Privacy Policy

This policy explains what information Parful Technologies LLC ("we", "us"), which owns and operates Kredna, collects when you use the Kredna desktop app, your account dashboard and this website (together, the "service"), how we use it, who we share it with, and the choices you have. In short: your drawings and estimates stay on your own computers, card details are handled by Stripe and never stored by us, we collect only what we need to run your account and the features you choose to use, and we do not sell personal information.

1. What stays on your computers

Kredna is a desktop application. Your drawings, takeoffs, detailed pricing, proposals and other estimate files are stored on your computers and in the project folders you choose. We do not upload them to our servers. If you keep project folders in a file-sharing service such as Dropbox, OneDrive or Google Drive, that service's own terms and privacy policy apply to those files.

The exceptions are the shared company data described in section 2, the content of AI requests you choose to run, and crash reports you choose to send.

2. Information we collect

Account information

When you create an account or are invited by your company, we collect your name, email address, company name, your role, whether you hold a seat, and who invited you. At sign-up we also ask for your company's phone number and the kind of work it mostly bids. Sign-in is handled by Google Firebase Authentication, which processes your email address and password on our behalf. We never see or store your password.

Billing information

Payments are processed by Stripe. Stripe collects your card or other payment details directly, and we never see or store full card numbers or security codes. We receive and keep billing records such as your Stripe customer and subscription references, plan, seat count, renewal dates, invoices, payment status, billing contact and address, any tax identifiers you provide, and the reason you give if you cancel.

Shared company data

So every computer on your team and your dashboard stay in step, the app stores some company-wide data on our servers: company settings (such as numbering, folder templates, units, currency and section libraries), your company profile (name, address, phone, email, website, license line, logo and proposal colors), the takeoff library, price book, markup, labor rates and stock lengths, proposal templates and clauses, your customer and vendor directory, and bid summaries. A bid summary holds the bid's number, name, customer, estimator, status, key dates and amounts (such as quoted and sell price, and the winner and winning amount if you record them). It does not include drawings, takeoffs or detailed costs.

Your customer and vendor directory may include the names, job titles, email addresses and phone numbers of people at other companies. Your company decides what goes in it and is responsible for having the right to store it. We process it only to provide the service to you.

License and device information

To license the app, each computer you sign in on is registered to your account with a device identifier, a machine fingerprint the license is bound to, the computer's name, the app version, and when it was registered and last checked in. This lets your administrator see and remove computers, and lets us enforce seat and device limits.

AI usage

When someone in your company runs an AI feature, we record when it ran, which user ran it, and the credits it used, so we can charge your company's credit balance and show your usage.

Content of AI requests

AI features are optional. When you choose to run one, the app sends only what that request needs to our servers, which pass it to our AI model provider to produce the result. Proposal drafting sends the estimate's text. A drawing scan sends the image of the page you chose, with its text. We do not store the content of AI requests or results on our servers. Our AI provider processes it to return the result and may keep it for a limited period for safety and abuse monitoring, as its terms allow. It is not used to train AI models.

Crash reports

If the app crashes, a report is saved on your computer. It is sent to us only if you agree when asked, or if you have chosen to always send reports. Reports contain the app version, operating system, the error and the end of the app's diagnostic log, with file paths and email addresses removed.

Activity records

We keep a record of important account actions, such as sign-ins and sign-outs in the app, invitations, changes to seats, roles, computers and billing, cancellations, and edits made in the dashboard, with who made them and when, so administrators can see what changed and we can investigate problems.

Website, forms and emails

When you request a demo, contact sales, start a trial, look at pricing or download the app, we collect what you enter, such as your name, work email, company, phone number, team size and message, and how far you got through sign-up. We may send a small number of follow-up emails about a sign-up or request you started; each includes an unsubscribe link. We also note where you first came from: the referring site, the page you landed on and any campaign tags in the link.

Our hosting provider keeps standard server logs, such as IP addresses, browser type and request times, for security and troubleshooting.

3. Cookies, local storage and analytics

• Local storage. The website stores a small amount of information in your browser: where you first came from, whether you have signed in on this browser, and the email you entered, so forms don't ask twice.
• Sign-in. Firebase Authentication stores a sign-in token in your browser to keep you signed in to the dashboard.
• Analytics. We use Google Analytics, through Google Firebase, to count page views and measure our sign-up funnel (for example, that a sign-up started or a trial began). It uses cookies and similar identifiers. You can block cookies in your browser settings or use Google's opt-out browser add-on.
• Payments. Stripe sets its own cookies on payment forms to prevent fraud.

