Privacy Policy

Personal information you disclose to us

We collect personal information that you give us: when you request a demonstration, register for a free trial, create or use an account, contact support, or otherwise get in touch. The Services have no public forums, user profiles or comment threads, and we run no competitions or giveaways.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make and the products and features you use. The personal information we collect may include the following:

Personal Information Provided by You

We collect names; phone numbers; email addresses; mailing addresses; job titles; usernames; passwords; contact preferences; contact or authentication data; billing addresses; and other similar information.

Payment Data

We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is stored by Paddle. You may find their privacy notice here: https://paddle.com/privacy/.

All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

We automatically collect certain information when you visit, use or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:

Log and Usage Data

Log and usage data is service-related, diagnostic, usage and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches and other actions you take such as which features you use), device event information (such as system activity, error reports – sometimes called ‘crash dumps’ – and hardware settings).

Device Data

We collect device data such as information about your computer, phone, tablet or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system and system configuration information.

Location Data

We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. Note however, if you choose to opt out, you may not be able to use certain aspects of the Services.

Information collected through our App

If you use our App, we also collect the following information:

Geo-Location Information

We may request access or permission to and track location-based information from your mobile device, either continuously or while you are using our App, to provide certain location-based services. If you wish to change our access or permissions, you may do so in your device’s settings.

Mobile Device Access

We may request access or permission to certain features from your mobile device, including your mobile device’s calendar, camera, microphone, sensors, storage, reminders, geo-location service including in background, and other features. If you wish to change our access or permissions, you may do so in your device’s settings.

Mobile Device Data

We automatically collect device information (such as your mobile device ID, model and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model, Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our App, we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID and information about the features of our App you accessed.

Push Notifications

We may request to send you push notifications regarding your account or certain features of the App. If you wish to opt out from receiving these types of communications, you may turn them off in your device’s settings.

This information is primarily needed to maintain the security and operation of our App, for troubleshooting and for our internal analytics and reporting purposes.

We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.

We use the information we collect or receive:

To create and run your account

To register your shop, create credentials for your Authorized Users, sign you in, and keep the account working. We do not offer sign-in through Google, Facebook or any other social account, and we receive no information about you from such services.

To post testimonials

We post testimonials on our Services that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and the content of the testimonial. If you wish to update or delete your testimonial, please contact us at support@estvis.com and be sure to include your name, testimonial location, and contact information.

Request feedback

We may use your information to request feedback and to contact you about your use of our Services.

To enable user-to-user communications

We may use your information in order to enable user-to-user communications with each user’s consent.

To manage user accounts

We may use your information for the purposes of managing our account and keeping it in working order.

To send administrative information to you

We may use your personal information to send you product, service and new feature information and/or information about changes to our terms, conditions, and policies.

To protect our Services

We may use your information as part of our efforts to keep our Services safe and secure (for example, for fraud monitoring and prevention).

To enforce our terms, conditions and policies

For business purposes, to comply with legal and regulatory requirements or in connection with our contract.

To respond to legal requests and prevent harm

If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

Fulfill and manage your orders

We may use your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.

To deliver and facilitate delivery of services to the user

We may use your information to provide you with the requested service.

To respond to user inquiries and offer support

We may use your information to respond to your inquiries and solve any potential issues you might have with the use of our Services.

To send you marketing and promotional communications

If you ask us for information about EstVis, sign up for our updates or otherwise get in touch, we may send you marketing email about the product. We do not pass your details to third-party marketing partners. You can opt out at any time – see What are your privacy rights? below.

For other business purposes

We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Services, products, marketing and your experience. We may use and store this information in aggregated and anonymized form so that it is not associated with individual end users and does not include personal information. We will not use identifiable personal information without your consent.

We may process or share your data that we hold based on the following legal basis:

Consent

We may process your data if you have given us specific consent to use your personal information for a specific purpose.

Legitimate Interests

We may process your data when it is reasonably necessary to achieve our legitimate business interests.

Performance of a Contract

Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.

Legal Obligations

We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Vital Interests

We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data or share your personal information in the following situations:

Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Vendors, Consultants and Other Third-Party Service Providers

We may share your data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing, data analysis, email delivery, hosting services, customer service and marketing efforts. We may allow selected third parties to use tracking technology on the Services, which will enable them to collect data on our behalf about how you interact with our Services over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, pages or features, and better understand online activity. Unless described in this notice, we do not share, sell, rent or trade any of your information with third parties for their promotional purposes.

Affiliates

We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us.

Within your shop

The Services are a shared workplace tool. Colleagues at your shop who hold an account can see your name, your role and the work recorded against you – the cases you handled, the photographs you took, the notes you wrote. Access is governed by the roles your shop’s administrator assigns. None of this is public, and nothing you enter is visible outside your shop.

This is the complete list of third parties that receive personal information from us. Except for Meta, as explained below, each is bound to use it only to provide its service to us. If we have processed your data based on your consent and you wish to withdraw it, contact us using the details in How can you contact us about this notice?.

Payment processing

Paddle acts as merchant of record for subscription payments and holds all payment card data. We never receive or store your card number. See Paddle’s privacy notice.

