Privacy Policy

Account information: When a business user creates an account, we collect your name, email address and password (stored as a hashed authentication credential). This is used to create and secure your account.

Business profile information: Information you add to your Quoteza business settings, such as business name, contact details, address, company/VAT numbers and your logo, is stored so we can populate your quotes and invoices.

Customer information: Information you enter about your customers (name, business name, email, phone, address and notes) is stored in your Quoteza account so you can create quotes and invoices for them. You are responsible for ensuring you have a lawful basis to share your customers' details with Quoteza for this purpose.

Quotes and invoices: The quote and invoice content you create — including line items, amounts, dates, notes and status — is stored in your account so you can manage your documents.

Transaction and payment information: We record summary payment records (amounts, dates, status and related document identifiers) to track the payments you record against your invoices. Quoteza does not process card payments for your customers — your customers pay you directly (for example by bank transfer) and you record the payment in Quoteza. Full card details are never stored by or accessible to Quoteza. Subscription payments are handled entirely by Stripe (see below).

Subscription information: We store your subscription plan, trial status, trial start/end dates, billing period and subscription status so we can manage access to features and renewals.

Usage and technical information: When you use the Service we may collect technical information such as your account ID, browser and device type, and the page/route you were on. We use this primarily to operate the Service and, when you submit a feedback report, to help us investigate problems.

Quoteza uses only strictly necessary storage to function. This includes your authentication session and your theme (light/dark) preference, stored in your browser's local storage. We do not use advertising or marketing cookies.

At the time this policy was published, Quoteza does not use third-party analytics or tracking cookies that require consent. If that changes, we will implement an appropriate consent mechanism before enabling them. You can clear locally stored data through your browser settings at any time.

We process your information to: provide and operate the Service; create and store your business documents; process subscription payments and manage your plan; send you transactional and account-related communications; secure the Service and prevent misuse; and respond to support requests and feedback reports you submit. Where we rely on a legal basis under UK GDPR, we rely on the performance of our contract with you, our legitimate interests in operating the Service, and your consent where applicable.

Your data is stored through Quoteza's infrastructure provider, Base44, which hosts the application, its database and file storage. Your account data is associated with your authenticated user account.

Uploaded support screenshots are stored in private file storage and are only made available through a short-lived signed link issued to an administrator — they are not publicly enumerable.

We retain your account and business data for as long as your account is active. If you delete your account, we will delete or anonymise your business data within 30 days, except where information must be retained for longer to comply with applicable law (for example, UK tax and accounting records may need to be kept for a defined period). Subscription and billing records are retained for the period required by applicable UK tax and accounting law.

If you cancel your subscription but keep your Quoteza account open, we retain your business data so you can regain full access if you resubscribe. Feedback reports and any uploaded screenshots are deleted within 12 months after the report is resolved, unless they need to be retained for longer for security or legal purposes.

We take reasonable steps to protect your information, including restricting access to account data to the authenticated account holder and limiting administrative access to authorised Quoteza administrators. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We use trusted third-party providers to operate the Service. These providers process information only as needed to provide their services to us and under their own terms.

Stripe — handles payment card processing for Quoteza business-user subscriptions only. Stripe processes card data under its own PCI-DSS compliance. Quoteza never receives or stores full card numbers. Stripe is not used to process your customers' invoice payments — those are settled directly between you and your customer.

Base44 — provides the application hosting, database and infrastructure on which Quoteza runs.

Google / Gmail — where you connect Gmail or where we send you or your customers transactional emails, message delivery is handled through Google's services. Quoteza uses Gmail sending for receipts and support communications. Google processes email in line with its own policies.

Depending on the circumstances, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your personal data ("right to erasure");
• Receive a copy of your data in a structured, machine-readable format ("data portability");
• Object to or restrict certain processing of your data;
• Withdraw consent where we rely on it; and
• Complain to the relevant supervisory authority.

To exercise any of these rights, contact us at scottbilton0@gmail.com.

If you would like to access, correct or delete your personal data, or request a portable copy, please contact scottbilton0@gmail.com. We will respond in line with applicable data-protection timeframes. We may need to verify your identity before acting on a request.

If you have a concern about how we handle your personal data and you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Quoteza is a business service and is not directed at children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We will notify you of significant changes through the Service or by other means where appropriate.

If you have any questions about this Privacy Policy or your personal data, please contact:

Quoteza (a trading name of Grosvenor Scott Bilton)
Email: scottbilton0@gmail.com