Privacy policy

Your account and business details: we decide how these are used, so for them we are the data controller.

The data you enter about your own clients (names, phone numbers, emails, addresses, the quotes you make for them): you decide what to enter and why, so you are the controller and we only process it for you, to run the app, on your instructions. We never use your clients' data for anything else.

Account: your email address and a securely scrambled version of your password — or, if you sign in with Google, the name and email address Google shares with us.

Business details you enter: firm name, owner, phone, email, website, address, company and VAT numbers, logo, prices, rate card, suppliers and discounts.

What you create in the app: clients, materials, quotes and their versions, and their history (sent, accepted, declined, with the reason you give); jobs with the labour, costs and payments you enter, the names and rates of the people you add, and receipt photos you attach (stored privately, with location data removed).

Technical data needed to keep the service safe: login cookies, and short-lived server logs (such as IP address and browser type).

Quote links: when a client opens a quote link we note the time and browser type (so the firm sees it was opened). When a client accepts online we keep the name they typed, the time, their browser type and IP address, and a fingerprint of the quote, as proof of acceptance for the firm. Questions the client sends are kept with the quote. Bank details a firm enters are shown only to clients who accepted its quote.

To provide the app you signed up for (performance of a contract — GDPR Art. 6(1)(b)).

To keep the service secure and prevent abuse (our legitimate interest — Art. 6(1)(f)).

To meet legal obligations, for example accounting rules if paid plans are introduced (Art. 6(1)(c)).

We do not sell data, show advertising, or send marketing emails without your consent.

Supabase — database, login and file storage. Our data is stored in the EU (Frankfurt, Germany).

Vercel — hosts the website itself. Requests may pass through servers outside the EU, covered by the EU Standard Contractual Clauses.

Google — only if you choose “Sign in with Google”.

GitHub — keeps our nightly backups, locked with AES-256 encryption, for 30 days.

Anthropic (Claude) — only when you use an AI feature. It receives the job description you write, any site photos you add (shrunk, with their location and camera data removed; apptonom doesn't keep them), receipt photos you ask it to read and the names of items from your rate card and materials; never your clients' names, phone numbers, emails or addresses. Under its commercial terms it doesn't train its models on this data and keeps it only for a limited time. Requests may be processed outside the EU, covered by the EU Standard Contractual Clauses.

Each of these works under a data processing agreement and only as needed to run apptonom.

For as long as your account is open. When you close it, we delete your firm's data within 30 days; copies in backups disappear as those backups expire (after 30 days).

Quotes you need for your own records or accounting: please download them (PDF, or “Export your data” in Settings) before closing your account.

You can ask to see, correct or delete your data, to limit or object to how it is used, and to receive it in a portable form. Your firm's full data can be downloaded any time with “Export your data” in Settings.

To use these rights, or to close your account, write to [CONTACT EMAIL]. We reply within one month.

If you think we handle your data wrongly, you can complain to the Bulgarian Commission for Personal Data Protection (КЗЛД), www.cpdp.bg.

apptonom. only uses cookies the app needs to work: keeping you logged in, and remembering your language. There are no advertising or analytics cookies.

All traffic is encrypted (HTTPS). Each firm's data is kept separate by rules inside the database, so no firm can see another's. Backups are encrypted.

If we change this policy we update the date below, and tell you in the app if the change is important.