Privacy Policy

Effective November 1, 2026

This policy covers the Gable Takeoff website (gabletakeoff.com), the Gable Takeoff estimator app on the web and in app stores, and the client configurator that contractors embed on their own websites. Gable Takeoff is provided by Patrick Fonbuena, sole proprietor, doing business as Gable Takeoff, in Texas, USA; "we" and "us" mean him and Gable Takeoff. Questions go to gabletakeoff@gmail.com.

The short version: we collect what's needed to run the app, sync it between your devices, and handle your subscription. We don't sell your information, we don't show ads, and we don't use cookies or tracking tools. The app keeps your work in your browser's own storage (see Storage on your device). We count visits with Cloudflare Web Analytics, which doesn't use cookies or identify you.

What stays on your device

You can use the estimator without an account. Your estimates, saved rates, beam charts and business branding are then stored only in your browser or app on that device, and aren't sent to us unless you sign in. If you've activated a paid plan, the app sends your license key to our server to check and renew it.

Storage on your device

We don't set cookies, and the one outside service our pages load (Cloudflare's visit counter) doesn't set any either. Two exceptions you may see: when you open a Stripe checkout or billing page, Stripe may set its own cookies on stripe.com under Stripe's privacy policy; and Cloudflare, which protects our servers, may set a short-lived security cookie (such as __cf_bm or cf_clearance) if it needs to check that a visitor is not a bot. Neither is used for advertising. Our pages save a few things in your browser's local storage (or the app's, on a phone) so the features you use work. None of it is used for advertising or to follow you across other sites, and only our own pages read it. Because every item is needed for something you're doing, or remembers a choice you made, there's no cookie banner.

• Estimator app (gabletakeoff.com/app and the mobile apps): your estimates, saved rates, beam charts, branding and license key (mbe.app.v1); your sign-in session, if you sign in (mbe.account.v1); light or dark mode (gt.theme); layout choices such as a collapsed menu or a hidden profit line (gt.navCollapsed, gt.diagramCollapsed, gt.hideProfit, gt.renderTeaserHidden); which estimate to return to after sending a quote (gt.quoteReturn); app settings we publish, such as whether plan links show (gt.appConfig.v1); and, for one browser tab, whether you opened the app-store version (gt.storeBuild). On the website the app also keeps its own program files in your browser (a service worker and its cache) so it opens offline; there's no personal information in them.
• Dashboard (gabletakeoff.com/dashboard): the same sign-in session and light/dark choice as the app. If you sign in with a license key instead, that sign-in lasts for the one tab (gt_portal_token, in session storage, gone when the tab closes).
• Client configurator: the building you're designing, so it's still there when you come back (gt_cfg_design_…); the contractor's own business contact details, so the page can still show them if it can't reach our server (gt.cfg.contact.…); and whether the contact form is open (gt.cfgFormOpen).
• Client quote pages and this website: nothing.

You can clear all of it in your browser's settings (site data for gabletakeoff.com). Deleting your account with "Also erase everything saved on this device" ticked clears the app's.

The mobile apps

The iPhone and Android apps work the same as the web app and send the same data described here. They don't use your location, contacts or advertising ID, don't include the visit counter described below, and use the camera only if you choose to take a photo for your logo. Saving or sharing an export uses your phone's own share sheet and files. Plans aren't sold inside the apps: on iPhone, the plan buttons open our website in your browser; the Android app doesn't offer purchases. Apple and Google may collect data under their own policies when you download or use their stores.

What we collect

• Account. If you sign in, we store your email address, and we store your estimates, saved rates, beam charts, business branding (company name, phone, email, license number, logo) and license key so they can sync between your devices. Sign-in codes and session tokens are stored only in hashed form. Because a plan is for one person on up to 2 devices, we also note each sign-in, and each device it signed out, with the time and the rough region Cloudflare reports for the connection (for example "US-TX"), never the IP address; these notes are deleted after 35 days or when you delete your account.
• Subscriptions. Payments are handled by Stripe. We never see or store your card number. Stripe shares the name and email on the purchase with us, plus the subscription's status, so we can issue and renew your license key. We keep the email and name from the checkout with the subscription, so that when you sign in with that email your plan is added to your account automatically. Your license key includes the name entered at checkout.
• Export sign-up. The first time you export a material list, the app asks for an email address. It's emailed to us so we know who's using the app, and it stays in our email inbox (Gmail). It isn't saved in the app's database.
• AI renders. If you use the AI renders add-on, the app sends a picture of your building's 3D drawing and the render settings text to OpenAI, which generates the photo. The settings text describes the building (size, roof, colors, doors and windows) and the setting you picked, plus anything you type when you edit it, so don't type a client's name or contact details there. We don't add your name or email to the request, and we don't store the drawing or the finished photo on our servers; the photo comes straight back to your device. To meter the add-on, we log each render against your account: when it ran, the quality setting, whether it worked and what it cost. When you subscribe to the add-on, Stripe tells us the checkout email and the billing period so we can switch it on for the account signed in with that email.
• Client configurator. When a visitor to a contractor's website submits a building through the configurator, the details they enter (such as name, phone, email, location, answers to the contractor's questions, the building design and the price range shown) are emailed to that contractor. A copy, without the drawings, is also kept in that contractor's lead inbox so they can track it; only that contractor can see it, and they can delete it at any time. The contractor decides what to do with the enquiry; their own privacy policy covers that. The configurator also remembers the visitor's design in their own browser (local storage, not a cookie) so it's still there when they come back, and a "share this design" link carries the design in the link itself.
• Client quotes. When a contractor sends a quote, we store what's on it (their business details, the client's name and build site, the building design, prices and terms) so the client can open it from the link. If the client accepts or asks for changes, we store their typed name or message and email it to the contractor. Anyone with the link can open the quote, so contractors should share it only with their client.
• Configurator branding. Contractors who use the configurator give us their business name, contact details, colors and logo to display it, linked to their subscription.
• Messages. If you email us or send a problem report from the dashboard, we keep the message in our email inbox (Gmail) with your account email and, for reports, the page you were on, your browser/device type and screen size, and a screenshot if you attach one, so we can reply and fix it. Our server records only that a report was sent, and when, to limit how many can be sent in a day.
• Visit statistics. We use Cloudflare Web Analytics to count visits to the website, web app, dashboard, configurator and quote pages (not in the mobile apps): which pages are viewed, the referring site, and the country, browser and device type. It sets no cookies, doesn't store your IP address, and doesn't follow you across other sites. We only see totals.
• Error reports and speed. When something breaks on the website, app, configurator, quote page or dashboard, the page sends us the error message and where in our code it happened, so we can fix it. Some page loads also send three timings (how long the page took to draw, how much it jumped around, and how fast it responded to a tap), which we keep only as totals. Nothing about you or what you typed is included, and we remove anything in a message that looks like an email address or a code. The iOS and Android apps don't send these.
• Technical data. Like any website, the companies that host it receive your IP address and basic browser information when you connect. To stop abuse, our server keeps short-lived counts: against your IP address (or your IPv6 network) for up to an hour, and against an email address for up to a day for sign-in codes and attempts. Counts for quote replies and configurator enquiries are kept per contractor for up to an hour. Each count is deleted when its window ends. We don't use any of it to track you.

