dismissed or scheduled.
• Technical and support information: IP address, request times, browser or app version, device or operating-system information, service errors and security logs, and messages or diagnostic information you provide when requesting help. An IP address may indicate an approximate location.
• Billing information: business billing details and payment status. Payment providers process payment transactions; Estimart does not store full payment-card numbers.

Information can come directly from you, your organization or its authorized users, the device permissions and features you enable, and services connected by your organization. Work records, photos and observations can be associated with your account and organization; they are not anonymous merely because they are used internally.

3. Background location and motion observations

When location is used

With the required phone permissions, the installer app uses precise location to recognize arrivals at and departures from assigned project sites. This can operate while the app is in the background. Location may be processed while approaching or leaving a site so that the app can determine whether you are on site.

Eligibility is based on available assignment dates, project status, location access and session information. Enabling phone access allows eligible projects to be handled automatically without a separate setup for each project. This is not a clock-in-only feature, and assignment dates can cover more than the hours you actively work. You can change location access in your phone’s settings.

Location readings are used on the device to determine site presence. The app stores project-site information and derived session intervals locally. Reports sent to the CRM include project and session identifiers, session times, on-site duration, qualifying stationary intervals and information about missing sensor coverage. The stationary-observation report does not include a continuous route history of your device coordinates.

Stationary periods longer than five minutes

When motion tracking is enabled and the phone permits it, the app uses device motion information to identify stationary periods lasting more than five minutes during confirmed on-site intervals. These observations are sent to the organization’s CRM for authorized management review, including productivity review. They are not displayed as a productivity report to other installers.

Where available, a project timesheet may show an approximate duration based on arrival and departure information. This estimate is distinct from the hours you submit. Intermediate departures and returns or stationary observations do not automatically reduce that estimate.

Your controls and limitations

Open Your account → Phone setup to review phone access and disable motion tracking. You can also revoke location, background location or motion permission in the operating system’s app settings. Disabling motion tracking does not itself disable location; location permission is controlled separately.

Revoking permission stops the affected future sensor collection; it does not erase records already collected or uploaded. Previously collected records may still synchronize when a connection becomes available. See sections 9 and 12 for retention and deletion requests.

Your phone controls background execution and permission prompts. Battery restrictions, connectivity, inaccurate location, missing permissions or stale assignment information can limit coverage. Missing observations are treated as unknown, not as proof of inactivity. Manual features that do not require location or motion remain available subject to your account permissions.

4. Photos, receipts and local app storage

When you select or capture a project photo or receipt, the app prepares and saves an attachment on your phone before attempting to upload it to the CRM. This lets the image appear immediately and allows uploads to resume after a connection interruption. Image preparation may resize or compress the photo; a saved attachment is not necessarily the original camera file.

Receipt scanning can crop or straighten an image you capture. Project photos and receipt images are stored with their related CRM records and made available according to organization permissions. Installer galleries are restricted to the installer’s own uploads; authorized office or management users can access those records through the CRM.

The app also keeps account-scoped cached records, drafts, notification state, settings and synchronization information. Pending attachments remain saved while the app retries or checks whether an upload succeeded. A visible local image does not by itself mean the CRM has received it.

Local photo retention defaults to keeping copies. Where offered, the 30-day or 90-day cleanup option applies only to eligible confirmed uploads after the app verifies the corresponding CRM copy. It does not delete the CRM record or intentionally remove pending or failed uploads. Clearing app data or uninstalling the app can remove files that have not yet reached the CRM.

5. Phone permissions, notifications and biometric unlock

• Camera and selected photos: used when you choose to capture or attach project images or receipts. The app does not use the microphone for these features.
• Location and motion: used as described in section 3, subject to phone permissions and the relevant app preferences.
• Notifications: used for new tasks, new projects and timesheet reminders. Reminder preferences default to enabled in the app, but phone notifications require operating-system authorization. Change categories or disable notifications in Your account → Phone setup or your phone’s settings.
• Face ID and other supported biometrics: optional unlock uses your device’s authentication system. Estimart receives an authentication result; it does not receive or store your face scan, fingerprint or biometric template. Saved sign-in credentials or tokens use the platform’s secure storage facilities.

Notifications may display work-related information on the lock screen according to your phone’s settings. You can restrict notification previews there. Turning off notifications does not delete tasks or other work records.

6. How we use information

• Authenticate users and enforce organization, role and project access.
• Provide CRM workflows, assignments, task comments, timesheets, project and expense attachments, inventory records and synchronization.
• Provide job-site records and authorized management review of the location-derived and motion observations described above.
• Deliver requested communications, work notifications and reminders.
• Provide support, investigate errors, maintain service reliability and protect against misuse or unauthorized access.
• Administer subscriptions and billing, resolve disputes, and meet applicable legal and recordkeeping obligations.

The installer app does not use advertising identifiers such as Apple’s IDFA or Android’s advertising ID. We do not use installer location or motion observations for targeted advertising.

