Privacy Policy

Last updated: September 5, 2026

This policy covers both the CostEra website and the CostEra mobile apps (iOS and Android), since they share the same account and the same underlying data.

CostEra ("we", "us", "our") provides business-management software for orders, quotes, purchases, inventory, clients, and financial reporting. This policy explains what information we collect when you use CostEra, how we use it, and the choices you have.

1. Information We Collect

We collect the following categories of information:

Account information — name, email address, and authentication details when you sign up, whether directly by email/password or through Google or Apple sign-in.
Business data you enter — orders, quotes, purchases, products, inventory levels, clients, suppliers, payments, and financial settings you create while using the app. This data belongs to you; we process it only to provide the service.
Images you upload — product photos and your company logo, stored so they can be shown back to you across devices.
Location data — if you use address/location features (for example, setting a business address on a map), we use Google Maps to look up and display that location. We do not track your device's location in the background.
Usage data — basic analytics about how the app is used (which screens are opened, general usage patterns), collected via Firebase Analytics, to help us understand what to improve.
Device and log data — standard technical information (browser type, device type, IP address, timestamps) generated automatically when you use the app, used for security and troubleshooting.

2. How We Use Your Information

To provide, operate, and maintain the CostEra service.
To sync your data across the web app and mobile apps.
To send you service-related communications (for example, payment reminders you've configured, or account verification emails).
To provide customer support.
To understand usage patterns and improve the product.
To detect, prevent, and address technical issues, fraud, or abuse.

We do not sell your personal information or your business data to third parties.

3. Subscriptions and Payments

CostEra offers a free tier and a paid Premium subscription. Premium subscriptions are purchased and billed through the Apple App Store or Google Play Store on mobile — we do not process or store your payment card details ourselves. Apple and Google handle payment processing under their own privacy policies. We use RevenueCat to manage subscription status across platforms; RevenueCat receives only the information necessary to track your subscription entitlement (such as your account identifier and subscription status), not your payment details.

4. Third-Party Services

We rely on the following third-party services to operate CostEra:

Google Firebase — authentication, database (Cloud Firestore), file storage, cloud functions, and analytics.
Google Maps — address lookup and map display.
RevenueCat — subscription status management.
Apple App Store / Google Play — subscription billing on mobile.

Each of these providers processes data under its own privacy policy, and we only share what's necessary for them to provide their part of the service.

5. Data Storage and Security

Your data is stored on Google Firebase infrastructure and encrypted in transit. We use Firebase's access-control rules to make sure only your authenticated account can read or write your business data. No method of transmission or storage is 100% secure, but we take reasonable, industry-standard steps to protect your information.

6. Data Retention and Deletion

We keep your data for as long as your account is active. You can request deletion of your account and associated data at any time from within the app's account settings, or by contacting us directly. Once a deletion request is processed, your data is removed from our active systems (some information may be retained briefly where required for legal, accounting, or fraud-prevention purposes).

7. Your Rights

Depending on where you're located, you may have rights to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data.
Export your data in a portable format.
Object to or restrict certain processing.

To exercise any of these rights, contact us using the details below.

8. Children's Privacy

CostEra is a business tool and is not directed at children. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you through the app.

10. Contact Us

If you have questions about this policy or how your data is handled, contact us at privacy@costera.biz.