Privacy Policy
Last Updated: March 15, 2024
Overview
At QuoteMaster we take your privacy seriously, and we hold a serious responsibility: your app contains your customers' names, addresses and phone numbers, so a policy about your data is also a policy about theirs. This explains what stays on your phone, what reaches us, and what we can and cannot read.
How QuoteMaster Handles Your Data
On your device first: QuoteMaster is a mobile app. Your clients, quotes, invoices, jobs and figures are stored on your phone and work there with no internet connection at all.
Your Data Stays in Google™: All business information, client data, quotes, invoices, and other content you create using QuoteMaster remains stored exclusively in your Google™ account, not on our servers.
End-to-end encrypted when it leaves: Backups and team synchronisation pass through our servers, but the contents are encrypted on your device before they are sent. We hold the file; we cannot read what is in it. Nobody at QuoteMaster can see your customers or your money.
How We Use Your Data: We use your Google™ account data solely to provide you with QuoteMaster's services. This includes creating and managing quotes, invoices, client information, and calendar events as requested by you. We do not use your data for any other purposes.
Data Access & Usage
Through the Google™ permissions you grant, QuoteMaster can access:
Camera: To photograph receipts and job photos that you choose to capture.
Storage: To save the PDFs the app produces so you can share or print them.
Location (optional): Only if you use route planning, to work out the order of the day's jobs from where you are.
This access occurs through Google's™ secure API system. We do not extract, copy, or store this data on our own servers.
Important: We do not sell, rent, or transfer your Google™ user data to third parties. Your data is used exclusively to provide you with QuoteMaster's services. We do not share or disclose your Google™ account information with any external parties except where explicitly required to provide our service (such as Google's™ own APIs) or where required by law.
Security Measures
Google's™ Security: Your data benefits from Google's™ enterprise-grade security as it remains within your Google™ account.
OAuth 2.0: We use industry-standard OAuth 2.0 for secure authentication with Google™ services.
No External Storage: Since your business and client data remains in your Google™ account, we don't face the security risks associated with storing this sensitive information.
Data Protection Mechanisms: We implement multiple layers of security to protect your Google™ user data:
Your Rights & Choices
Revoke Access: You can revoke QuoteMaster's access to your Google™ account at any time through your Google™ Account settings.
Data Ownership: You retain full ownership and control of all data created and managed through QuoteMaster.
Account Deletion: You can request deletion of your QuoteMaster account information by contacting us.
GDPR Compliance: For EU users, we comply with GDPR requirements for the limited personal data we collect.
Third-Party Services
Third parties we use: Stripe for subscriptions and, if you enable it, card payments from your own customers; Anthropic for the AI assistant; Postmark for email. Each has its own privacy policy. Where the assistant is used on customer data, identifying details are masked on your device before anything is sent.
Communication Services: When you use QuoteMaster's features to send messages via WhatsApp or email, those communications are subject to the respective service's privacy policies.
Payment Processing: Stripe processes subscription payments according to their privacy policy.