Privacy Policy

1. Information we collect

In short: we collect the information you give us when you sign up and use QuoteSlinger, the content you create, and limited technical information collected automatically.

• Account information — name, email address, password, phone number (optional), company name, and trade.
• Content you create — quotes, line items, templates, customer records, your company logo, and other content you add to the Service.
• Customer information you enter — names, addresses, phone numbers, email addresses, and job details of your customers. See section 4.
• Billing information — your plan, subscription status, and billing history. Card numbers are collected and stored by Stripe; QuoteSlinger does not see or store full card numbers.
• Log data — IP address, browser and device type, and timestamps of requests, collected automatically to operate and secure the Service.

We do not collect sensitive categories of personal information, and we do not buy personal information from third-party data brokers.

2. How we use information

In short: we use information to run the Service, not to advertise to you or sell your data.

We use personal information to: create and authenticate your account; provide the quoting, customer-management, and payment features; process subscription billing; send transactional email (such as quote delivery, team invites, and billing notices); provide support; keep the Service secure and prevent fraud and abuse; and comply with legal obligations. We do not sell your personal information, and we do not use it for third-party advertising.

3. How we share information

In short: we share information only with the service providers that help us run QuoteSlinger, and only as needed.

We share personal information with third-party service providers (“processors”) that perform services for us under contract and may not use your information for their own purposes:

• Supabase — authentication and managed Postgres storage.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery (quote delivery, team invites, billing notices).
• Fly.io — API hosting (United States regions).
• Vercel — frontend hosting and content delivery.
• Sentry — error monitoring. We scrub credentials and disable sending of personal information by default.
• Google Places (optional) — address autocomplete, used only when you enable it.
• Cloudflare — DNS and email routing for our domain.

We may also disclose information to comply with law, legal process, or a valid government request; to enforce our Terms of Service; to protect the rights, safety, and security of QuoteSlinger, our users, or others; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy.

4. Customer data you enter

In short: the customer records you create belong to your business; we process them on your behalf.

QuoteSlinger is a multi-tenant service. The customer information you enter is owned and controlled by your business — you are the controller of that data and QuoteSlinger acts as your processor. We process it only to provide the Service to you and in accordance with your use of it. Each company’s data is scoped to that company and is not accessible to other QuoteSlinger customers. Public quote links (/q/<token>) expose only the customer-facing fields of a quote; internal notes are never shown. You are responsible for handling your customers’ personal information in compliance with applicable privacy law, including responding to their privacy requests; we will assist you as reasonably needed.

5. Payment information

In short: Stripe handles payment data; we never see full card numbers.

Subscription payments and customer payment-link payments are processed by Stripe, Inc. Card details are entered directly with Stripe and are handled and stored by Stripe under its own privacy policy at stripe.com/privacy. For customer payments collected through payment links, funds settle to your own connected Stripe account; QuoteSlinger receives only limited, non-card transaction metadata (such as amount and status) for record-keeping.

6. Cookies and tracking

In short: we use only the cookies needed to keep you logged in.

QuoteSlinger uses strictly necessary cookies for authentication and security (through Supabase). We do not use third-party advertising or cross-site tracking cookies. Because we do not track you across sites, we do not respond differently to browser “Do Not Track” signals.

7. Data retention

In short: we keep your data while your account is active, then delete it.

We retain account and content data while your account is active. When you delete a quote or customer, it is removed from our primary database promptly and from backups within 30 days. Stripe-related event records are retained for up to 90 days for billing reconciliation. When you close your account, we delete or anonymize your data, except where we must retain limited records to comply with law, resolve disputes, or prevent fraud.

8. Data security

In short: we protect your data, but no system is perfectly secure.

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, tenant isolation, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. International users and data location

In short: QuoteSlinger is hosted in the United States.

Our servers and primary processors are located in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States.

10. Your privacy rights

In short: you can access, correct, export, or delete your data.

You can access and update most account information directly in the Service. You may also request a copy of your data, correction of inaccuracies, or deletion of your account by contacting privacy@quoteslinger.com. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) or other US state privacy laws, including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. Because we do not sell personal information or use it for targeted advertising, no opt-out of those activities is needed. We will verify your identity before acting on a request.

11. Children’s privacy

In short: QuoteSlinger is not for children.

The Service is intended for businesses and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact privacy@quoteslinger.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice, and the “Last updated” date above will reflect the latest version.

13. Contact

Questions about this policy or your data? Reach us at privacy@quoteslinger.com.