Privacy

How information is handled when you use this website or contact support.

Updated October 29, 2026

Public examples and trial access

The public website shows fixed sample figures. Editing estimates and calculating your own job costs requires a signed-in account with an active trial. We store the trial start time with your account so the 14-day trial carries across devices.

Previously saved device records

Older device-only workspaces may still contain records in this browser. These records remain available to view and download. Clearing site data removes local records, so keep a private backup.

Templates and device workspace

Older template pages may have saved customer names, vehicle details, notes and messages in this browser. An older device workspace may store business details, a resized logo, customer and job records, supplies, stock movements and expenses in local storage. It does not send these records to our account database unless you use online account saving. Downloaded backups contain those records; store them privately. Shared devices and browser extensions may expose saved information. Clearing site data removes local records.

Email account beta

When you sign in, your email address is sent to Supabase for authentication and Brevo for login email delivery. Your sign-in session is stored on your device. Account workspaces are stored in our Sites Cloudflare database and associated with your authenticated account. Records are retained while the account is active; request account-data deletion by emailing support. We do not use your customer records for marketing analytics. Export a backup before requesting deletion.

Optional AI estimate drafts

If AI assistance is enabled, you can choose to send a job description and saved service names, including add-on names, to OpenAI to prepare a draft. Leave customer names, contact details, payment information and other private information out of the description. The assistant does not receive your customer directory, photos, internal pay rates or job history.

You review the draft before saving or sharing it. AI does not send estimates, approve work or take payments. We record account-linked request times, completion status and token counts to enforce usage limits. We do not save the submitted description or AI response in that usage log. Details you apply to an estimate are saved with your job records. The AI request uses OpenAI with response storage disabled; OpenAI may still retain API data under its data-handling policies. AI is optional and can be unavailable when an allowance is reached.

Customer estimate links

Creating a customer link stores a separate copy of the customer-facing estimate: your business details and logo, customer name, vehicle, included work, prices, tax, extras and terms. It excludes private notes, internal costs and supply records. Anyone with that private link can view the estimate. Pending links expire after 30 days or when replaced. An approval stores the entered name, selected extras, price and time. Approved copies are retained as part of your account records. Sharing a link is your choice; the site does not automatically email it.

Business milestones and customer feedback

An optional business start date helps calculate private anniversary badges. Milestones use the jobs and approvals saved in your account. They are not independent certifications. You can turn milestone notices off in Business settings.

If a business enables customer feedback, each completed job has a private feedback link that lasts 90 days. Anyone with the link can submit one rating, a written comment and an optional follow-up request. These are stored with that business’s job records and are not published on Costbook. The business can mark a follow-up complete but cannot edit the customer’s submitted rating. Feedback is retained with account records; contact support about access or deletion.

A business may add its Google review link to the feedback form. The invitation appears regardless of the customer’s rating and can be used without submitting private feedback. Opening it takes you to Google, which handles that public review under its own policies. Costbook does not copy private feedback to Google or automatically email or text these invitations.

Reviews of Costbook

After three completed jobs that are not marked as samples or excluded from learning, your workspace may invite you to review Costbook. You can decline and stop future invitations. We store that choice with your account. Reviews and display names are private until you permit publication and the site owner checks them. Free tester access and partner relationships are disclosed with published reviews. You can submit updated feedback through your account to change your review or its publication permission. Automated review emails are not enabled.

Technical website information

The site uses Cloudflare hosting and is also published through Sites. Hosting providers may process technical information such as your IP address, requested pages, and browser details to deliver and secure the website. The site offers optional first-party activity measurement. It does not use advertising pixels, session recordings, or a mailing-list form. The owner dashboard and customer workspace are separate sign-in services.

Read Cloudflare’s privacy policy for information about its services. The site uses system fonts and does not request fonts from a third-party font service.

Optional website analytics

Analytics are off until you choose “Allow analytics.” Declining does not limit the calculator. We honor Global Privacy Control and the browser Do Not Track signal. Use “Analytics preferences” in the footer to change your choice.

When allowed, we count predefined actions such as page views, calculator use, estimate openings, and template previews. We record only an approved page path, day, broad marketing source, approved campaign/content label, and a random identifier for a browser-tab session lasting up to 30 minutes. We do not collect calculator values, customer information, free text, full referral URLs, advertising IDs, IP addresses in our analytics database, or screen recordings. Hosting providers still process technical request information.

Your analytics choice is saved on this device; the short-lived analytics session is kept in session storage. The private dashboard reports the latest 30 days. Older activity is excluded from reports, and expired records are removed as new events arrive. If the service is inactive, older records may remain until it receives new activity. Declined visits and browser blocking mean these counts are incomplete. Data is processed using the Sites hosting infrastructure and its Cloudflare database.

When paid checkout is enabled, an approved marketing source and campaign label may be passed to Lemon Squeezy with your consent. The private sales report will store order identifiers, amounts, refunds, dates and those labels; it will not copy customer names, email addresses, postal addresses or payment details into analytics. Sales records are retained for business reconciliation. Contact support about access or deletion requests.

Support correspondence

If you email support@autocostbook.com, your email address and message are used to respond and handle your support request. Correspondence is handled through Proton Mail. Avoid including customer records or sensitive information. You can contact the same address to request deletion of support correspondence, subject to any applicable recordkeeping requirements.

Job payment records and notifications

Signed-in business users can record payment amounts, tax, tips, dates, methods, references and refunds for their jobs. These records are kept with their account in the hosted database, separate from website analytics. Costbook does not collect card numbers, bank credentials or process these customer payments. External payment links open the chosen provider, which has its own privacy policy. Payment history is included in account exports and is preserved when restoring job details so it is not silently erased or duplicated. Contact support about record access, corrections or deletion.

The notification inbox stores approval and payment activity, job references and read status. Push alerts are optional and can be turned off on each device. If enabled, we store the browser’s push subscription endpoint and encryption keys, alert preferences and delivery status. The browser’s push service (such as Apple, Google, Mozilla or Microsoft) delivers encrypted messages. Lock-screen messages omit customer names and amounts. Signing out through Account disconnects that device. Disabling push does not remove the inbox history. Push delivery depends on the device, browser and notification settings.

Questions

Contact support@autocostbook.com.

App usage counts

If you allow analytics, we count actions such as saving a job, starting a timer and creating an estimate link. We do not send customer details, work notes, payment links, amounts or time entries to analytics. Counts are limited to one event of each kind per page and session; they are not a full recording of your activity. You can decline or change your choice using Analytics preferences.

Optional campaign tracking

If you allow analytics, Costbook remembers the approved campaign name and source that brought you here for up to 30 days in your browser. These labels can be attached to subscription checkout so we can compare marketing results. They contain no customer names, form entries or payment details. Declining analytics removes the stored campaign from this browser and stops sending new optional activity.