Trust · How your data is handled
A bid is competitive information — your labor rates, your markup, the jobs you’re chasing. This page is the plain-English record of how Cedrus guards that, written by the estimator who runs his own bids through it every week. Each claim below is something the system does today, not a roadmap.
Every table that holds takeoff data is scoped to your company and locked with Postgres row-level security. The isolation is checked by the database on every query — not left to application code to remember.
Plan sets, page images, and project files sit in private buckets with public URL access disabled, served through a gateway that verifies who is asking before anything leaves storage. A bid is competitive information; nothing of yours is one guessed URL away.
A sub’s link shows their scope and their rates — nothing else on the job. Tokens are stored hashed, links expire after 30 days, access is tracked so you know who actually looked, and revoking a link kills it immediately.
Checkout and billing run on Stripe as our merchant of record — card details go straight to Stripe and stay there. Refunds are real and written down: 30 days on your first charge, 14 on every charge after.
Estimates export as branded PDFs you own. Your price book — your rates, your assemblies — stays yours to edit, reuse, and take with you. If you cancel, your data stays accessible through the paid period and exportable for 30 days after it ends.
Account email — invitations, resets, receipts — comes because you acted. Marketing email is opt-in only: one list, joined only through an explicit checkbox, and leaving it is one click. Signing up for the product never joins you to it.
The Solo tier is $0 with the full takeoff tool — no card at sign-up and no time limit, so you can judge the product on a real plan set before a dollar moves. And because the bid leaves as a PDF and the price book exports, leaving is never held hostage to staying.
Postgres hosted by Supabase in the US, file storage on Cloudflare R2, application delivery on Vercel — boring, auditable infrastructure run by companies whose security teams are bigger than our whole company. All traffic is TLS.