Privacy Policy — WinWin Estimator

1. Information We Collect

Account information: Company name, contact name, email address, and billing details provided during registration.

Business data: Projects, BOQ items, rate analyses, tender documents, and other estimation data you create within your workspace. This data is stored exclusively in your isolated tenant database.

Usage data: Login timestamps, IP addresses, browser/device information, and feature usage patterns for security monitoring and product improvement.

Payment data: Payment transactions are processed by SSLCOMMERZ. We store transaction references and status but not card details.

2. How We Use Your Information

To provide and maintain the Service
To process your subscription payments
To send service-related emails (account confirmation, trial reminders, billing notifications)
To monitor and improve platform security
To provide customer support
To comply with legal obligations

We do not sell your personal information to third parties. We do not use your business estimation data for any purpose other than providing the Service.

3. Data Isolation

Each workspace has its own isolated MySQL database. Your estimation data is never accessible to other tenants and is not stored in any shared database. Only our engineering team can access tenant databases, and only for authorised technical support with your consent.

4. Data Retention

Active accounts: Data is retained for the duration of your subscription plus 30 days after cancellation. After the 30-day window, all workspace data is permanently deleted. Account information may be retained for 12 months for billing and legal compliance.

5. Security

We implement industry-standard security measures including: encrypted HTTPS connections, encrypted sessions, rate limiting on authentication, IP-based access controls for administrative functions, and regular security audits. However, no system is 100% secure and we cannot guarantee absolute security.

6. Cookies

We use essential session cookies required for authentication. See our Cookie Policy for details.

7. Third-Party Services

We use the following third-party services: SSLCOMMERZ for payment processing (Bangladesh); Mailgun for transactional email delivery. These services have their own privacy policies.

8. Your Rights

You have the right to: access your personal data; correct inaccurate data; request deletion of your data (by cancelling your account); export your estimation data (CSV export available within the app).

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you by email before any material changes take effect.

10. Contact

For privacy-related questions: privacy@winwinestimator.com