Privacy Notice

Account information: your name, email address and password credentials, handled by our authentication provider.

Workspace information: your organization name, currency, internal cost rate, billable rate and target margin.

Business records you enter: clients, projects, scope items, changes, proposals, payment records and audit history.

Technical information: standard server logs and error reports needed to operate and secure the service.

We use your information to provide the service, calculate the figures you ask for, deliver change proposals to the recipients you choose, secure accounts, provide support, and bill subscriptions.

We do not sell your data. We do not use your client records to train machine-learning models.

A client approval page shows only the fields needed for a decision: your organization name, the client and project name, the description of the change, the fee, any timeline adjustment and any trade.

Internal cost rates, billable rates, margins, other projects, other clients and your team's membership are never exposed on an approval page.

Records are stored in a managed cloud database with row-level access rules that restrict every record to the organization that owns it. Membership is verified on the server for each request; it cannot be changed from the browser.

We use a small number of processors to run MarginFence: a managed database and authentication provider, application hosting, an email delivery provider for transactional messages, and a payment processor for subscription billing. The support chat on our public pages is answered by an AI assistant through the Lovable AI gateway using a Google Gemini model; your messages are sent to that provider to produce a reply. Each processor handles data only to provide its service to us.

We keep your records for as long as your account is active. If you close your account, contact us and we will delete your organization's records, other than anything we are required to keep for legal or accounting purposes. Website statistics are deleted automatically: individual visits after 30 days, and daily totals after 12 months.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to certain processing. Contact us and we will respond within the time your local law requires.

Data is encrypted in transit. Approval links are high-entropy, expiring and revocable, and only a hash of each link is stored. No system is perfectly secure, so please tell us immediately if you suspect a problem with your account.

On our public pages we count visits only if you agree to it, and we honour Global Privacy Control and Do Not Track signals automatically. We record a short random visit code, the page address without any query text, the website you arrived from (its name only), a broad device and system label, your language and how long the page was in view. We do not store your IP address, we do not build a device fingerprint, and we do not track you across other websites. Signed-in areas, approval links and the demonstration workspace are never counted. You can withdraw your agreement at any time, which stops collection and clears the visit code from your browser.

The support chat answers questions about the product only. It has no access to your account, your clients or your records, and it cannot take actions for you. MarginFence does not keep a copy of the conversation, though the AI provider processes each message to generate its answer. You can always reach a person instead using our contact page. Separately, our team can open a strictly read-only support view of a workspace for at most 15 minutes; this requires the team member to re-enter their password, and every start, view, refusal and end is written to a permanent record.

Privacy questions and data requests: marginfence@gmail.com.