Privacy

Two different sets of people

This matters more than anything else here, so it comes first.

• You, the contractor. You have an account with us. We decide how your account data is handled, and this policy governs it.
• Your clients. When a homeowner asks you for a fixed price, the estimator collects their details and we store them on your behalf. That is your data about your customer — you decide what happens to it, and we only hold and process it so the tool works. We do not market to them, sell their details, or use them for anything else.

In data-protection terms you are the controller of your clients' information and Consilium Holdings is the processor. If a client asks you to delete their details, tell us and we will remove them.

What we store about you

• Your email address and a one-way hash of your password — never the password itself.
• Your display name and profile photo, if you upload one.
• Your company details: name, licence number, phone, the inbox enquiries should reach, your financing link, and your logo.
• Which plan you are on and when access runs to.
• Your appearance preference.

What we store about your clients

Only what they type into a quote request: name, phone, email, property address, timing, what plans exist, any notes, and the estimate itself. It is shown to you, emailed to the inbox you nominate, and stored so you can find it later. It is never shown to another account — every query is filtered to the account that owns it.

Cookies

• A session cookie that keeps you signed in while the browser is open.
• If you tick “keep me logged in”, a 30-day cookie holding a random token. Logging out deletes it, and so does resetting your password.

No advertising cookies, no third-party analytics, no tracking pixels.

Who else sees it

• Our hosting provider, which stores the database and files.
• Stripe, for payments. Card details go straight to Stripe — they never touch our servers, and we only ever see whether a payment succeeded.
• Email delivery, to send password resets and enquiry notifications.
• If you set your own form endpoint, enquiries go to that service instead of being stored here. What they do with it is governed by their terms, not ours.
• Hearth only if someone chooses to follow a financing link, which takes them to Hearth's own site under Hearth's own policy.

We do not sell personal information, and we do not share it for advertising.

How long we keep it

Your account and its data stay until you ask us to delete them. Enquiries stay until you delete them or close your account. Password-reset links die after an hour; sign-in tokens after thirty days. Backups are kept for a rolling fourteen days, so deleted data can persist in a backup for up to two weeks before ageing out.

Your rights

Whoever you are and wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it — and we will not treat you differently for asking. Write to support@10hub.ai. Deleting your account removes your profile, company details, uploads and enquiries.

If you are a resident of California, those are rights you hold under state law rather than a courtesy we extend, and they apply even though Consilium Holdings is established in Wyoming. They cover the information we hold about you, and the client details you collect through the tool are yours to direct — tell us and we will remove them.

Self-serve export and deletion are not built yet; for now we do it by hand on request.

Security, honestly stated

Passwords are hashed, traffic is encrypted, uploads are stored outside the public web folder and re-encoded to strip anything hidden inside them, and every database query is scoped to a single account. No system is perfect; if we ever discover a breach affecting your data we will tell you promptly rather than quietly.

Questions

Write to support@10hub.ai and we will answer.