Cookie Policy

Cookies are small text files that a website places on your device when you visit it. They serve a variety of purposes: some are essential to making the site work, others remember your preferences, and others help us understand how the site is performing so we can improve it.

This Cookie Policy describes the cookies and similar technologies Estaio, Inc. (“Estaio”, “we”, “us”) uses on our websites and in the Service, what each category does, and how you can manage your preferences. Capitalized terms not defined here have the meanings given in our Terms of Service and Privacy Policy.

We use cookies and similar technologies for a small, deliberate set of reasons:

• To make the Service work — for example, keeping you signed in after you log in, remembering your session, and protecting against cross-site request forgery;
• To remember your preferences — for example, your sidebar layout, default search filters, or chosen view mode;
• To understand performance and usage — to measure aggregate usage, performance, and reliability so we can improve the Service; and
• To keep the Service secure — to detect unusual activity, prevent abuse, and protect Accounts.

We do not use cookies for cross-site behavioral advertising, and we do not allow third-party advertising networks to set tracking cookies through the Service.

We group the technologies we use into four categories. The first category is essential; the rest can be controlled by you.

1. Strictly necessary

These technologies are required to deliver the Service and cannot be turned off through our consent controls. They include cookies that keep you signed in, balance traffic across our servers, and protect against common security threats.

2. Functional / preferences

These technologies remember choices you make so the Service feels consistent across visits — for example, your time-zone, collapsed sidebar state, or recently used search filters. Disabling them may make the Service less convenient but will not break it.

3. Performance / analytics

These technologies collect aggregate, often de-identified, information about how visitors use our websites and the Service. This helps us understand which features are useful, where users encounter friction, and where we should invest in improvements. Where required by law, we will ask for your consent before activating these technologies.

4. Marketing

We currently do not run third-party advertising or retargeting cookies. If we add a limited first-party marketing cookie in the future (for example, to measure which marketing page led to a sign-up), we will update this Policy and, where required, ask for your consent.

The table below lists the categories of cookies we currently set. Specific cookie names may change as we evolve the Service; this list describes them by function so you can recognize their purpose. Third-party cookie names from our service providers (such as our analytics or error-tracking tools) may also appear when those tools are enabled — refer to your browser's cookie inspector for the most up-to-date list.

We may also use local storage and IndexedDB on your device to cache parts of the user interface so the Service feels fast on your next visit. These technologies stay on your device until you clear them through your browser settings or by signing out.

Some features of the Service rely on third-party providers (for example, our payment processor, mapping provider, and error-monitoring service). When you use those features, the third party may set its own cookies subject to its own privacy and cookie policies. We do not control those cookies, but we choose providers that minimize tracking and require them by contract to use cookies only for the purposes we've engaged them to perform.

We do not allow third-party advertising or social-media tracking cookies on our Service.

A core feature of the Service allows an Agent to share private pages with their Clients. When a Client visits one of these share pages, the Service uses only strictly necessary cookies and a minimal amount of telemetry to (a) authenticate the tokenized link, (b) protect against abuse, and (c) deliver reactions back to the Agent in real time. No advertising, retargeting, or cross-site tracking cookies are set on Client share pages.

In Estaio

You can manage your non-essential cookie preferences in Estaio's in-product privacy controls (look for “Privacy & Cookies” under your account settings). Strictly necessary cookies cannot be disabled because they are required for the Service to function.

In your browser

Most browsers allow you to block, accept, or delete cookies through their settings. The location of cookie settings varies by browser; consult the help documentation for the browser you use. Below are commonly cited starting points:

• Google Chrome
• Mozilla Firefox
• Safari (macOS)
• Microsoft Edge

Note that if you disable strictly necessary cookies through your browser, the Service may not work correctly — including features such as signing in, persistent sessions, or saving your work.

Mobile devices

Your mobile operating system may allow you to limit ad tracking and reset your advertising identifier. Consult your device's privacy settings for details.

Where required by law (including in the European Economic Area, the United Kingdom, and certain other jurisdictions), we ask for your consent before setting non-essential cookies. You may withdraw your consent at any time through Estaio's in-product privacy controls or by clearing cookies in your browser.

We may ask you to re-confirm your consent periodically (for example, when we materially change the categories of cookies we use or after a significant period of time has elapsed).

There is no industry standard for how to respond to “Do Not Track” signals, so we currently do not respond to them. Where required by law, we honor Global Privacy Control (GPC) signals as a request to opt out of any “sale” or “sharing” of personal information (as those terms are defined under applicable state law).

We may update this Policy from time to time to reflect changes to the technologies we use or to applicable law. The “Last updated” date at the top reflects the most recent revision. For material changes, we will provide additional notice (for example, by re-prompting for consent where required). Your continued use of the Service after the effective date of an update constitutes acceptance of the updated Policy.

Questions about cookies or this Policy? Email privacy@estaio.com.