7. How information is shared

We do not sell personal information or share it for cross-context behavioral advertising. Information may be disclosed in the following circumstances:

• Your organization: authorized administrators, managers and other permitted users can access organization records according to their roles. Location and stationary-observation reports are intended for authorized CRM management access.
• Service providers: providers supporting hosting, storage, content delivery, security, email, payment processing and notification delivery process the information needed for their services. We require providers acting on our behalf to protect that information and use it only for authorized purposes, with protections consistent with this Policy and applicable requirements.
• Notification delivery: Expo and the applicable Apple or Google notification services process push tokens and notification payloads to deliver phone notifications. Some reminders are scheduled locally on your phone.
• Connected services: information is shared when you or your organization enables an integration or opens an external service. For example, choosing directions passes the destination to your selected maps service. Address lookup and maps services may process addresses and location information under their own privacy policies.
• Legal and safety purposes: when needed to comply with applicable law or a valid legal request, protect rights and safety, prevent fraud or enforce our agreements.
• Business transactions: in connection with a merger, acquisition, financing, reorganization or sale of assets, subject to applicable protections and any required notice.

Independent services such as Apple Maps, Google Maps, Waze, app stores and integrations you choose have their own privacy practices. This Policy covers Estimart’s handling of information, not the independent activities of those services.

8. Cookies, device storage and technical records

The website and CRM use cookies or similar storage for functions such as sign-in, session security and preferences. The installer app uses local app storage and secure token storage rather than advertising cookies. Hosting and security services can process technical request information, including IP addresses, to operate and protect the Services.

Browser controls let you remove or block cookies and website storage, although doing so may prevent sign-in or disrupt other functions. Phone settings control app permissions. Deleting local storage does not necessarily delete information already held in the CRM.

9. Data retention

Retention depends on the category of information, the purpose for which it was collected, your organization’s instructions, applicable agreements and legal obligations. We do not apply a single retention period to all CRM records.

• Organization records: projects, time entries, expenses, attachments and work observations are retained as needed to provide the Services and support the organization’s legitimate recordkeeping, subject to applicable law and deletion requests.
• Local app information: cached work records, drafts, settings and pending uploads can remain on the device for continued use and recovery. Confirmed photo copies may be eligible for the optional cleanup described in section 4.
• Technical and security records: retained as needed for troubleshooting, fraud prevention, service protection and applicable obligations.
• Backups and required records: deletion from active systems may not immediately remove backup copies. Certain records may need to be retained for accounting, legal, security or dispute-resolution purposes.

Disabling tracking, signing out or removing an app does not automatically delete previously uploaded information. Contact [email protected] to ask about retention or request deletion of information associated with you.

10. Security

We use technical and organizational measures intended to protect information, including encrypted HTTPS connections, authentication, access controls and safeguards for stored sign-in tokens. No service, device or transmission method can guarantee complete security.

Protect your device and account credentials, use the phone’s screen lock, and report suspected unauthorized access promptly. Local work records and attachments require the same care as other business information on your phone.

11. Your privacy choices and rights

Depending on applicable law, your location and the context in which information is processed, you may have rights to access or obtain a copy of your information, correct it, request deletion, restrict or object to certain uses, withdraw consent where processing relies on consent, or appeal a decision about a privacy request. Precise location can be sensitive personal information.

To make a request, email [email protected]. Include your account email, organization name and a description of your request. Do not send your password, authentication token or unnecessary identity documents.

We may request information reasonably needed to verify identity or authority and locate the relevant records. For organization-managed information, we may need to involve the organization responsible for it. We will respond as required by applicable law and explain any applicable limits or reasons a request cannot be fully completed.

You can change phone permissions at any time. Withdrawal of a permission affects future use of that permission; it does not automatically erase previously collected information. See section 3 for the separate motion and location controls.

12. Account and personal-information deletion requests

Installer accounts are managed through the organization using Estimart. To request deletion of your account or personal information, email [email protected], preferably from the email associated with your account. Specify the organization and whether you are requesting account deletion, deletion of particular information, or both.

We will review and verify the request and, where necessary, coordinate with your organization. Deactivation of access is different from deletion of information. We will explain what can be deleted and what must be retained under applicable obligations, including relevant accounting, employment, audit or legal requirements.

Records shared with your organization may need to remain as business records even after your access ends. Where appropriate, personal information may be removed or de-identified while required records are retained. Uninstalling the app or signing out does not submit a deletion request.

13. Mobile apps and app-store privacy information

This Policy applies whether the app is obtained through a public listing, an unlisted download link, testing distribution or an organization’s authorized distribution process. An unlisted link limits discoverability; it does not make the app’s data collection exempt from this Policy.

App-store privacy disclosures should describe the information processed by the released app and its service providers, including account information, submitted content, work and location-derived information, and relevant technical information. Platform providers may separately process information under their own privacy policies.

14. Children’s privacy

The Services are intended for business use and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact [email protected] so we can investigate and take appropriate action.

15. International users

Estimart is based in the United States. Information may be processed in the United States and in other locations where our service providers operate. Privacy protections can differ between jurisdictions. Where applicable law requires safeguards for an international transfer, those requirements apply to our handling of the information.

16. Changes to this Policy

We may update this Policy as our Services or practices change. The effective date at the top identifies the current version. When required, we will provide additional notice of material changes through the Services, your organization or email, and obtain any consent required for a new use of information.

17. Contact us

• Privacy and deletion requests: [email protected]
• General inquiries and support: [email protected]

18. Ownership and trademarks

Estimart is a brand of PBD GROUP. The Estimart name and logo are owned by PBD GROUP. Other product and company names are the property of their respective owners.