Privacy Policy.

This Privacy Policy describes the practices of Cedrus Takeoffs, LLC, a Colorado limited-liability company with a registered business address at 1500 N Grant St #10453, Denver, CO 80203, with respect to Cedrus Pro Takeoff (“the Service”). References to “Cedrus,” “we,” “us,” or “our” refer to Cedrus Takeoffs, LLC. For purposes of applicable privacy law, Cedrus Takeoffs, LLC is the controller of personal information processed in connection with the Service — except for billing data, where Stripe acts as an independent controller (see “Payment processing & merchant of record” below).

When you create an account, we collect your name, email address, and company information. When you use Cedrus Pro Takeoff, we collect project data including uploaded blueprints, measurements, room configurations, and pricing information.

We also collect usage data through analytics services (PostHog and Vercel Analytics) to improve the product, including page views, feature usage, and session recordings with input masking for sensitive fields.

We use your information to:

• Provide and maintain the Cedrus Pro Takeoff service
• Process your subscription payments via Stripe (our merchant of record)
• Send transactional emails (account verification, password resets)
• Improve our product based on usage patterns
• Provide customer support
• Detect and prevent fraud or abuse

Your data is stored securely using Supabase (PostgreSQL database with Row Level Security). All data is encrypted in transit via TLS/SSL. Blueprint files are stored in private storage buckets with signed URL access. We use company-scoped access controls so your data is only visible to your team.

We use the following third-party services:

• Supabase— database, authentication, and file storage
• Stripe— payment processing and merchant of record (handles payment and tax data — see “Payment processing & merchant of record” below)
• Vercel— application hosting and analytics
• PostHog— product analytics and session replay
• Sentry— error monitoring and performance tracking
• Anthropic— AI-assisted column matching when an Admin imports a price sheet (only the sheet’s header row and a short sample of rows are sent; Anthropic does not train models on them)

Paid subscriptions are sold to you by Stripe (Stripe Payments Company and its affiliates), acting as our merchant of recordunder Stripe Managed Payments. Stripe — not Cedrus — is the legal seller of your subscription, processes your payment, and is responsible for collecting and remitting any applicable U.S. sales tax, VAT, or GST.

When you check out, Stripe collects your name, email, billing address, and payment-method details. As our merchant of record, Stripe acts as an independent controller of this data and processes it under its own Privacy Policy and consumer terms.

Cedrus receives only the information needed to provision your account: your email, the subscription tier, the billing cycle, and the subscription status (active, trialing, past-due, canceled). Card numbers, CVCs, and full billing addresses never reach Cedrus systems.

We do not sell your personal information. We share data only with the third-party services listed above, as necessary to provide our service. Billing data flows directly to Stripe under the merchant-of-record arrangement described in the previous section — Cedrus does not handle or store payment-method details. Shareable work-order links only expose subcontractor-facing rates — Cedrus margins and internal pricing are never shared.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your project data
• Opt out of analytics tracking

We use essential cookies for authentication session management and analytics cookies for product improvement. You can disable non-essential cookies through your browser settings.

For privacy-related questions, contact us at support@cedrustakeoffs.com.