Privacy Policy
Privacy Policy
1. Who we are and what this policy covers
Costless Contractors, Inc. (which also operates LUXE Surface Finishing) provides LUXE Estimator ("LUXE Estimator," "we," "us," or "our") — estimating and business-management software for contractors. This Privacy Policy explains how we handle personal information through luxeestimator.com and the LUXE Estimator application, including LUXE OS features.
Our business customers also use the software to manage information about their own clients, leads and workers. For information we process on a business customer's behalf, that customer generally decides why it is collected and how it is used. Contact that business first about its handling of your information; we assist with requests as appropriate. We handle our own account, billing, support and website information as described here.
This policy does not automatically govern another product merely because it is operated by a related business. Links to other services may lead to different privacy policies.
2. Information we collect
Depending on the features you use, we collect:
- Account and business information: names, email addresses, phone numbers, company details, account identifiers, roles and preferences.
- Customer and project information: client and lead contact details, job addresses, estimates, dimensions, rates, materials, schedules, invoices, project notes and uploaded photos or documents.
- Workforce information: assigned jobs and clock-in/clock-out time entries. See Section 3 for exactly what a time entry does and doesn't include today.
- Payment and subscription information: plan, billing contact information, invoices, transaction status and payment-provider identifiers. We do not store your full card number ourselves — billing and payment details are handled directly by Stripe, our payment processor.
- Support information: messages and information you provide when asking for assistance.
- Technical information: IP address, browser/device information, timestamps, usage and diagnostic records. See Section 7 for cookies.
Business customers supply information about other people when using the service. They are responsible for providing appropriate notices and obtaining permissions where required.
3. Location, voice and connected services
Clocking in and out today records only a timestamp, the job you select, and any notes you add — we do not collect device location (GPS) as part of time tracking. If that changes, this section will be updated to describe exactly what's captured and who can see it before the feature ships.
LUXE Estimator does not currently offer voice-note recording or transcription. If a page or plan comparison describes a "voice field notes" feature, that is a planned feature, not something the app records or stores today.
When you connect a supported service — for example, Stripe for billing — we send and receive only the information needed for that integration, and you can disconnect a connected service at any time from Settings where a disconnect option is available.
4. How we use information
We use information to provide the selected features; maintain accounts and permissions; create estimates and job records; support scheduling, invoicing and payments; provide customer support; communicate about accounts and service changes; protect the service and prevent abuse; diagnose and improve reliability; and meet legal obligations.
We do not use your project data to train our own AI models, and we do not sell or share it with anyone else for that purpose.
If we send optional promotional messages, you may opt out through the message or by contacting us. Necessary account, security and billing messages may still be sent.
5. AI-assisted features
When you request an AI render, we send the information needed for that request to our AI provider, OpenAI: your uploaded photo (resized before sending), a mask describing which area of the photo to change, and a short generated description of the color and finish you selected. We do not include your name, email, address or other account details in that request.
We store the resulting rendered image ourselves; we do not store OpenAI's raw API response. Provider processing of the image/prompt is governed by OpenAI's own API data-use terms, which are separate from our own storage described here.
Today, images you upload for a render and the rendered result are stored at a publicly-reachable URL and are not automatically deleted. We are not currently able to promise that render images are private or time-limited — see the note in Section 8. If you need a specific render removed, contact us and we will delete it by hand.
6. Who can receive information
We disclose information as needed to:
- Authorized workspace users: owners, administrators and team members according to their access rights.
- Recipients you select: people receiving estimates, invoices, schedules, acceptance links or other communications you send through the service.
- Service providers: companies providing hosting (Google Cloud/Firebase), payment processing (Stripe), AI rendering (OpenAI), transactional email, and other functions in use.
- Legal or protective recipients: when required by law or reasonably necessary to address fraud, security incidents, legal claims or threats to rights and safety.
- A business successor: in a merger, acquisition or asset transfer, subject to applicable protections and notice requirements.
