Privacy Policy

Who we are

QuoteGlide is operated by [being finalized — contact support for operator details]. We play two different roles with data, and it matters which one applies:

• For your account, billing, security, and product-operations data, we are the controller: we decide how it is used, and this policy is the full story.
• For the customer and quote data a business workspace puts in, the business is the controller and we are its processor: we handle that data on the business's behalf, under our Data Processing Addendum.

If you are a customer of a business that uses QuoteGlide, contact that business first about the data on your quote — they control it. We help where we can.

What we collect

• Account data: your name, email address, and a password hash held by our authentication provider.
• Business profile: business name, trade, phone, website, mailing address, logo, and brand colour.
• Customer records the business adds: name, company, email, phone, address, and notes.
• Quote content and attachments, including uploaded quote documents.
• Messages between the business and its customer on a quote.
• Acceptance records: the typed name, the signature the recipient gave (either their typed name shown in a handwriting face, or an image of the signature they drew), recipient email, time, quote version, a hash of the accepted content, the confirmation wording shown, and the IP address and browser user-agent — all of these are disclosed on the acceptance form itself.
• Sender attestations: the lawful-contact basis a business confirms before first sending to a recipient, with workspace, quote, recipient email, user, and time.
• Reminder and opt-out preferences, and the suppression records that enforce them.
• Email delivery events: delivered, bounced, complained.
• Support tickets you send us.
• AI conversation content when you use AI features.
• Billing and subscription status from Polar — never card details.
• Technical logs and security events, and the analytics described below.

What we don't do

• We do not sell personal information.
• We do not use a business's customer contact details for our own marketing.
• We do not use invisible email-open tracking pixels. A quote's "viewed" status comes from the customer actually opening their quote page, and that this is shown to the business is disclosed.

Why we process it

• Operating the service you signed up for: hosting your workspace, showing quote activity, providing support (performance of our contract with you).
• Sending the emails a business asks us to send — quote deliveries, reminders, confirmations — on that business's instructions.
• Security, abuse prevention, and email deliverability: attestations, suppression, bounce and complaint handling (our legitimate interests in running a safe service).
• Billing, and meeting legal obligations such as keeping required financial records.
• Consent, where it applies — for example analytics where the law requires it.

AI processing

When you use AI features, the relevant business and customer or quote information you reference is sent to the AI provider to produce the response. Specifically:

• Anthropic powers quote drafting and the workspace assistant. Drafting receives your business notes, pasted customer messages, and service names — deliberately no customer name or email. The workspace assistant can receive the customer records you ask about: name, company, email, phone, quote history, and quote contents including prices.
• OpenAI is used for voice-note transcription only. Audio is sent for transcription, held in memory only, never stored by us, and neither the audio nor the transcript is logged. What OpenAI does with the data it receives is governed by its own policies, which our subprocessors page links. A short vocabulary hint goes with it — your trade and your saved service names — so those words are spelled correctly; no customer name, email or quote content is sent for transcription.
• AI features can be switched off per workspace in settings.

Service providers and subprocessors

A small number of providers process data to run QuoteGlide:

• Supabase — database, authentication, and file storage for all application data.
• Vercel — application hosting and privacy-friendly, cookieless site analytics.
• Resend — transactional email delivery, including bounce and complaint events.
• Polar — subscription billing as merchant of record; card details go to Polar, never to us.
• Anthropic — AI drafting and the workspace assistant.
• OpenAI — voice-note transcription.
• Google — analytics on the marketing site only.

The maintained list, with what each provider processes, is at https://quoteglide.com/subprocessors. Within our own team, authorized personnel access data only as needed to operate and support the service — for support, abuse review, and operations.

International transfers

Our providers operate internationally, including in the United States, so data may be processed outside the country where you live. Where transfer safeguards are required, we rely on the safeguards in our providers' terms, such as standard contractual clauses where applicable.

Retention and deletion

• We keep your data while your account is active, and you can delete quotes and customer records from your account at any time.
• Free accounts inactive for around 30 days get a warning; about 14 days later, the account and its data are deleted.
• Deleting your account, or asking us to, removes your workspace data.
• Suppression and opt-out records are kept even after deletion where needed to keep honouring the recipient's preference.
• Acceptance and attestation records may be retained longer as evidence of the transaction, and billing records as long as the law requires.
• Deleted data disappears from backups within our providers' backup retention windows.

Your rights

Depending on where you live, you may have rights to access, correct, delete, object to, or receive a portable copy of your personal data. Email us and we will respond. Where QuoteGlide acts as a processor — for a business's customer and quote data — we route the request to that business, which is the controller. You may also have the right to complain to the data-protection authority where you live — in the UK, for example, the Information Commissioner's Office. Which authority supervises us depends on where we are established; that is set out in the Terms of Service.

Analytics and cookies

We measure how the marketing site is used with Google Analytics, which sets cookies in your browser and sends Google the pages you view, how you arrived, and an approximate location derived from your IP address. We also use Vercel Analytics, which sets no cookies. Neither one receives your customers' contact details or the contents of a quote, and Google Analytics does not run on customer quote pages, invite pages, or sign-in pages.

To stop analytics data being sent at all, install Google's own opt-out browser add-on or block requests to googletagmanager.com. Blocking cookies alone does less than it sounds: it stops the site recognising you between visits, but the page you viewed is still reported. Nothing about accepting, declining, or replying to a quote depends on analytics being allowed.

Security

Data is encrypted in transit. Access is controlled per workspace with row-level security, quote-page and preference links use hashed tokens, and internal access is limited to what operating the service requires. No system is perfectly secure, and we don't promise otherwise.

If something goes wrong

If a breach affects personal data, we will notify the affected businesses, and the relevant authorities where required, without undue delay.

Children

QuoteGlide is not directed at children, and we do not knowingly collect children's data.

Changes to this policy

We post updates here with a new effective date and give notice of material changes. The version you accepted is recorded at signup.

Contact

Questions about privacy? Email support@quoteglide.com. If you are a customer of a business using QuoteGlide, contact that business about your quote data — or us at the same address for anything about QuoteGlide itself.