Estimate Nepal (“we”, “us”, or “our”) operates the website estimatenepal.com and the Estimate Nepal SaaS platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your data.
1. Data Controller
Estimate Nepal is the data controller for personal data collected through this platform. We are based in Kathmandu, Nepal. For data-related enquiries, contact us at [email protected].
2. Information We Collect
a) Account Information
When you register, we collect your name, email address, and a hashed version of your password (we never store your plain-text password). If you belong to an organisation on Estimate Nepal, we also store your organisation name and role.
b) Project and Work Data
When you use Estimate Nepal, we store the data you create: project details, PDF drawings you upload, takeoff measurements, BOQ items, rates, and exported documents. This data belongs to you — we process it solely to provide the service.
c) Usage Data
We automatically collect information about how you use the platform — pages visited, features used, actions taken, and timestamps. This helps us improve the product.
d) Technical Data
We collect IP addresses, browser type, operating system, and device type for security monitoring (e.g. detecting suspicious login attempts) and for diagnosing technical issues.
e) Cookies
- Essential cookies — required for authentication (keeping you logged in) and security. These cannot be disabled.
- Analytics cookies — optional. Google Analytics 4 (GA4) tracks aggregated usage patterns. Only set if you accept cookies via our consent banner.
- Marketing cookies — optional. Facebook Pixel may be present if configured. Only activated with your consent.
3. How We Use Your Information
- To create and manage your account and provide access to the platform.
- To store and process your project data (drawings, BOQs, measurements) on your behalf.
- To send transactional emails — account verification, password resets, billing receipts.
- To improve the platform using aggregated, anonymised usage analytics.
- To detect and prevent fraud, abuse, and unauthorised access.
- To respond to support requests and enquiries.
We do not sell your personal data to third parties. We do not use your project data to train AI models or share it with competitors.
4. Data Storage & Security
- All data is stored on secure cloud servers. Data in transit is encrypted using TLS (HTTPS).
- Passwords are hashed using bcrypt with a salt — even if our database were breached, your plain-text password cannot be recovered.
- Access to production systems is restricted to authorised personnel only.
- We perform regular database backups.
- Sessions are invalidated server-side on password change or logout from all devices.
For full details, see our Security page.
5. Third-Party Services
We use a small number of third-party services to operate the platform:
| Service | Purpose | Data Shared |
|---|---|---|
| Cloud VPS Provider | Hosting & infrastructure | All stored data (encrypted) |
| Resend | Transactional email delivery | Name, email address |
| Google Analytics 4 | Usage analytics (optional) | Anonymised usage data |
| Facebook Pixel | Marketing analytics (optional) | Page view events |
Optional services are only activated if you accept analytics cookies via the consent banner.
6. Data Retention
- Your account data and project data are retained for as long as your account is active.
- After you delete your account, we retain your data for up to 30 days to allow for recovery, then permanently delete it.
- Backups may retain data for up to 60 additional days before automatic deletion.
- Audit logs (for security purposes) may be retained for up to 12 months.
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — update inaccurate personal data in your account settings.
- Erasure — request deletion of your account and associated data.
- Data portability — export your project data (BOQ, measurements) using our Excel/PDF export tools before closing your account.
- Withdraw consent — opt out of analytics cookies at any time by clicking “Essential Only” in the cookie banner or clearing your browser cookies.
- Object — object to how we process your data by contacting us.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
8. Children's Privacy
Estimate Nepal is intended for construction and engineering professionals and is not directed at anyone under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice in the platform. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.
10. Contact Us
For any privacy-related questions, data requests, or concerns, please contact us: