COSTBRACKEN ESTIMATING EDITION / 11 NOVEMBER 2026

Privacy

Controller and contact

Yolleg Ltd, Company 10455920, at the address below. Contact [email protected] for access, correction, deletion or privacy requests.

Records we hold

Account email, one-use sign-in records, organisation membership, client/site details you enter, cost rates, quotes, actual costs, variations, review sources, audit/version records and subscription references. Do not enter payroll identity records, bank details, card data, medical information or unnecessary personal information. Public quote exports contain only the selected customer-visible fields.

Purpose and processing

We use these records to operate the requested account workspace, recover access, enforce permissions, support billing and meet legal obligations. Account email and organisation records are encrypted at rest using the private application secret. Server-side sessions use essential HttpOnly cookies and SameSite=Lax; production requires HTTPS and Secure cookies. We do not use advertising cookies or sell your records.

The hosting provider processes stored records. SendGrid processes transactional sign-in and confirmation messages. Stripe processes subscription payments; card data is entered on Stripe’s hosted checkout, not stored in this workspace. Provider and hosting arrangements must be configured and verified before production activation. Personal data may be processed internationally under applicable provider safeguards.

Access, retention and deletion

The organisation owner controls access; authorised staff can read internal costs. One-use sign-in links expire after 15 minutes; sessions expire after seven days or earlier revocation. Records remain until owner deletion or a supported retention request, subject to billing/legal retention. Essential billing/contract records may need to be retained separately. Export organisation JSON and customer/internal reports. Ask support about deletion of account information and backups. Subscription cancellation does not erase records.

Demo and previews

The public fictional demo runs in memory and resets when the page reloads. The local release preview has separate encrypted server records and captures synthetic @example.test sign-in messages without outbound email. Captured-mail preview routes are excluded from the release package.

Your rights

You may request access, correction, erasure, restriction or portability as applicable, and complain to the UK Information Commissioner’s Office. We may verify the account/organisation authority before acting on a request. Do not send confidential cost records in an initial support message.