Privacy Policy

Who we are

RHACOVA is a contractor pricing, estimating, and job-costing software service operated by Rafael Heiden, an individual based in Brazil, doing business as RHACOVA. In this policy, “RHACOVA,” “we,” and “us” refer to that provider.

Information you give us

• Account information: your name, email address, and sign-in credentials, or basic profile details from Google if you choose Google sign-in.
• Workspace information: your company or workspace name, team members you invite (their email addresses), and their roles.
• Business content: information you enter to run your business, such as cost settings, labor and overhead figures, estimates, proposals, jobs, costs, change orders, suppliers, quote requests, and your own customers’ names and contact details.
• Imported files: spreadsheets or files you upload to import data, and the data extracted from them.
• Support communications: messages you send through in-app help or the public contact form, including your name and email address.

Your business content belongs to you. We use it to provide the service to you. We do not sell it and do not use it for advertising.

Information created when you use RHACOVA

• Records needed to operate the service, such as when items were created or changed and security-relevant account events.
• Technical information such as IP address, browser type, and request logs, used for security, abuse prevention, and troubleshooting. For the public contact form we keep a one-way hashed form of the IP address to limit abuse.
• Limited product usage events (for example, which public page or calculator started a visit, or that a sign-up or checkout began). Only if you allow analytics, these events and public page views are also sent to Google Analytics, described below. They never include the figures you enter, your customers’ details, your financial results, amounts, names, or email addresses.

Free calculators

Our public calculators work without an account. Values you type are calculated in your browser and may be remembered on your device so you can pick up where you left off. They are not sent to us unless you choose to sign up and bring them into your workspace.

Shared proposals and quote requests

If you share a proposal or quote request by link, anyone with that link can view the shared content. Your customers or suppliers may submit information back through those pages, such as an acceptance, their name, or a quote. Share links only for content you intend the recipient to see.

Payments

Subscription payments are processed by Stripe. Card details are entered directly with Stripe; RHACOVA does not receive or store full card numbers. We keep the billing identifiers and subscription status we need to provide your plan, such as your plan, seat count, trial dates, and whether a subscription is active. Stripe processes payment information under its own privacy policy.

Email

We send service emails only, such as sign-in and account emails and replies to your support requests. Account emails, such as sign-up confirmation and password reset, are sent from notify.rhacova.com through Lovable Emails. Support replies are delivered through Resend. We do not send marketing email and do not track email opens or clicks.

Cookies and device storage

We do not use advertising cookies, remarketing, or advertising pixels. RHACOVA uses browser storage for:

• Sign-in: keeping you signed in securely.
• Preferences: remembering your selected workspace and calculator inputs on your device.
• First-visit context (optional, only with your permission): a random identifier and the page, referrer, and campaign tags of your first visit, kept on your device to understand which public pages lead people to RHACOVA.
• Google Analytics cookies (optional, only with your permission): the _ga cookies Google Analytics uses to count visits.

You can change your choice at any time with “Analytics choices” on our public pages, or clear this storage in your browser settings.

Google Analytics

If you allow analytics, our public pages load Google Analytics 4, provided by Google. Nothing is loaded or sent to Google before you allow it, and nothing is sent if you reject it.

• What is collected: public page addresses (without parameters other than campaign tags), page titles, a pseudonymous identifier stored in a cookie, device and browser information, approximate location that Google derives from your IP address, and structural events such as calculator use, sign-up started or completed, pricing visits, checkout started, and a first paid subscription with its plan and currency.
• What is never sent: names, email addresses, company or account identifiers, figures you enter, prices you charge, amounts paid, customer details, or financial results. Signed-in screens and private proposal, quote, and document links are not tracked as page views; events from signed-in screens carry a generic “app” location.
• Purpose: to understand, in aggregate, which pages and tools help contractors and how visitors become customers.
• Settings: Google signals and ad personalization are turned off, and we do not use Google Analytics for advertising or remarketing.
• Withdrawal: if you later reject analytics, Google Analytics stops for your browser and its _ga cookies are deleted. Data already sent stays in Google Analytics until its retention period ends.
• Retention: event data is kept in Google Analytics for the retention period set in our Google Analytics account, not longer than 14 months.
• International transfer: Google may process this data in the United States and other countries. We rely on the safeguards Google offers in its data processing terms; our review of the transfer mechanism for each jurisdiction is still in progress.

How we use information

• To provide, secure, and maintain the service and your account.
• To calculate and display the results you ask for.
• To manage trials, subscriptions, and team seats.
• To answer support requests.
• To understand, in aggregate, how people find and use RHACOVA so we can improve it.
• To comply with legal obligations and protect against misuse.

Service providers

We rely on a small number of providers to run RHACOVA:

• Lovable Cloud for application hosting, database, authentication, and file storage, and Lovable Emails for account emails such as sign-up confirmation and password reset.
• Stripe for subscription billing and payment processing.
• Resend for delivering support reply emails.
• Google, if you choose to sign in with Google, and Google Analytics, only if you allow analytics.

These providers process information on our behalf to deliver their services. We will update this list if our providers change.

Authorized RHACOVA staff

A limited number of authorized RHACOVA staff can view account, subscription, and support information needed to operate the service and help you. Access is restricted and used only for those purposes.

Where information is processed

Our providers may process and store information in countries other than yours. We will provide more detail about processing locations on request.

How long we keep information

We keep account and business content for as long as your account or workspace is active, and afterward only as long as needed to provide the service, meet legal and accounting obligations, resolve disputes, and maintain security. Some information, such as backups and billing records, may be kept for a period after deletion.

Security

We use safeguards designed to protect your information, including encrypted connections, access controls that separate each workspace’s data, and restricted staff access. No method of transmission or storage is completely secure.

Your choices and requests

• Access and export: workspace owners and admins can download a copy of workspace business data from Account & Billing.
• Correction: you can update most information directly in RHACOVA.
• Deletion and other requests: to ask for account or workspace deletion, or to make another privacy request, contact us through Contact us, in-app help, or at privacy@rhacova.com. We may need to verify your identity before acting on a request.

If you are a customer or supplier of a contractor who uses RHACOVA, please contact that contractor first; they control the information they enter about you.

Children

RHACOVA is a business tool and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as RHACOVA changes, for example if we add new features or providers. We will update the version and date above and, for material changes, notify account holders.