Privacy Policy

Information we collect

Contractor beta signup form: name, email, company name, primary trade, crew size, typical job size, current job-costing method, device/platform, and whatever you write in the "main job-costing problem" field. All fields except name and email are optional.

CostTrak accounts: when you create a CostTrak account, we collect your name, email, business name, and the job, customer, cost, quote, and photo data you enter into the product.

Mobile voice input: The CostTrak mobile app can turn spoken job notes into text using your device's microphone. We store and sync the resulting text with the selected job. We do not store or upload the audio recording. When on-device speech recognition is available, conversion happens on your device; otherwise your phone's built-in speech service may process the audio.

Camera and photo library: The CostTrak mobile app can use your camera to take a jobsite photo, or your photo library so you can pick an existing photo and attach it to a job. Photos you take or pick are stored with the job in CostTrak's cloud storage. CostTrak does not save those photos to your camera roll. A nightly process keeps a second private backup copy of saved job photos.

Site analytics: we record a small set of product-analytics events on the marketing site (for example, that the "Create Free Account" button was clicked, or that the pricing page was viewed). Each event stores an event name from a fixed list, the page path, an optional referring URL, and a timestamp. A small number of event types also store a short, fixed set of non-identifying details relevant to that event — for example, a truncated error message when a form submission fails. We do not attach your name, email, or any other personal information to these events.

Referring URL: if you arrive from a link on another site, that page's URL may be recorded with your beta signup or with analytics events, as described above.

Server logs: like most web services, our servers log request metadata (timestamp, HTTP method, path, response status, and IP address) for operational debugging and abuse prevention, and, when a signed-in request includes them, internal account and organization identifiers used for troubleshooting. These logs are separate from the analytics events described above. We do not currently capture browser user-agent strings.

Cookies: CostTrak does not set tracking or advertising cookies. Signed-in sessions are stored in your browser's local storage, not in a cookie.

How we use information

We use this information to operate CostTrak, evaluate and onboard beta applicants, respond to support requests, and understand how the marketing site and beta signup flow are used. We do not sell your information to third parties.

Third-party service providers

CostTrak runs on Vercel for hosting and Supabase for our managed PostgreSQL database. When configured, job photo uploads use Vercel Blob storage, and a nightly backup copy of saved job photos is kept in a private Supabase Storage bucket. If you log mileage with a start and end address, CostTrak can send those addresses to Google Maps to work out the driving distance. You can still enter miles by hand. If you allow it in Settings, CostTrak sends your job description, notes, voice-note text, photos, and job address to Anthropic, an outside service, to generate price estimates and suggested line items. Anthropic does not use that content to train their models. See the Security page for more detail.

Data retention and deletion

We retain account data for as long as your account is active. Resubmitting the beta signup form with the same email updates your existing entry rather than creating a new one.

Signed-in users can delete their personal CostTrak account at costtrak.com/account/delete. The account is deactivated immediately and permanently deleted within 30 days. Contact support@corelogyx.com within that window to restore it. Organization-owned jobs, estimates, proposals, and similar records stay with the organization. A sole organization owner must transfer ownership or delete the organization before their personal account can be removed.

The mobile app stores an offline copy of field data in a local SQLite database and jobsite photos on the device until they sync. After account deletion, remaining local copies on a device should be removed from that device's Account screen. Diagnostic reports sent to Sentry, when configured, are redacted of tokens, signed URLs, and customer identifiers before leaving the device.

Contact

Questions about this policy can be sent through support@corelogyx.com.

Questions? Email CoreLogyx support at support@corelogyx.com.