We do not use advertising cookies, and we do not let others track you across sites through our website. Our website does not currently respond to "Do Not Track" signals.

4. How we use information

• To provide, license, sync and update the app and your dashboard.
• To bill your company for its license, seats and AI credits.
• To provide AI features when you run them.
• To respond to support requests and fix problems, including from crash reports you send.
• To send service emails, such as invitations, password resets, receipts, low-credit alerts and important notices about your account.
• To follow up on demo, trial and sales requests and send product updates, which you can unsubscribe from at any time.
• To understand how the website and service are used, and improve them.
• To protect the service, prevent abuse and fraud, enforce our terms, and meet legal obligations.

We do not sell or rent personal information, we do not "share" it for cross-context behavioral advertising, and we do not use your estimates or company data for advertising.

5. Who we share information with

We share information only with service providers that process it on our behalf to run Kredna, under contracts or terms that limit how they may use it:

• Google (Firebase and Google Cloud), for sign-in, our database (account, company and license data) and website analytics.
• Stripe, for payments, invoices, tax calculation and fraud prevention.
• Our AI model provider, for the content of AI requests you run.
• Vercel, which hosts this website, the dashboard and our servers.
• Our email delivery provider, to send account and service emails.
• GitHub, which hosts app downloads and updates; it sees the IP address of computers that download them.

We may also disclose information if required by law or legal process, to protect our rights, our users or the safety of others, or as part of a merger, acquisition, financing or sale of assets, in which case this policy will continue to apply to the information transferred.

6. Your company's administrator

If you use Kredna through your employer, your company controls its account. Your company's administrators can see your name, email, role, the computers you have signed in on, your AI usage and the changes you make to shared company data, and can change your role or remove your access. For requests about information your company put into the service, such as its directory, we may refer you to your company.

7. How long we keep information

• Account, license and shared company data: while your company's account is active.
• Billing records and invoices: as long as tax and accounting law requires, usually seven years.
• Crash reports and server logs: only as long as they are useful for fixing problems, usually no more than a year.
• Sales and demo requests: until you ask us to delete them or they are no longer useful, usually no more than three years.

When a company's account is closed, we delete or anonymize its remaining personal information and shared company data within a reasonable period, unless we need to keep it to meet legal obligations, resolve disputes or enforce our agreements. Estimates on your computers are yours and are unaffected by closing your account.

8. Security

We use encryption in transit, signed licenses, hashed access tokens and access controls to protect the information we hold, and our providers encrypt it at rest. No system is perfectly secure, but keeping your drawings and estimates on your own computers means the most sensitive data never reaches us. See our security page for details. If we learn of a breach that affects your personal information, we will notify you as the law requires.

9. Your choices and rights

• You can update your name and email from your account, and your administrator can change your role or remove you.
• You can choose never to send crash reports, and you can choose not to use AI features.
• You can unsubscribe from marketing and follow-up emails using the link in any of them. Service emails about your account will continue.
• Depending on where you live, including California and other US states, the UK and the European Economic Area, you may have the right to know what personal information we hold about you, to get a copy of it, to correct or delete it, to object to or restrict some uses of it, and to not be discriminated against for exercising these rights. To make a request, email support@kredna.com. We will verify your request and respond within the time the law requires. You may authorize an agent to make a request for you. If you are in the UK or EEA, you may also complain to your local data protection authority.

Where the GDPR or UK GDPR applies, we process personal information to perform our contract with your company, for our legitimate interests in running, securing and improving the service and marketing it to businesses, to meet legal obligations, and, where required, with your consent.

10. Children

Kredna is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email support@kredna.com and we will delete it.

11. International transfers

We are based in the United States, and we and our providers process information in the United States and other countries where they operate. If you use Kredna from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those where you live. Where the law requires, we rely on appropriate safeguards for these transfers, such as standard contractual clauses offered by our providers.

12. Third-party links and services

The service links to and works with services run by others, such as Stripe's payment pages and file-sharing services. Their own privacy policies apply to what they collect.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify account administrators by email or in the dashboard before they take effect. The date at the top shows when it was last updated.

14. Contact us

Kredna is a product of Parful Technologies LLC, which is responsible for the information described in this policy. Questions about this policy or your information: email support@kredna.com. See also our terms of service and refund and cancellation policy.