Privacy Policy

Negi Enterprise Inc (“we”, “us”) operates EstiLumina. For privacy requests email support@estilumina.com. We aim to respond within 30 days on a commercially reasonable efforts basis. This policy is written for customers in Canada (including British Columbia PIPA / PIPEDA-style expectations) and US customers (including CCPA-style “do not sell” posture). Fulfilling a request does not expand our liability beyond the Terms of Service.

• Account: email, name, company, role
• Workspace: jobs, estimates, budgets, bids, drawings, photos, messages
• Billing: Stripe customer/subscription metadata (no full card PAN stored by us)
• Ops: auth events, audit logs, optional error monitoring (e.g. Sentry)
• Integrations you connect: QuickBooks and DocuSign tokens (encrypted at rest in production)
• Legal acceptances: Terms/Privacy/AUP version, timestamp, and method

We process personal information to provide and secure the Service, bill subscriptions and package fees, support you, improve reliability, and comply with law. At signup you affirmatively consent to this processing as described here. Where PIPEDA/PIPA or similar rules apply, we rely on consent, contract necessity, and legitimate interests as appropriate. We do not sell personal information.

Depending on your location, you may request access, correction, deletion, or export of personal information, or restriction of certain processing. California residents may also have CCPA/CPRA-style rights (know, delete, correct, opt-out of sale/share — we do not sell or share for cross-context behavioral advertising). Email support@estilumina.com. We may need to verify your identity. We will use commercially reasonable efforts to respond; fulfillment does not create warranties or liability beyond the Terms. Enterprise customers may execute our DPA. Statutory rights that cannot be waived under applicable law remain available.

See the live list at Subprocessors. Use of subprocessors does not create any duty for us beyond this Policy and the Terms.

Data is retained while your organization is active and for a limited period afterward for backups/legal holds. We use TLS in transit, encryption at rest via our cloud providers, and organization-scoped row-level security where configured. See Trust Center. We do not promise SOC 2 attestation, uninterrupted security, or zero incidents. Security measures are commercially reasonable efforts only.

Essential cookies for authentication and session security. If browser error monitoring is enabled (`NEXT_PUBLIC_SENTRY_DSN`), a notice is shown. We do not sell personal information.

Data may be processed in the regions of our subprocessors (typically North America, and EU for some vendors depending on configuration). SCCs or equivalent safeguards are available via the DPA for Enterprise.

Use of the Service does not create privacy, security, breach-notification, or compliance obligations for Negi Enterprise Inc beyond what this Policy, the Terms of Service, and non-waivable applicable law expressly require. We have no duty to act, investigate, or remediate beyond commercially reasonable efforts we choose to undertake.

Negi Enterprise Inc carries no cyber liability, errors-and-omissions, or professional liability insurance for the Service. You are responsible for maintaining your own insurance for residual privacy, security, and data-loss risk. You will not look to us as insurer or additional insured.

To the maximum extent permitted by law, any privacy-, security-, or data-related claim arising out of or related to the Service is subject to the release, limitation of liability, sole-and-exclusive remedy, indemnity, time bar, and other protections in the Terms of Service. This Policy does not create any right to damages beyond those Terms. Rights that cannot be waived under applicable law are not limited by this section.

Negi Enterprise Inc · support@estilumina.com · Terms