This policy explains what information ConCal collects, how it's used, and what choices you have. We don't sell your data and we never will. If you have questions, email us at hello@con-cal.net.
Depending on how you use ConCal, we may collect:
| Data | When collected | Why |
|---|---|---|
| Email address | When you create an account | Account login and transactional emails (receipts, alerts) |
| Name & company | When you fill out your profile | Personalizing proposals and estimates |
| Job estimates | When you save a job (Pro/Teams) | Cloud sync across your devices |
| Customer contact info | When you add a customer record | Storing your customer database |
| Proposal data | When you create or share a proposal | Generating and hosting shareable proposals |
| Billing info | When you subscribe to Pro or Teams | Processed by Stripe — ConCal never sees your full card number |
| Location / zip code | When you use the weather feature | Fetching local weather from OpenWeatherMap |
| Usage analytics | While you use the app | Understanding which features are used to improve the product |
ConCal's backend runs on Supabase, hosted on Amazon Web Services (AWS) in the United States. Your data is stored in a PostgreSQL database with row-level security — meaning your data is only accessible to your account.
Passwords are never stored in plaintext. Supabase Auth handles authentication using industry-standard hashed credentials. All data in transit is encrypted via HTTPS.
We don't use advertising cookies or third-party tracking pixels. Here's what we do store in your browser:
localStorage so dark/light mode sticks between visits.localStorage to keep you logged in. It expires automatically.There are no third-party tracking cookies on ConCal.
ConCal uses the following services to function. Each has its own privacy policy.
Handles our database, authentication, and backend functions. Your account and job data live here. Supabase Privacy Policy →
Handles all payment processing for Pro and Teams subscriptions. ConCal never stores your full card number. Stripe Privacy Policy →
Used by the weather feature. When you enter a location or zip code, it is sent to OpenWeatherMap's API. OpenWeatherMap Privacy Policy →
Used to deliver transactional emails (welcome emails, team invites, billing receipts). Your email address is shared with Resend for delivery only. Resend Privacy Policy →
We load the Inter typeface from Google Fonts, which involves a request to Google's servers that may log your IP address. Google Privacy Policy →
ConCal does not sell your data. We don't share your information with advertisers, data brokers, or any third party for marketing purposes.
Your data is only shared with the third-party services listed above, and only as needed to provide the service. We may disclose data if required by law (e.g., a valid court order), and will notify you if legally permitted.
You have full control over your data:
We keep your data as long as your account is active. When you delete your account, your data is removed and not retained after 30 days.
If your subscription lapses, your account data is kept for 90 days before deletion, giving you time to reactivate.
If you discover a security issue, please report it to hello@con-cal.net.
ConCal is not intended for users under 18. We don't knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we'll remove it promptly.
If we make significant changes, we'll email you before they take effect. The latest version is always at con-cal.net/privacy.