Privacy
In plain English
From the founder
The short version: Cedrus collects only what’s needed to run the software, we don’t sell your data to anyone, and the blueprints and bids you upload stay yours. We use Supabase for auth and storage, Paddle for billing, and a small set of analytics tools to understand how the product gets used.
The long version is below. If any of it reads like it was written by a robot, email us and we’ll rewrite it.
This Privacy Policy describes the practices of Cedrus Takeoffs, LLC, a Colorado limited-liability company with a registered business address at 1500 N Grant St #10453, Denver, CO 80203, with respect to Cedrus Pro Takeoff (“the Service”). References to “Cedrus,” “we,” “us,” or “our” refer to Cedrus Takeoffs, LLC. For purposes of applicable privacy law, Cedrus Takeoffs, LLC is the controller of personal information processed in connection with the Service — except for billing data, where Paddle acts as an independent controller (see “Payment processing & merchant of record” below).
When you create an account, we collect your name, email address, and company information. When you use Cedrus Pro Takeoff, we collect project data including uploaded blueprints, measurements, room configurations, and pricing information.
We also collect usage data through analytics services (PostHog and Vercel Analytics) to improve the product, including page views, feature usage, and session recordings with input masking for sensitive fields.
We use your information to:
Your data is stored securely using Supabase (PostgreSQL database with Row Level Security). All data is encrypted in transit via TLS/SSL. Blueprint files are stored in private storage buckets with signed URL access. We use company-scoped access controls so your data is only visible to your team.
Blueprints live in private buckets. Only your company sees them.We use the following third-party services:
Paid subscriptions are sold to you by Paddle.com Market Limited (UK) or Paddle.com Inc. (US), depending on your location, acting as our merchant of record. Paddle — not Cedrus — is the legal seller of your subscription, processes your payment, and is responsible for collecting and remitting any applicable U.S. sales tax, VAT, or GST.
When you check out, Paddle collects your name, email, billing address, and payment-method details. Paddle stores that information and is the data controller for it under their own Buyer Privacy Notice. Paddle is not Cedrus’s subprocessor for payment data — they are an independent controller.
Cedrus receives only the information needed to provision your account: your email, the subscription tier, the billing cycle, and the subscription status (active, trialing, past-due, canceled). Card numbers, CVCs, and full billing addresses never reach Cedrus systems.
We do not sell your personal information. We share data only with the third-party services listed above, as necessary to provide our service. Billing data flows directly to Paddle under the merchant-of-record arrangement described in the previous section — Cedrus does not handle or store payment-method details. Shareable work-order links only expose subcontractor-facing rates — Cedrus margins and internal pricing are never shared.
We don't sell your data. We don't train models on it.You have the right to:
We use essential cookies for authentication session management and analytics cookies for product improvement. You can disable non-essential cookies through your browser settings.
For privacy-related questions, contact us at support@cedrustakeoffs.com.