Privacy Policy

Last updated: March 13, 2026

At i-quote ("we", "us", or "our"), we are committed to protecting your privacy and ensuring the security of your personal and business data. This Privacy Policy explains how we collect, use, store, and share information when you use our invoicing and quote management platform at i-quote.app and its subdomains.

1. Information We Collect

When you create an account on i-quote, we collect the following information:

**Account Information:** Your name, email address, business name, phone number, and physical address when you register for an account.

**Business Data:** Invoices, quotes, customer records, payment history, and other business documents you create and store on our platform.

**Payment Information:** When you connect your Stripe account via Stripe Connect, Stripe processes your payment information directly. We do not store your credit card numbers, bank account details, or other sensitive payment credentials on our servers.

**Usage Data:** We collect information about how you interact with our platform, including pages visited, features used, device information, browser type, IP address, and referring URLs.

**Cookies & Analytics:** We use essential cookies to maintain your session and optional analytics cookies to understand how our platform is used. You can manage cookie preferences in your browser settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

•Provide Our Services:: To create and manage your account, process invoices and quotes, facilitate payments, and deliver the core functionality of i-quote.

•Communication:: To send you transactional emails (invoice notifications, payment confirmations, account alerts), and with your consent, marketing communications about new features or promotions.

•Improve Our Platform:: To analyze usage patterns, fix bugs, develop new features, and improve the overall user experience.

•Security:: To detect and prevent fraud, unauthorized access, and other security threats.

•Legal Compliance:: To comply with applicable laws, regulations, and legal processes.

•Customer Support:: To respond to your inquiries and provide technical assistance.

3. Multi-Tenant Data Isolation

i-quote is a multi-tenant platform where each business operates in a completely isolated environment.

- Each tenant's data is separated using row-level security (RLS) at the database level.

- No tenant can access, view, or modify another tenant's data — including customers, invoices, quotes, and payment records.

- Your branded subdomain ({your-business}.i-quote.app) is unique to your account and cannot be accessed by other tenants.

- Team members within your organization can only access data for your specific tenant, governed by role-based access controls (Owner, Admin, Viewer).

4. Data Sharing & Third Parties

We do not sell your personal information to third parties. We share your data only in the following circumstances:

•Stripe:: Payment processing is handled by Stripe, Inc. When you connect Stripe Connect, your payment data is subject to [Stripe's Privacy Policy](https://stripe.com/privacy).

•Resend.com:: We use Resend for sending transactional emails (invoice notifications, payment receipts, etc.). Email addresses and message content are shared with Resend for delivery purposes only.

•Hosting Providers:: Our platform is hosted on secure cloud infrastructure. Your data is stored on servers that comply with industry-standard security practices.

•Legal Requirements:: We may disclose your information if required by law, legal process, or governmental request.

•Business Transfers:: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide our services.

•Active Accounts:: Your data is retained for the duration of your subscription.

•Canceled Accounts:: After account cancellation, we retain your data for 90 days to allow for reactivation. After this period, your data is permanently deleted.

•Legal Obligations:: We may retain certain data longer if required by law (e.g., tax records, financial transaction logs).

•Backups:: Encrypted backups may retain your data for up to 30 days after deletion for disaster recovery purposes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

•Access:: Request a copy of the personal data we hold about you.

•Correction:: Request correction of inaccurate or incomplete data.

•Deletion:: Request deletion of your personal data (subject to legal retention requirements).

•Data Portability:: Request your data in a machine-readable format for transfer to another service.

•Opt-Out:: Unsubscribe from marketing communications at any time using the link in our emails.

•Restrict Processing:: Request that we limit how we process your data.

To exercise any of these rights, contact us at **privacy@i-quote.app**. We will respond within 30 days.

7. Security Measures

We implement industry-standard security measures to protect your data:

•Encryption:: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

•Authentication:: Secure authentication with bcrypt password hashing and optional OAuth via Google and GitHub.

•Row-Level Security:: Database-level security ensures tenant data isolation.

•Access Controls:: Role-based access (Owner, Admin, Viewer) limits what team members can see and do.

•Regular Audits:: We conduct regular security reviews and vulnerability assessments.

•PCI Compliance:: Payment processing through Stripe is PCI-DSS Level 1 compliant.

8. Children's Privacy

i-quote is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a child under 18 has provided us with personal information, we will promptly delete it.

9. International Data Transfers

If you are accessing i-quote from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries. We ensure that adequate safeguards are in place for international data transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

- Post the updated policy on this page with a new "Last Updated" date.

- Notify you via email if the changes materially affect how we process your data.

- Provide a 30-day notice period before changes take effect for existing users.

Your continued use of i-quote after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

•Email:: privacy@i-quote.app

•Website:: https://i-quote.app

•Data Protection Officer:: privacy@i-quote.app