Skip to content
Estimora

Privacy Policy

How we collect, use, and protect your personal data when you use Estimora, in accordance with the GDPR.

1. Data controller

The controller of your personal data is:
  • HK Hubert Kowalewski
  • Kraszewskiego 45, 15-024 Białystok, Poland
  • Email: hubertkow14@gmail.com

2. Overview

This Privacy Policy explains how we collect, use, and protect your personal data when you use our SaaS product (the Service).
The Service is designed for software agencies to create and manage project estimates, offers, and related data.
We process personal data in accordance with the General Data Protection Regulation (GDPR).

3. What data we collect

Account data:
  • name (if provided)
  • email address
  • authentication data (stored securely)
Workspace and project data entered by users:
  • company and workspace information
  • project estimates and scope data
  • tasks, roles, and hours
  • pricing and financial data
  • assumptions, exclusions, and notes
Usage data:
  • IP address
  • browser and device information
  • pages visited and interactions
  • timestamps of actions
Payment data. Payments are processed by Stripe and we do not store full payment details. Stripe may process:
  • billing information
  • payment method data
  • transaction history

4. How we use your data

We use your data to:
  • provide and operate the Service
  • manage user accounts and authentication
  • enable estimation, collaboration, and workflows
  • process payments and subscriptions
  • improve performance and usability
  • ensure security and prevent abuse
  • provide support and communicate with users
  • send marketing communications (only with consent)

5. Legal basis for processing

We process personal data based on:
  • contract performance — account data, workspace and project data, service functionality
  • legitimate interest — analytics, security, product improvement
  • legal obligations — accounting, tax, billing records
  • consent — marketing communications, non-essential cookies

6. Data sharing

We may share your data with trusted third-party providers:
  • Stripe — payment processing and subscription management
  • Google Analytics (GA4) — product analytics and usage insights
  • OVHcloud (EU) — hosting and infrastructure
All providers process data in accordance with applicable data protection laws.

7. International data transfers

Some providers, such as Stripe and Google Analytics, may process data outside the European Economic Area (EEA). In such cases we ensure appropriate safeguards, including:
  • Standard Contractual Clauses (SCCs)
  • GDPR-compliant transfer mechanisms

8. Data retention

We retain data only as long as necessary:
  • account data — for the duration of the account
  • workspace and project data — until deletion by the user or account closure
  • billing data — as required by law, typically 5 to 10 years
  • analytics data — for a limited period, up to 14 months, then anonymized or aggregated

9. Your rights (GDPR)

You have the right to:
  • access your personal data
  • correct inaccurate data
  • request deletion (the right to be forgotten)
  • restrict processing
  • object to processing
  • data portability
  • withdraw consent at any time
You also have the right to lodge a complaint with a supervisory authority in your country of residence or where a violation occurred.
To exercise your rights, contact: hubertkow14@gmail.com

10. Cookies

We use cookies and similar technologies for:
  • essential purposes — maintaining user sessions, authentication and security
  • analytics — understanding how users interact with the Service and improving performance and usability (Google Analytics)
Analytics cookies are used based on consent where required. You can manage cookies through the cookie banner and through your browser settings.

11. Security

We implement appropriate technical and organizational measures, including:
  • encrypted communication (HTTPS)
  • access control and authentication mechanisms
  • secure infrastructure hosted in the EU
  • monitoring and protection against unauthorized access

12. Data roles (controller and processor)

We act as a data controller for:
  • account data
  • billing data
  • platform usage data
We act as a data processor for workspace and project data entered by users. In this case, customers (software agencies) are the data controllers and we process data on their behalf.
A Data Processing Agreement (DPA) is available upon request.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of significant changes where required.

14. Contact

If you have any questions about this Privacy Policy, contact:
  • HK Hubert Kowalewski
  • Email: hubertkow14@gmail.com