Network protection and anti-abuse

Cloudflare protects our sites and runs the Turnstile check that keeps automated scripts out of our sign-in and registration forms.

Hosting

Our websites and the infrastructure described in Where your information is held run on servers operated by GoDaddy in the United States. See the GoDaddy Privacy Notice.

Mobile application diagnostics

Google Crashlytics collects crash reports and diagnostic data from our iOS and Android applications so that we can find and fix faults. It receives device, operating-system and error information – not the contents of your cases, photographs or customer records. See the Google Privacy Policy.

Website analytics

Google Analytics, loaded through Google Tag Manager, measures how visitors find and use estvis.com: pages viewed, the campaign or site that referred them, approximate location (city level), device type, and steps such as opening the free-trial form. It receives no form contents. Google signals and advertising personalization are switched off, so this data is not used to show you Google ads. When you reach the site from one of our Google ads, Google Analytics and our Google Ads account also record that ad click and whether it led to a free-trial sign-up, so we can see which of our ads work. See the Google Privacy Policy.

Advertising measurement

The Meta Pixel tells Meta Platforms which pages of estvis.com you visited and whether you started a free trial or requested a demo, together with your IP address, browser details and Meta’s cookie identifiers. We use it to measure which of our ads work and to show our ads to people who visited our site. Meta also uses this data for its own purposes under the Meta Privacy Policy, which is why it counts as “sharing” under U.S. state privacy laws. When you start a free trial, our server also confirms that sign-up to Meta through the Meta Conversions API, together with your email address and phone number in hashed form – converted by a one-way function into a code that Meta can match against its own accounts but that cannot be read back – and the IP address and browser details you signed up from. We never send your name, or your email address or phone number in readable form. You can switch all of this off on Your Privacy Choices or with Global Privacy Control, and it does not run for visitors in the European Economic Area, the United Kingdom or Switzerland.

Live chat

Tawk.to runs the chat window on our websites. If you start a chat, it receives what you type and any name or email address you give, together with your IP address and browser details. See the Tawk.to privacy policy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

This section covers our websites at estvis.com and help.estvis.com, and the Workflow application at workflow.estvis.com. The table below is a complete list of what we store on your device, not a set of examples.

The anti-abuse check in the table is operated by Cloudflare and may set its own cookie while the check runs. That data is handled under Cloudflare’s privacy policy. We use it for security only, and we receive no advertising or profiling data from it.

The Meta Pixel, with the server-side confirmation of free-trial sign-ups described in Who will your information be shared with?, is the only advertising technology we use. We do no session recording, and the Workflow application and our mobile apps carry no analytics or advertising cookies.

You can remove or block cookies in your browser settings. Blocking the cookies listed above will not stop you reading our public pages, but it will stop you staying signed in to the Workflow application. See What are your privacy rights? below for your other choices.

EstVis is not a cloud-only product, and where data physically sits is part of how it works. We set it out here because it changes what we can and cannot do with your information.

On your shop’s Desktop Server

Cases, estimates, photographs, invoices, parts records, payroll data and customer records are stored on the Desktop Server on your shop’s premises, on hardware your shop owns. They stay there whether or not there is an internet connection, and they stay there if the subscription ends. We do not routinely hold a copy, and we cannot restore this data for you – backing it up is the shop’s responsibility.

Passing through our systems

Some information necessarily travels through infrastructure we operate: signing in and validating sessions, delivering case photographs from the Desktop Server to authorized staff working away from the shop network, real-time updates to the production board, and software updates. It is encrypted in transit.

Held by us

Account and company records, user credentials and roles, subscription and billing history, support correspondence, and diagnostic and error logs. Payment card data is held by Paddle, not by us.

Overseas

EstVis operates from the United States, so information we hold is processed there and in the countries where the third parties listed in Who will your information be shared with? operate. If you are in Australia, this means your personal information may be disclosed to overseas recipients within the meaning of Australian Privacy Principle 8. Our servers are hosted in the United States.

We keep the information we hold – account, user, subscription, billing and support records – for as long as your shop has an account with us, and afterwards only for as long as we need it: to meet tax, accounting and other legal retention requirements, to resolve disputes, and to prevent fraud. Records of the repairs themselves are a different matter. They live on your shop’s own Desktop Server, and how long they are kept is the shop’s decision, not ours – including the statutory periods that apply to invoices, payroll and repair documentation.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

The Services are business software, sold to businesses and used by their staff. They are not directed at children, we do not knowingly collect information from anyone under 18, and you must be at least 18 to hold an account. If we learn that we hold information about a child, we will delete it. Tell us at support@estvis.com if you believe that has happened.

Wherever you are, you can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email support@estvis.com and we will respond within 30 days. Specific rights depend on where you live: if you are in Australia see Do Australian residents have specific privacy rights?; if you are in California see Do California residents have specific privacy rights?. Residents of other U.S. states and territories, including Puerto Rico, may have comparable rights under state law, and we handle those requests the same way.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you are a resident in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

If you have questions or comments about your privacy rights, you may email us at support@estvis.com.

