Privacy Policy
Effective date: April 4, 2026
1. Who We Are
QuickQuote ("we," "us," or "our") is a software-as-a-service platform that helps painting contractors create estimates, contracts, and manage jobs. Our website is www.quickquoted.com.
For questions about this policy, contact us at info@quickquoted.com.
2. Information We Collect
2a. Information You Provide Directly
- Account information: Your name, email address, and password when you register.
- Company information: Company name, address, phone number, and logo you add in Settings.
- Customer data: Names, email addresses, phone numbers, and job addresses of your customers that you enter into the app. You are the data controller for this information.
- Job photos: Images you upload for AI-assisted area estimation. These are compressed client-side and sent to our AI provider for analysis (see Section 4).
- Payment information: Billing details collected by Stripe (our payment processor). We do not store full credit card numbers.
- Notes and contract content: Any text you write in estimates, contracts, or job notes.
2b. Information Collected Automatically
- Authentication tokens: Managed by Supabase to keep you logged in.
- Usage data: Basic activity such as the number of AI scans used per month, stored in your profile to enforce plan limits.
- IP address and browser information: May be logged by our hosting provider (Vercel) for security and performance monitoring.
3. How We Use Your Information
- Provide, operate, and improve the QuickQuote service.
- Generate estimates and contracts based on job data you enter.
- Send estimate and contract emails to your customers on your behalf (via Resend).
- Send SMS messages on your behalf when you use the SMS feature (via Twilio).
- Process subscription payments (via Stripe).
- Analyze photos using AI to estimate paintable area (via Anthropic).
- Enforce usage limits (AI scans per month, quote counts).
- Respond to support requests and communicate service updates.
We do not sell your personal information or your customers' personal information to third parties. We do not use your data to train AI models without your consent.
4. Third-Party Services We Use
We share data with the following sub-processors to operate the service:
| Provider | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Database & authentication | Account data, job data, customer data | supabase.com/privacy |
| Stripe | Payment processing | Billing info, email, name | stripe.com/privacy |
| Anthropic | AI photo analysis | Room photos (no PII) | anthropic.com/privacy |
| Resend | Transactional email | Recipient email, estimate content | resend.com/legal/privacy-policy |
| Twilio | SMS notifications | Recipient phone number, message content | twilio.com/en-us/legal/privacy |
| Vercel | Web hosting & CDN | IP address, request logs | vercel.com/legal/privacy-policy |
5. Customer Data (Your Clients)
When you use QuickQuote to create estimates for your painting customers, you enter personal information about those individuals (name, email, phone, address). You act as the data controller for that information, and we act as the data processor.
You are responsible for having a lawful basis to collect and process your customers' information and for informing them about how their data is used. When a customer receives an estimate or contract link, their acceptance is recorded in our system on your behalf.
6. Cookies and Local Storage
We use the following:
- Supabase authentication cookies: Strictly necessary to keep you logged in. These are session cookies and expire when you log out or after a period of inactivity.
- Local storage: We may store UI preferences (such as language selection) in your browser's local storage. No advertising or tracking data is stored.
We do not use advertising cookies, third-party tracking pixels, or behavioral analytics tools. You can clear cookies at any time through your browser settings, which will log you out of the app.
7. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account closure upon request.
- Job and estimate data: Retained as long as your account is active. You can delete individual quotes at any time from the dashboard.
- Photos: Room photos submitted for AI analysis are processed in real time and not stored by us beyond your session. Your cloud storage in Supabase retains photos you explicitly save.
- Payment records: Retained for 7 years as required by financial regulations.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and associated data ("right to be forgotten").
- Portability: Request export of your data in a machine-readable format.
- Opt-out of marketing: Unsubscribe from any marketing emails using the link in each email.
- California residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of sale (we do not sell personal information).
- EU/UK residents (GDPR): You have the above rights plus the right to restrict processing, withdraw consent, and lodge a complaint with a supervisory authority.
To exercise any of these rights, email info@quickquoted.com. We will respond within 30 days.
9. Data Security
We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit.
- Row-level security (RLS) policies in Supabase ensuring users can only access their own data.
- Passwords are never stored in plaintext; authentication is managed by Supabase Auth.
- API keys and service credentials are stored as environment variables, never in source code.
No system is perfectly secure. In the event of a data breach that affects your personal data, we will notify affected users as required by applicable law.
10. Children's Privacy
QuickQuote is a business tool intended for adults (18+). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at info@quickquoted.com and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 30 days before the change takes effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.
12. Contact Us
QuickQuote
Email: info@quickquoted.com
Website: www.quickquoted.com