Privacy Policy
Effective date: August 4, 2026
SquareTally ("we", "us") is a web application that helps flooring and trade professionals measure floor plans and prepare estimates. This policy describes what data we collect, why, and how we handle it.
Data we collect
- Account data: your email address, used to sign you in (passwordless magic links) and to contact you about the service.
- Project data: documents you upload (e.g. architectural plan PDFs and contract templates), the pages you select, the measurements, room shapes, customer and project details, product catalog entries, prices, quotes, and contracts you create.
- QuickBooks connection data: if you connect your QuickBooks Online company, we store the OAuth tokens needed to act on your behalf and your QuickBooks company identifier (realm ID). We never see or store your QuickBooks password.
How we use your data
- To provide the service: render your plans, store your measurements, and create draft customers, items, and estimates in your own QuickBooks company, only when you explicitly request it.
- We do not sell or rent your data, or share it with third parties for marketing. We disclose data only to service providers as needed to operate features you request.
- We access your QuickBooks data only to the extent needed to create and read the records described above, under the
com.intuit.quickbooks.accountingscope you grant.
AI-assisted features
Some optional features use third-party AI service providers. When you upload or replace a
contract template, the file is sent to OpenAI once to identify reusable project fields and
preserve the contract clauses in a structured template. The request is submitted with API
response storage disabled (store: false). Creating a contract for each customer
then uses deterministic field replacement and does not send that customer contract to an AI
model.
Other requested features may send relevant job text or document excerpts to Anthropic to structure estimate information or locate catalog prices, and room or plan imagery to Google Gemini to create and verify optional visualizations. We send only the information needed to perform the feature you initiate.
Where your data lives
Stored application data is hosted on Cloudflare's global infrastructure (Workers, D1, R2). Data is encrypted in transit (TLS) and at rest. QuickBooks OAuth tokens are stored server-side and are never exposed to your browser or to other users. The AI-assisted features described above transmit the relevant inputs to the named provider for processing when you request them.
Data retention & deletion
Your data is retained while your account is active. You can disconnect QuickBooks at any time from the app (which deletes the stored tokens), and you can request full deletion of your account and all associated data by emailing us — we will comply within 30 days.
Cookies and analytics
Inside the application we use a single first-party session cookie to keep you signed in. There are no advertising cookies and no cross-site tracking anywhere on this site.
On our public pages — this one, the home page, support and terms — we use Google Analytics 4, loaded through Google Tag Manager, to see which pages people find useful. It is not loaded inside the application, so nothing you do with your plans, measurements or QuickBooks data is sent to Google.
Analytics storage is disabled by default for visitors in the European Economic Area, the United Kingdom and Switzerland, using Google Consent Mode. Those visitors are counted without any analytics cookie being set. We do not use Google Analytics for advertising, and advertising features, ad personalisation and ad data sharing are switched off.
Your rights
Depending on your jurisdiction (including GDPR and CCPA), you may have rights to access, correct, export, or delete your personal data. Contact us to exercise them.
Changes
We will update this page if our practices change, and note the new effective date above.
Contact
Questions or requests: support@squaretally.com