Privacy Policy

Account information

When you create an account, we collect your name, email address, company name, and password (stored as a one-way hash — we cannot see your actual password). If you upload a company logo for use on scope letters, we store that image.

Job and estimating data

When you use the Service, you input data including project details, takeoff rows, buyout items, cost figures, markup rates, scope letter boilerplate, and other information necessary to build an estimate. This data is stored in your account and is treated as your content — we do not use it for any purpose other than providing the Service to you.

Voice audio and transcripts

When you use the voice takeoff feature, your phone captures audio that is transmitted to our AI language model processor (Anthropic) for transcription and parsing into structured takeoff data. We store the resulting parsed output (piece marks, quantities, lengths) as part of your job data. Raw voice audio is processed in transit and is not permanently stored by us.

Payment information

When you subscribe to a paid plan, payment information (including card number, expiration, and billing address) is collected and processed by our payment processor, Stripe. We do not store full credit card numbers on our systems. We receive limited payment metadata (card brand, last four digits, subscription status) to manage your account.

Usage and technical data

We automatically collect limited technical information when you use the Service, including IP address, browser type, device information, pages visited, features used, and timestamps. This helps us diagnose issues, prevent abuse, and improve the Service.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Authenticate your account and prevent unauthorized access
• Transcribe and parse voice takeoffs you initiate
• Send essential account communications (billing receipts, security alerts, service updates)
• Respond to support requests and technical questions
• Diagnose errors, debug issues, and investigate suspected abuse
• Comply with legal obligations

We do not sell your personal information to third parties, and we do not use your job or takeoff data to train AI models.

To operate the Service, we rely on a small number of trusted infrastructure providers. Each of these processes data on our behalf under its own security and privacy commitments:

• Supabase — database hosting, authentication, and file storage for your account data and uploads
• Vercel — web application hosting and content delivery
• Anthropic — AI language model used to parse voice input into structured takeoff data
• Stripe — payment processing for paid subscriptions (when applicable to your account)

We do not share your personal information with third parties for their own marketing purposes. We may disclose information when required by law, court order, or to protect the rights, property, or safety of SteelCaller, our users, or the public.

We retain your account information and job data for as long as your account is active. If you cancel your subscription, your data remains available for export for 30 days, after which it may be permanently deleted.

Certain records (billing invoices, authentication logs, abuse investigation records) may be retained for a longer period as required by law or for legitimate business purposes, such as responding to disputes or enforcing agreements.

You have the following rights regarding your information:

• Access and export — View and export your job, takeoff, buyout, and scope letter data at any time in Excel or PDF format
• Correction — Update account information directly in the Service, or contact us for changes you cannot make yourself
• Deletion — Request deletion of your account and associated data by emailing support@steelcaller.com
• Portability — Export your data in standard formats (.xlsx, .pdf) to take it elsewhere
• Objection — Object to certain types of processing by contacting us

Depending on your location, you may have additional rights under applicable privacy laws. To exercise any of these rights, email us at support@steelcaller.com.

We use industry-standard security measures to protect your information, including encryption in transit (TLS), encryption at rest for sensitive fields, authenticated access controls, and separate production environments. No system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you as required by law.

The Service uses essential cookies and similar technologies to keep you logged in, remember your preferences, and secure your session. We do not use cookies for advertising or third-party behavioral tracking. If we add analytics or error-tracking tools in the future, we will update this policy and, where required, obtain your consent.

The Service is operated from the United States, and your information may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your own.

The Service is intended for use by adults in a professional context and is not designed for or directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us at support@steelcaller.com and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The “Effective” date at the top of this page indicates when it was last updated.

Questions about this Privacy Policy or how we handle your information? Email us at support@steelcaller.com.

For more on our practices, see also our Terms of Service.