What we store, and who touches it.

Last updated 13 September 2026.

The short version

We store what the product needs to work: your account, your business details, your pricebook, your quotes, the customers you address them to, and a log of what happened to each quote. We do not sell any of it, we do not use your prices to set anyone else's, and we do not advertise.

What we collect from you

Your account. Your name, email address and a password you choose. The password is hashed by our authentication provider — we never see it.

Your business. Business name, contact details, address, logo, currency, tax rate and the terms you put on a quote. All of it appears on the quotes you send, which is why we hold it.

Your pricebook and quotes. The items you sell, the prices you charge, the job descriptions you write, and any photos you attach.

Your customers. Name, and whichever of phone, email and address you choose to record. You are giving us this about someone else, so the section below on your customers matters.

What happened to each quote. Sent, opened, accepted, declined, follow-up sent, with timestamps. This is what powers your acceptance rate. It records the quote and the moment — not a profile of the person reading it.

What we collect automatically

A session cookie so you stay signed in — strictly necessary, and there are no advertising or analytics cookies on the app. Our hosting keeps ordinary server logs (IP address, browser, page requested) for security and debugging, and we write error logs when something breaks so we can fix it. We do not track you across other websites.

On these public pages only — the ones you are reading now, before you sign in — we use Microsoft Clarity to see which parts of the page people read and where they get stuck, so we can write clearer ones. It sets cookies and records how the page was used, and Microsoft may use what it collects for its own purposes, including advertising. It stops at the door: it does not run on the app, and it does not run on a quote you send. If you would rather it did not run at all, blocking third-party cookies or using a tracker blocker is enough — nothing on this site needs it to work.

We take no payments while QuotePace is in beta, so we never ask for or handle card details.

Who else processes it

These are the only companies your data passes through:

• Supabase — hosts the database and handles sign-in.
• Vercel — serves the app and the quote links.
• Resend — delivers email: a quote to your customer, a follow-up, or a notification to you.
• OpenAI — receives the job description you type, and the pricebook items it needs to match against, only when you ask it to draft a quote. It is not used to train their models. If you never use AI drafting, nothing of yours ever reaches them.
• Microsoft — receives how the public pages above were used, through Clarity. It never receives your account, your pricebook, your quotes or your customers.

Each one only gets what it needs to do its job. Every one of them handling your account, your quotes or your customers is bound by its own terms not to do anything else with what it gets. Microsoft is the one exception: its terms let it use what it collects for its own purposes. That is the trade for a free tool, which is why we keep it on the public pages and nowhere near your work.

Your pricebook is yours

Your prices are isolated to your business at the database level, not merely hidden in the interface. They are never pooled with other businesses, never used to suggest prices to anyone else, and never sold as market data.

What your customer sees

A quote link opens one page showing one quote: your business details, the lines, the total, and an Accept button. It exposes nothing else — not your pricebook, not your other customers, not your other quotes. The link contains a long random token, so it cannot be guessed, but treat it like any link: whoever holds it can open the quote.

When your customer opens or accepts a quote we record that it happened, when, and the name they type when accepting. We do not place advertising or analytics trackers on that page.

Your customers' details

When you add a customer you are sharing someone else's information with us. You are responsible for having a reason to hold it and for the accuracy of what you enter; we process it only to produce and deliver the quotes you address to them, and we never market to your customers. If one of them asks you to remove their details, you can delete them in the app, or email us and we will.

How long we keep it

Your account data stays until you delete it — a quote from two years ago is still your record of what you charged. Delete a quote or a customer and it goes; ask us to delete your account and all of it goes, including the links your customers hold. Deleted data can survive for a short while in our database host's backups before those roll off on their own schedule, and server logs are kept briefly for security.

Security

Everything travels over HTTPS. Access is scoped to your business in two independent layers — every query is filtered by your business, and the database itself enforces row-level security so one business cannot read another's rows even if the application asked it to. Nobody on our side reads your data as routine; we look at your account only when you ask us to fix something, or if we must to keep the service safe.

No system is perfect. If something happens to your data that you ought to know about, we will tell you — quickly and in plain terms.

What you can ask for

A copy of what we hold, a correction, or deletion. Email hello@quotepace.app from the address on your account and we will sort it out — no form, no ticket number. If you are unhappy with how we handled it, tell us and we will try again properly.

Children

QuotePace is a tool for running a trade business. It is not for children and we do not knowingly collect anything from them.

Where your data lives

Our database and the services above run on infrastructure outside your country in all likelihood, and your data crosses borders to reach them. If you need to know the specific region your data sits in before you sign up, ask and we will tell you.

Changes

If we change what we collect or who processes it, we will update this page and the date at the top, and tell you in the app when the change matters.

Getting hold of us

hello@quotepace.app, or the contact page.