Version 1.0 · in force from 2026-09-01
Effective date: 1 September 2026
What this list is
CostTakeoff is operated by CELCO GROUNDWORKS & CONSTRUCTION LIMITED (Irish company number 823396), trading as CostTakeoff. To run the Service we rely on the providers below. Each one processes some personal data on our behalf, under a written contract, and only for the purpose stated. This is the current list; we update it when a provider is added or replaced, and the effective date above shows when this version came into force.
Where a provider is established outside the European Economic Area, the transfer is made under a mechanism recognised by Chapter V of the GDPR, such as Standard Contractual Clauses or an adequacy decision.
"Established" is the country of the legal entity we contract with. Where the provider lets us choose a data region, the data is processed in the region as configured in our account with the provider; details on request.
The providers
| Provider | What it does for the Service | What personal data it processes | Established | Data region |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting. The single server that runs the application, the database and the file store | Everything held in the Service: account details, projects, drawings, documents, logs | Germany | Germany (Nuremberg data centre) |
| Clerk, Inc. | Sign-in and account identity: sign-up, sessions, password and one-time-code handling | Email address, name if given, password credentials, IP address and device at sign-in, session tokens | United States | Processing region as configured in our account with the provider; details on request |
| Cloudflare, Inc. | Sits in front of Clerk's sign-in service and protects it against abuse. It sets two cookies on our domain for that purpose (see our Cookie Policy) | IP address and connection details of a visitor reaching the sign-in service | United States | Cloudflare's global network; the request is handled at the nearest point of presence |
| Resend, Inc. | Sends the email we send you: retention warnings, team invitations, support replies. Delivery runs through Amazon Web Services' email infrastructure | Your email address, the subject and the body of the message | United States | Sending region as configured in our account with the provider; details on request |
| Backblaze, Inc. | Off-site backups of the database and of drawing pages. Backups are encrypted on our server before they are uploaded | The backup copy, encrypted | United States | Bucket region as configured in our account with the provider; details on request |
| Zoho Corporation B.V. | The mailbox that receives email sent to costtakeoff.com | The sender's address and whatever the message contains | Netherlands | European Union |
Payments
Payments are not processed by us or by any provider on this list. They are processed by Paddle.com Market Limited, our Merchant of Record, which is a separate controller for the payment transaction and operates its own privacy policy. We do not receive or store your card number.
Contact
Questions about this list: info@costtakeoff.com