Account information

If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided below.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Service and/or comply with applicable legal requirements.

Cookies and similar technologies

Most browsers accept cookies by default, and you can set yours to reject or delete them. Doing so will not stop you reading our public pages, but it will stop you staying signed in to the Workflow application. To stop us sharing your activity on our website with Meta for advertising, use Your Privacy Choices or turn on Global Privacy Control in your browser. Do we use cookies and other tracking technologies? lists every cookie we set.

Opting out of email marketing

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list – however, we may still communicate with you, for example to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes. To otherwise opt out, contact us using the contact information provided below.

Some browsers send a Do-Not-Track (“DNT”) signal, and some send a Global Privacy Control (“GPC”) signal, which several U.S. states treat as a valid request to opt out of the sale or sharing of personal information. We honour Global Privacy Control as a request to opt out of sharing: when your browser sends it, the Meta Pixel does not run on our websites and a free-trial sign-up is not reported to Meta, the same as if you had opted out on Your Privacy Choices. We do not sell your personal information. There is no common standard for Do-Not-Track signals, so we do not respond to them separately.

If you are in Australia, this section applies to you in addition to the rest of this notice.

Access and correction

You may ask us for the personal information we hold about you and ask us to correct it if it is wrong. Email support@estvis.com. We will respond within a reasonable period, normally 30 days. If we refuse, we will tell you why in writing and how to complain.

Overseas disclosure

We are based in the United States, and personal information we hold is processed there and by the third parties listed in Who will your information be shared with?. See Where your information is held for the detail.

Data breaches

If a data breach involving your personal information is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires. Where the breach concerns records a repair shop holds about its own customers, we notify the shop and assist it in meeting its own obligations.

Anonymity

You can browse our websites and read our documentation without telling us who you are. We need identifying information only when you ask for a demonstration, start a trial, hold an account, or contact support.

How to complain

Complain to us first at support@estvis.com and we will investigate and respond. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, by telephone on 1300 363 992, or in writing to GPO Box 5288, Sydney NSW 2001.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with a Service, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups).

CCPA privacy notice

The California Code of Regulations defines a “resident” as (1) every individual who is in the State of California for other than a temporary or transitory purpose and (2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose. All other individuals are defined as “non-residents”. If this definition of “resident” applies to you, we must adhere to certain rights and obligations regarding your personal information.

What categories of personal information do we collect?

We have collected the following categories of personal information in the past twelve (12) months:

We may also collect other personal information outside of these categories in instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Services and to respond to your inquiries.

How do we use and share your personal information?

More information about our data collection and sharing practices can be found throughout this privacy notice. You may contact us by email at support@estvis.com, or by referring to the contact details at the bottom of this document. If you are using an authorized agent to exercise your right to opt out, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes the information on our behalf. The current list of our service providers can be found under Who will your information be shared with?.

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be “selling” of your personal data.

EstVis has disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months: Category B – personal information, as defined in the California Customer Records law, such as your name, contact information, education, employment, employment history and financial information. The categories of third parties to whom we disclosed personal information for a business or commercial purpose can be found under Who will your information be shared with?.

We have not sold personal information in the preceding twelve (12) months. Since October 2026 we share Category A (online identifiers, IP address, and your email address and phone number in hashed form) and Category F (activity on our website) with Meta Platforms for cross-context behavioral advertising, through the Meta Pixel and, for free-trial sign-ups, the Meta Conversions API. You can opt out of this sharing on Your Privacy Choices or with Global Privacy Control. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Your rights with respect to your personal data

Right to request deletion of the data

You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation or any processing that may be required to protect against illegal activities.

Right to be informed

Depending on the circumstances, you have a right to know whether we collect and use your personal information; the categories of personal information that we collect; the purposes for which the collected personal information is used; whether we sell your personal information to third parties; the categories of personal information that we sold or disclosed for a business purpose; the categories of third parties to whom the personal information was sold or disclosed for a business purpose; and the business or commercial purpose for collecting or selling personal information. In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to non-discrimination for the exercise of a consumer’s privacy rights

We will not discriminate against you if you exercise your privacy rights.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g. phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use personal information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

Other privacy rights

• You may object to the processing of your personal data.
• You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the data.
• You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
• You may opt out of the sharing of your personal information for cross-context behavioral advertising on Your Privacy Choices or with Global Privacy Control; either takes effect immediately in that browser. A request to opt out sent by email will be acted on as soon as feasibly possible, but no later than 15 days from the date of the request submission.

To exercise these rights, you can contact us by email at support@estvis.com, or by referring to the contact details at the bottom of this document. If you have a complaint about how we handle your data, we would like to hear from you.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may email us at support@estvis.com or write to us by post:

Depending on where you live, you may have the right to ask for access to the personal information we hold about you, to correct it, or to have it deleted. Account and profile details can be changed in the Workflow application under Settings. For anything else – including access and deletion requests – email support@estvis.com and we will respond within 30 days. If your request concerns records a repair shop holds about you as its customer, contact that shop: it controls those records, as explained at the top of this notice.