Privacy Policy

CostFeed is operated by Falak ("we", "us"). This policy explains what we collect, why, and the choices you have. Questions: privacy@falakeg.com.

What we collect

Account data: your name, email, and a securely hashed password (or your Google profile if you sign in with Google). Organization data: your organization name, members and roles, invitations, settings, and an activity log. Business data you enter: the quotes, bids, templates, and cost data you create or upload. We do not sell your data and we do not use advertising or third-party tracking cookies.

How we use it

To provide and secure the service, sign you in, send service email (such as email verification and bid approval notifications), and provide support. We process your business data only to deliver the features you use.

AI processing

Our only use of AI is to suggest how the columns in an uploaded spreadsheet map to our cost model. The AI provider receives the column headers and a five-row sample only. It never receives your full dataset and never your actual cost figures, and it never reads, computes, or changes any number. You can use CostFeed without AI.

Where your data is stored

Your data is stored and processed in the European Union (Frankfurt). Some service providers we rely on are based in the United States and receive limited data, as listed in our status and security overview.

Service providers

We use Vercel (hosting, EU region), Neon (database, EU), Anthropic (the AI column mapping described above), Resend (service email), Sentry (error monitoring, EU, with personal data scrubbed), and Google (only if you choose Google sign-in). Each processes data on our behalf under its own terms.

Cookies

We set only essential cookies needed to keep you signed in and remember your active organization. No advertising or analytics cookies.

Security

We encrypt data in transit and at rest, hash passwords, offer two-factor authentication, isolate each organization's data, throttle login attempts, and keep an audit log. No system is perfectly secure, but we work to protect your data.

Your rights and choices

You can view and edit your data in the app. An organization owner or admin can export all of the organization's data at any time, and an owner can permanently delete the organization and all its data. To request access, correction, or deletion of other personal data, email us.

Data retention

We keep your data while your account is active. When you delete your organization, its data is removed immediately; backups age out within the provider's retention window.

Children

CostFeed is a business tool not intended for anyone under 18.

Changes

We may update this policy and will change the date above when we do. Material changes will be communicated through the service.