Privacy Policy

1. Two kinds of data

This policy covers two different things, and the distinction matters:

• Your data. Information about you and your company, which we hold as the controller — your name, business name, email, phone, billing details and how you use the product.
• Your customers' data. Information you enter about the people you work for — names, addresses, properties, estimates and invoices. For this, you are the controller and we are a processor acting on your instructions.

2. What we collect about you

• What you submit on this site: business name, your name, work email, phone, trade, crew size, revenue band and what you tell us about your situation.
• Account and usage data: who signed in, what was created or changed, and when.
• Billing data, held by our payment processor rather than by us.
• Technical data: IP address, browser and request logs, kept for security and debugging.

3. Why

To decide on your application and contact you about it; to provide and secure the service; to bill you; to notify you about changes; and to improve the product. We rely on performance of our contract with you, and on our legitimate interest in operating and securing the service.

4. Who processes it

We use a small number of third-party processors, each for a stated purpose:

• Supabase — application database and authentication.
• Vercel — hosting and request logs for this site and the application.
• Stripe — subscription billing, and processing of the payments your customers make to you. Stripe receives payment data directly; we do not store card numbers.
• Resend — transactional email, including the estimates, invoices and follow-ups sent on your behalf.
• Anthropic — the AI model behind estimate drafting, mockups and document analysis. Content you submit to those features is sent for processing and is not used to train models.

5. What we do not do

We do not sell personal data. We do not market to your customers. We do not use your customer lists for anything other than running your account, and we do not use the product for cold outreach because it is not built for it.

6. How long we keep it

Account and job data for as long as your account is active, and then for [retention period — to confirm before launch] after closure so it can be restored or exported, unless you ask us to delete it sooner. Applications that do not become accounts are deleted within twelve months. Technical logs are kept for a short operational period.

7. Your rights

You can ask us for a copy of your data, correct it, export it, or have it deleted. Write to hello@aeryssoftware.com. If one of your customers asks you to delete their data, you can do it in the product; if you need our help, ask.

8. Cookies

This marketing site sets no advertising or tracking cookies. The application uses only the cookies required to keep you signed in.

9. Security

Access is scoped per company, and crew members can only see the jobs they are assigned to. Data is encrypted in transit. If a breach affects your data we will tell you.

10. Changes and contact

We will notify material changes to the email on your account. Contact: hello@aeryssoftware.com.