Privacy notice
Updated November 4, 2026. Sweepdraft is operated by Sidestream OÜ (registry 17374822), Ahtri tn 12, 15551 Tallinn, Estonia. Contact: studio@sidestream.be.
What we store and why
We store your email and account session to sign you in, bids you choose to save, published proposal versions and client responses. Pilot enquiries contain the contact details and requirements you provide. We use these to provide the requested service, respond to enquiries and protect it against abuse. We do not sell personal information, subscribe you to marketing lists automatically, or use your bids to train AI.
Private links and your clients
Proposal links grant access to anyone who has the link. They show the published client copy, not your internal cost inputs or notes. Links expire after 30 days and you can revoke them sooner. Only include information you are entitled to share. Client responses contain a supplied name and message; those identities are not independently verified.
Providers and security
Supabase stores application data in the project's EU region. Vercel serves the application and Resend delivers sign-in and business emails; these providers may process service data internationally under their applicable terms and safeguards. Access is restricted to the service's backend. We use encrypted transport, expiring tokens and account ownership checks. No security certification or zero-risk guarantee is claimed.
Retention and choices
You can delete individual bids in the application, which also deletes their shared copies and responses. Contact us from your account email for access, correction, export or account deletion. Active account data is retained while the service is in use; inactive pilot accounts are reviewed after 90 days. Enquiries without an engagement are reviewed for deletion after 90 days. Necessary financial, dispute and minimal no-contact records may be retained where required. Backup and provider log deletion may take longer under provider retention settings.
Cookies
The application uses an essential, HTTP-only session cookie lasting up to seven days. We do not use advertising trackers or analytics cookies. The no-account calculator does not send its values to the server.
Your rights
Depending on your location, you may have rights of access, correction, deletion, restriction, portability and objection, and the right to complain to your relevant data protection authority. Contact studio@sidestream.be to exercise a right. Do not upload sensitive personal information, passwords or payment-card details.