Privacy Policy

Last updated: September 29, 2026

Construction Quotes is a business tool: companies use it to prepare quotes, run jobs and invoice their customers. This page explains, in plain words, what information the platform holds and how it is treated - including by Manny Solutions LLC, the company operating this installation.

What we store

• Account information - your name, username, email address and a one-way hash of your password. We never store the password itself.
• Your company's business records - the customers, quotes, tasks, labor lines, materials, invoices, payments and files your team enters or uploads. This data belongs to your company.
• Activity records - an audit trail of who created or changed a record and when. This exists so your company can trust its own numbers.
• Payment records - which invoice was paid, when, how much, and a payment reference. These are bookkeeping facts, not card details - see Payments below.
• Technical basics - session cookies needed to keep you signed in, and standard server logs (IP address, time, request) kept for security and troubleshooting.

The mobile app

Your company may use our mobile app for entering labor hours in the field. The app signs in with the same account and stores nothing new about you beyond what the website already holds. Specifically:

• Work hours - the hours entered for laborers, which become your company's labor records exactly as if they were typed on the website.
• A device identifier - a random ID created on first launch, used only to tie your sign-in to that phone so a lost phone can be signed out from the office. It identifies the install, not the person, and is never used for advertising or tracking.
• On the phone itself - sign-in tokens are kept in the phone's secure keychain, and hours typed without signal wait on the phone until they can be sent. Pay figures are never stored on the phone. Signing out removes the account's data from the device.

The app contains no advertising, no analytics and no third-party tracking of any kind.

Payments and payment information

Invoices issued through the platform can be paid online. That payment does not happen on our servers:

• Card and bank details never touch this platform. An invoice's "Pay online" link opens Intuit's own secure payment page (QuickBooks Payments). The card number or bank account you type there goes to Intuit, the payment processor - we never see it, transmit it or store it.
• What comes back to us is the bookkeeping outcome only: that the invoice was paid, the amount, the date and a payment reference. That record is what marks your invoice paid here.
• Settlement of online payments is handled by Intuit's merchant services and paid out to the invoicing company's bank account on Intuit's schedule. Intuit's own privacy policy and terms apply to the payment itself.
• Payments made outside the platform (a check or a bank transfer arranged directly) are recorded here as bookkeeping entries by the invoicing company's staff.
• Refunds are issued by the invoicing company and recorded on both sides as refund receipts; the same rule applies - no card details are handled here.
• Accounting connection - where a company connects its QuickBooks account, the connection tokens are stored encrypted and used only to exchange invoice and payment records with that company's own QuickBooks books. Every such exchange is written to an audit trail.

What we do not do

• We do not sell or rent your data to anyone.
• We do not use your business records for advertising.
• We do not read your company's data except to operate, support or secure the service, or when the law requires it.

Who can see what

Each company's workspace is separated from every other company's. Inside your workspace, what a person can see is decided by the permissions your own administrator gives them. The platform operator can see organization-level information (company name, status, contact details) in order to run the service.

Cookies

The platform uses a session cookie to keep you signed in and a security token to protect forms. There are no advertising or cross-site tracking cookies.

Data retention and deletion

Your company's records stay for as long as your organization uses the service. If your organization leaves, its data can be exported first and is then removed from the live system on request. Backups age out on a fixed schedule.

Security

Passwords are hashed with a modern algorithm (Argon2id), access is permission-checked on every request, and changes are audited. No system is perfectly secure; if we learn of a breach affecting your data we will inform your organization's administrator without undue delay.

Changes to this policy

If this policy changes in a way that matters, the date above changes with it and your organization's administrator is informed.