Privacy Policy
Effective Date: June 27, 2026 | Version 1.1
At QuoteNest, we respect your privacy and are committed to protecting the personal data of both our users (service operators) and their respective customers (clients). This Privacy Policy explains how we collect, process, share, and protect information when you use our website, dashboard, and services.
1. Information We Collect
We collect information that you directly provide to us, as well as metadata gathered automatically during service operation.
Categories of Data We Process:
- Account Credentials: Owner name, business name, password hashes, and email address used for authorization and security via Supabase Auth.
- Customer / Client Records: Client names, phone numbers, and job addresses entered by you to generate estimates, dispatch invoices, or schedule reminders.
- WhatsApp Messaging Log: Metadata (timestamps, delivery statuses) regarding WhatsApp messages sent via the Meta Cloud API. We do not store the specific message payloads permanently once delivered.
- Transaction and Subscription Information: Subscription status, trial end-dates, and billing logs. Payments are processed by Lemon Squeezy, our Merchant of Record. We do not collect or store your payment card numbers.
2. Purpose of Processing & Legal Basis
We process data to deliver the core service features under standard contract performance:
- Account Delivery: To register accounts, authenticate access, and maintain session persistence.
- AI Estimation: To run calculations and generate professional PDF/text quotes for your clients based on job inputs (sqft, rooms, service type).
- Automated Reminders: To deliver scheduled rebooking reminders via WhatsApp (Meta API integration) as requested by you.
- Billing & Fraud Prevention: To verify subscription status and block spam registrations (e.g. temporary/disposable emails).
3. Data Sharing and Third-Party Subprocessors
We do not sell, rent, or trade your data. To perform our services, we share data with the following trusted subprocessors, all of which comply with standard security and privacy regulations:
| Partner / Subprocessor | Role / Service | Data Handled |
|---|---|---|
| Supabase Inc. | Cloud Database & Authentication | User credentials, client records, quote details |
| Lemon Squeezy LLC | Merchant of Record & Payments | Billing records, subscription details, plan states |
| Meta Platforms Inc. | WhatsApp Cloud API Gateway | Client phone numbers, business name parameters |
4. Security, Encryption & Data Residency
We apply bank-grade security protocols to prevent unauthorized access, alteration, or disclosure:
- In-Transit Security: All connections are encrypted via SSL/TLS (HTTPS) using modern cryptographic standards.
- At-Rest Encryption: Database records are encrypted at rest using Advanced Encryption Standard (AES-256) on Supabase infrastructure.
- Security Auditing: Session security and access controls are refreshed using modern server-side JSON Web Token (JWT) verification.
5. Cookies & Session Management
QuoteNest uses essential session cookies to keep you securely signed in to your dashboard. We do not use third-party tracking, advertising, or marketing cookies. You can disable cookies in your browser settings, but doing so will prevent you from accessing the dashboard.
6. Your Rights (GDPR & CCPA Compliance)
Regardless of your residency, QuoteNest provides all users with control over their data. You have the right to:
- Access the personal information we hold about you.
- Rectify or correct any inaccurate client or profile information.
- Request the permanent deletion of your account and all associated client data (right to be forgotten) from the Settings menu.
- Cancel subscriptions instantly to prevent future billing.
7. Children's Privacy
Our services are intended strictly for business operators and professionals. We do not knowingly collect or solicit personal information from anyone under the age of 13.
8. Updates to this Policy
We may update this Privacy Policy from time to time to reflect changes in our legal obligations or services. Any updates will be posted on this page with an updated "Effective Date" at the top. We recommend checking back regularly to stay informed.