Privacy Policy

When you create an account on i-quote, we collect the following information:

Account Information: Your name, email address, business name, phone number, and physical address when you register for an account.

Business Data: Invoices, quotes, customer records, payment history, and other business documents you create and store on our platform.

Payment Information: When you connect your Stripe account via Stripe Connect, Stripe processes your payment information directly. We do not store your credit card numbers, bank account details, or other sensitive payment credentials on our servers.

Demo and contact requests: If you request a demo or walkthrough, we collect the name, email address, company and message you enter so we can reply.

Technical Data: Our hosting and database providers record standard server logs (IP address, browser type, time and requested page) to operate and secure the service.

Cookies & Local Storage: We use your browser's local storage to keep you signed in and to remember preferences such as your language. We use no advertising cookies.

Analytics: On our public pages (the website, blog, templates, free generators, sign-up and onboarding) we use Google Analytics 4 to count visits and a few sign-up steps (generator used, sign-up started, business created, first quote sent, Stripe connected). Pages inside your account, the customer portal and invoice or quote links sent to your customers are not tracked, and no names, email addresses, amounts or document details are sent. Advertising features and Google signals are off. In the EEA, the UK and Switzerland Google Analytics sets no analytics cookies. If your browser sends Do Not Track or Global Privacy Control, Google Analytics is not loaded at all.

We use the information we collect for the following purposes:

• Provide Our Services: To create and manage your account, process invoices and quotes, facilitate payments, and deliver the core functionality of i-quote.
• Communication: To send you transactional emails (invoice notifications, payment confirmations, account alerts), and with your consent, marketing communications about new features or promotions.
• Improve Our Platform: To analyze usage patterns, fix bugs, develop new features, and improve the overall user experience.
• Security: To detect and prevent fraud, unauthorized access, and other security threats.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Customer Support: To respond to your inquiries and provide technical assistance.

i-quote is a multi-tenant platform where each business operates in a completely isolated environment.

• Each tenant's data is separated using row-level security (RLS) at the database level.
• No tenant can access, view, or modify another tenant's data — including customers, invoices, quotes, and payment records.
• Team members within your organization can only access data for your specific tenant, governed by role-based access controls (Owner, Admin, Viewer).

We do not sell your personal information to third parties. We share your data only in the following circumstances:

• Stripe: Payment processing is handled by Stripe, Inc. When you connect Stripe Connect, your payment data is subject to Stripe's Privacy Policy (stripe.com/privacy).
• Resend.com: We use Resend for sending transactional emails (invoice notifications, payment receipts, etc.). Email addresses and message content are shared with Resend for delivery purposes only.
• Supabase: Our database and authentication provider. Your account and business data are stored in Supabase's managed Postgres database.
• Netlify: Hosts the website and the server functions that process payments and send email.
• Google: If you choose "Continue with Google", Google shares your name and email address with us to sign you in. Google Analytics receives the page visits and sign-up steps described in section 1, with your IP address shortened by Google (policies.google.com/privacy).
• Legal Requirements: We may disclose your information if required by law, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We retain your data for as long as your account is active or as needed to provide our services.

• Active Accounts: Your data is retained while your account exists, including on the Free plan after a paid subscription ends.
• Closed Accounts: To close your account, email privacy@i-quote.app from the account's email address. We delete your data within 30 days of the request.
• Legal Obligations: We may retain certain data longer if required by law (e.g., tax records, financial transaction logs).
• Backups: Encrypted backups may retain your data for up to 30 days after deletion for disaster recovery purposes.
• Demo Requests: Kept for up to 12 months after our last contact with you, unless you become a customer.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Data Portability: Request your data in a machine-readable format for transfer to another service.
• Opt-Out: Unsubscribe from marketing communications at any time using the link in our emails.
• Restrict Processing: Request that we limit how we process your data.

To exercise any of these rights, contact us at privacy@i-quote.app. We will respond within 30 days.

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS) and at rest by our database provider.
• Authentication: Passwords are hashed by our authentication provider and never stored in plain text. You can also sign in with Google.
• Row-Level Security: Database-level security ensures tenant data isolation.
• Access Controls: Role-based access (Owner, Admin, Viewer) limits what team members can see and do.
• PCI Compliance: Payment processing through Stripe is PCI-DSS Level 1 compliant.

i-quote is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a child under 18 has provided us with personal information, we will promptly delete it.

If you are accessing i-quote from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries. We ensure that adequate safeguards are in place for international data transfers in compliance with applicable data protection laws.

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Post the updated policy on this page with a new "Last Updated" date.
• Notify you via email if the changes materially affect how we process your data.
• Provide a 30-day notice period before changes take effect for existing users.

Your continued use of i-quote after changes become effective constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@i-quote.app
• Website: https://i-quote.app
• Data Protection Officer: privacy@i-quote.app