If you choose to publish a business website through LUXE OS, the information you select for publication becomes available to visitors and may be indexed by search engines or copied by others. Review it before publishing. Today, canceling a subscription does not automatically take a published site down — contact us if you need one removed.
We do not sell personal information, and we do not use it for cross-context behavioral or targeted advertising. We do not share your account or project data with third parties for their own marketing purposes.
7. Cookies and local device storage
The marketing website and application do not currently use analytics or advertising cookies, or third-party tracking scripts.
The application uses your browser's local storage only for your own device — for example, remembering a display preference and letting the app work offline. Offline features save working copies of job information on your device to support use without a connection and to sync changes later. This data stays on your device until it syncs or you clear your browser's site data; signing out does not automatically erase it, so protect shared devices and review access before handing one to someone else.
8. Retention and deletion
We retain information for the purposes described in this policy. Today, we do not have a single, fixed deletion schedule across every category of data:
- Active-account data (jobs, estimates, invoices, settings) is retained for as long as your account is active.
- We have not yet built an automated process for closed-account data, so it is not automatically deleted on cancellation — see the deletion process below.
- AI-rendered images (originals and results) are not automatically deleted or access-restricted today (Section 5) — this is a known gap we intend to close, similar to a retention job we've already built for a sibling product.
- Application and infrastructure logs follow our hosting providers' platform-default retention; we have not configured a custom log-retention schedule.
Deleting an account, cancelling a subscription and deleting a particular project are different actions. Export and deletion requests are currently handled manually — email us and we will act on the request within a reasonable time. Some information may remain temporarily in backups or be retained to meet legal obligations or resolve disputes. Deleting our copy does not delete copies already downloaded, sent to recipients or published elsewhere.
9. Choices and privacy requests
Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, or to restrict or opt out of certain processing. Submit requests to adam@luxesurfacefinishing.com. We may verify your identity and authority before responding and will respond within a reasonable time. If a business customer controls the information, we may direct you to it and assist it as appropriate.
If you are located in the United States, depending on your state you may have rights under applicable state privacy law (for example California's CCPA/CPRA, and similar laws in Colorado, Connecticut, Virginia, Utah and other states) to know what personal information we hold about you, access or obtain a copy of it, correct inaccurate information, delete it, and opt out of its sale, its sharing for cross-context behavioral advertising, or profiling with legal or similarly significant effects. As explained in Section 6, we do not sell personal information or use it for targeted advertising, so an opt-out request has nothing further to act on beyond confirming that. You may designate an authorized agent to submit a request on your behalf; we may still need to verify your identity directly. We will not discriminate against you for exercising these rights. If we deny a request, you may appeal by replying to our response; if the appeal is denied, some states allow you to contact your state Attorney General.
We also serve some customers outside the United States. If you are located in the European Economic Area, the UK, Canada or another jurisdiction with its own data protection law, additional or different rights may apply (for example under the GDPR or similar law), and a different legal basis and international-transfer safeguard may govern how we handle your information. We have not yet completed the jurisdiction-specific review, transfer-safeguard assessment, or — where required — a separate data processing agreement that this would need. Contact adam@luxesurfacefinishing.com and we will work with you directly until that review is complete.
You can manage available account settings and communication preferences. Some changes may limit the features you can use.
10. Security and processing locations
We use safeguards appropriate to the information and service, but no system can guarantee absolute security. Our hosting and processing infrastructure runs on Google Cloud/Firebase, primarily in the United States; our payment (Stripe) and AI rendering (OpenAI) providers operate their own infrastructure under their own terms. Where required, we use applicable safeguards for international transfers.
11. Children
LUXE Estimator is intended for business use by adults, not children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has supplied information so we can investigate and take appropriate action.
12. Changes and contact
We will update this page and its effective date when this policy changes. We will provide additional notice or obtain consent when required for material changes. Changes do not authorize us to disregard commitments previously made about information already collected.
Operator: Costless Contractors, Inc.
Email: adam@luxesurfacefinishing.com
Phone: 509-262-4505
Mail: 10014 E Montgomery Ave #9, Spokane Valley, WA 99206