Privacy policy

What we collect

From businesses: business name, owner email, phone number, address and logo, tax rate, payment instructions and wording for quotes, time zone, and a password (stored only as a one-way hash). If you turn on two-factor sign-in, we keep the secret behind your codes, protected with encryption, and recovery codes (also as hashes).

About customers, entered by the business: name, mobile number, email and address; the jobs, quotes, invoices, change orders, notes, prices and dates; photos of the property; and the customer's typed name and the time they accepted a quote or change order.

Messages: a record of the texts and emails we send for a business: who they went to, the text, when, and whether they were delivered or the customer replied STOP.

Payments: card and bank details are entered on Stripe's pages and never reach our servers. We keep the amount, the date, the method and Stripe's reference for each payment.

Technical: our hosting provider logs requests (for example IP address, browser and page). The service uses cookies that keep you signed in and remember a sign-in step in progress. We use no advertising or tracking cookies. If something breaks, an error report may be sent to our error-monitoring provider; we strip cookies, form contents, names and the secret part of customer links from those reports.

How we use it

To run the service: show a business its jobs, send quotes and invoices, record acceptance and payment, send reminders, keep the service secure, fix problems, and answer questions. We don't sell personal information and we don't use it for advertising.

Who we share it with

Only the companies that help us run the service, for that purpose:

• Hosting and database providers, who store the data.
• Stripe, to take card and bank payments.
• Twilio, to send text messages, and Resend, to send email.
• Anthropic, only when a business uses the AI quote feature: the notes, photos and old quotes it chooses to submit are sent to Anthropic to produce the draft. Anthropic's own privacy policy and terms apply.
• Our error-monitoring provider (see above).

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of our business (we would tell you).

We do not share mobile phone numbers or text-messaging consent with third parties or affiliates for marketing or promotional purposes. See text messages.

Customer links

A quote, invoice or change order is opened through a long, random link that we text or email to the customer. Anyone who has the link can view that page, so don't share it. These pages ask search engines not to list them and don't pass the link on to other sites.

How long we keep it

We keep a business's information while its account is open. When an account is closed we delete its data, except records we must keep by law or for a dispute, and copies in backups, which are removed on the backups' normal schedule. A business or a customer can ask us to delete a customer’s or a job’s information (email dcuthbert123@gmail.com).

Security

Data is encrypted in transit, passwords are hashed, sign-in attempts are limited, and customer links are random and unguessable. No system is perfectly secure, so we can't promise absolute security. If we learn of a breach that affects you, we will tell you as the law requires.

Your choices and rights

You can ask to see, correct, export or delete the information we hold about you, and to object to or limit how it is used, as your local law allows (for example in California, the EU and the UK). Email dcuthbert123@gmail.com. If you are a customer of a business, we may pass your request to that business. To stop texts, reply STOP to any message. You can also complain to your local data-protection authority.

Children

The service is for businesses and is not aimed at children. We don't knowingly collect information from children.

Where data is processed

Our providers may process data in the United States and other countries. Where the law requires, we rely on approved safeguards for transfers.

Changes and contact

We will post changes here and change the date at the top; for important changes we will also tell account holders. Questions: QuoteDash LLC, PO Box 357 Bourne MA 02532, dcuthbert123@gmail.com.