Privacy Policy

We collect information that you provide directly, information generated through your use of the service, and limited technical data required to operate the platform.

Account information: When you create a Foremio account, we collect your name, email address, and password. If you sign up or log in using Google Authentication or Apple Authentication, we receive your name, email address, and profile identifier from those services. We do not receive or store your Google or Apple password.

Workspace and business data: This includes your company profile, team member information, client details, projects, estimates, invoices, expenses, material lists, calendar events, and calculator inputs. This data is owned by you and your workspace.

Uploaded files: You may upload blueprints, plans, images, documents, and other files to your projects and estimates. These files are stored securely and are accessible only to members of your workspace based on role permissions.

Payment information: We use Stripe to process subscription payments. Foremio does not store your full payment card numbers, CVV codes, or bank account details. Stripe collects and stores this information under their own privacy policy and security standards.

Technical data: We collect IP addresses, browser type, device information, and usage logs to maintain service security, diagnose issues, and improve performance. This data is retained for a limited time and is not used for advertising profiling.

We use the information we collect to provide, maintain, and improve Foremio; to process your subscription payments; to communicate with you about your account, updates, and support requests; to enforceme enforce our terms, prevent fraud and abuse; and to comply with legal obligations.

We do not sell your personal information to third parties. We do not use your project data, client lists, or estimates for marketing purposes or to train third-party artificial intelligence models without your explicit consent.

Foremio supports email and password sign-in, Google Authentication, and Apple Authentication. When you choose to sign in with Google or Apple, you are subject to those providers' privacy policies and terms. We only request the minimum scopes necessary to identify you and create your account (name, email, and profile identifier).

You may link or unlink social authentication methods from your account settings at any time. Unlinking a provider does not delete your Foremio account or workspace data.

Foremio uses cookies and browser storage that are necessary to keep you signed in, remember your preferences/construction unit preferences (such as metric or imperial), and maintain your session security. These are functional cookies and are essential to the operation of the service.

We do not use third-party advertising cookies or tracking pixels within the authenticated product. We may use anonymized, aggregated usage analytics to understand feature popularity and improve user experience, but this data cannot reasonably be used to identify you personally.

Your data is stored in managed cloud infrastructure provided by our platform partners. All data is encrypted in transit using TLS and at rest using industry-standard encryption. Access to production systems is restricted to authorized personnel and protected by multi-factor authentication.

Foremio implements row-level security policies that ensure your workspace data — projects, clients, estimates, invoices, and uploaded files — is accessible only to authenticated members of your own workspace. Team roles (owner, admin, member) provide additional access boundaries within your workspace.

While we take commercially reasonable measures to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any unauthorized access.

We retain your account and workspace data for as long as your subscription is active or as needed to provide you with the service. If you cancel your subscription, we retain your data for a grace period to allow you to reactivate or export your information.

You can delete individual records (clients, projects, estimates, invoices, and uploaded files) directly within the Foremio application at any time. Deleted records are removed from active databases promptly.

If you wish to delete your entire account and all associated workspace data, please contact us using the information below. We will process verifiable deletion requests within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention or financial record-keeping.

Depending on your jurisdiction, you may have the right to access, correct, export, restrict processing of, or delete your personal information. You can update most account information directly in your Foremio profile settings.

To exercise other rights, including data portability requests or objections to processing, contact us using the details below. We will respond to verified requests within the timeframe required by applicable law.

Foremio relies on the following subprocessors to deliver the service: Lovable (application hosting and platform infrastructure), Supabase (database, authentication, file storage, and serverless functions), Cloudflare (edge delivery and security), and Stripe (payment processing). Each subprocessor operates under its own privacy policy and security commitments.

When you use Google or Apple Authentication, or when you make a payment through Stripe, those interactions are governed by the respective provider's privacy policy and terms of service.

Foremio is operated from the United States. If you access the service from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our subprocessors maintain infrastructure. We rely on standard contractual clauses and other lawful transfer mechanisms where required.

Foremio is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. We will notify you of material changes by email or through a prominent notice in the application before the changes take effect. Your continued use of Foremio after any changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please email us at privacy@foremio.com.

For security-related inquiries, contact security@foremio.com.