How we use it

To run the app, sync your work, sign you in, issue and renew license keys, make AI renders and keep each account within its add-on's monthly allowance, deliver configurator enquiries to contractors and keep them in the contractor's lead inbox, host the quotes contractors send their clients, send the emails you ask for (sign-in codes, license keys, account notices), answer support requests, and see in total how many people visit which pages. Nothing else.

Who we share it with

We don't sell or rent personal information, and we don't share it for advertising. We use these service providers, only to run Gable Takeoff:

• Cloudflare: runs our server and stores account, quote, lead, branding and render-usage data, and counts visits (Web Analytics).
• Stripe: processes payments and subscriptions, runs the checkout pages and the billing page where you update your card or cancel, and tells us when a subscription starts, renews or ends.
• Resend: sends our emails (sign-in codes, license keys, configurator enquiries, quote replies and account notices).
• OpenAI: generates AI renders from the drawing and settings text described above. OpenAI processes it under its API terms, which say API data isn't used to train its models by default. OpenAI may keep API inputs for up to 30 days to monitor abuse, then deletes them.
• GitHub: hosts the website and app files (GitHub Pages), and keeps our encrypted daily backups of the server's data.
• Google: our email inbox (Gmail), where emails to us, problem reports and export sign-ups arrive.

We may also disclose information if the law requires it.

How long we keep it

Account data, and the quotes an account has sent, are kept while the account exists. Leads in a contractor's lead inbox are kept until the contractor deletes them, deletes their account, or their subscription ends and they ask us to remove them; a client who wants their enquiry removed can ask the contractor or email us. A deleted estimate leaves a small marker (its ID and when it was deleted) for up to 90 days so it doesn't reappear from another device. The AI render usage log is kept while the account exists. Records of subscriptions and payments are kept by Stripe as required for tax and accounting; deleting your account doesn't remove them from Stripe.

Deleting your account

You can delete your account at any time in the app: Settings → Account → Delete account. This permanently erases your email address and everything synced to your account from our servers — estimates, rates, beam charts, branding, license key, the quotes you sent (and your clients' replies to them), your problem-report and AI render history, and our record of which subscription you bought — and signs out every device. If you hold the license for a client configurator, its page, its settings and branding, its page name and its lead inbox are erased too; the page then shows as unavailable and no longer accepts enquiries. Deleted data can stay in our encrypted backups for up to 30 days before it's gone for good. What isn't erased: your subscription and payment records at Stripe, emails already delivered (to you, to us, or enquiries already sent to a contractor), and the license key itself, which keeps working on any device it's pasted into until it expires. Deleting your account doesn't cancel a paid plan or the AI renders add-on. To cancel, open your dashboard's Plan & billing page and choose Manage billing, which opens Stripe's billing page, or email us and we'll cancel it for you. You can also ask us to delete your data by emailing gabletakeoff@gmail.com.

On the web: sign in at gabletakeoff.com/app → Settings → Account → Delete account. If you can't sign in or no longer have the app, email gabletakeoff@gmail.com from your account email with the subject "Delete my account" and we'll delete it within 30 days. This applies to the Gable Takeoff apps on the App Store and Google Play too.

Estimates stored only on your device stay there until you remove them, or until you choose "Also erase everything saved on this device" when deleting your account.

Your choices and rights

You can use the app without an account, sign out at any time, export a backup of your estimates, and ask us for a copy of your data or to correct or delete it. Depending on where you live, you may have further rights under local privacy law. Email us and we'll help.

Security

Data travels over encrypted connections. Sign-in codes and session tokens are stored only as hashes, so a copy of our database can't be used to sign in as you. No system is perfectly secure, but we limit what we collect so there's less to protect.

Children

Gable Takeoff is a business tool for contractors. It isn't directed at children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell signed-in users by email or in the app.