Privacy policy
Last updated · Plain English first, then the detail under each heading.
The short version
We keep what we need to run QuotePaid for you, stored in Ireland. We never sell it or use it for advertising. Card details go to Stripe, not to us. Your customers’ details belong to you: we only handle them for you. Ask and we’ll show you or delete what we hold.
01 Who we are
QuotePaid · Dublin, Ireland. Questions about your data, or a request about your rights: support@quotepaid.ie.
This policy covers businesses that use QuotePaid, people on the waitlist, visitors to this website, and what happens to the details of a business’s customers.
02 Your data and your customers’ data
Your account (your login, your business details, your plan): we decide how this is used, so we answer for it. This policy explains how.
Your customers’ details (their names, addresses, phone numbers, emails, the jobs, quotes, invoices and payments, photos and voice notes): these belong to your business. We only store and use them to do what you ask, such as sending a quote or a payment reminder. Our data processing agreement sets out those rules, and it is part of our terms.
03 What we collect
- Your account: your name, email, password (stored scrambled, never readable), business name, trade, address, phone number, VAT number, logo and settings.
- Your bank details, if you add them, so customers can pay you by transfer. A copy goes onto each quote and invoice you send, so a sent document never changes.
- Your work: customers, price list, quotes, invoices, payments, photos and voice notes you record for a quote, with the text we make from them.
- Your plan: which plan you’re on and your payments to us. Stripe takes the card; we never see the full card number.
- Keeping your account safe: a log of sign-ins and account changes, with the town and country they came from, the device and browser, and a scrambled code of the internet address (never the address itself). If you turn on two-step codes, we send them by email or check them against your authenticator app. Text message codes through Twilio are built but switched off for now.
- What you agreed to: when you signed up or accepted a change, which version of the terms, the data processing agreement and this policy you were shown, that you confirmed you’re 18 or over, and whether you asked for product news, with the date and time, your browser and a scrambled code of the internet address. We ask you to confirm you’re 18 or over only to check you can use QuotePaid. We keep that you confirmed it and when, never a date of birth.
- Usage counts: how many voice quotes and messages each business sends and what they cost us, so we can keep within fair limits. Counts and costs only, never the content.
- Alerts on your devices: if you turn on notifications, the address your browser gives us for that device.
- The waitlist: your email, trade, county, business name and, if you give it, a WhatsApp number, with the page you joined from and the date.
- Website visits: counted on the website only, never in the app or on your customers’ links, and without cookies (see cookie notice). You can turn this off at any time: .
04 Why we use it, and on what basis
| What for | Legal basis |
|---|---|
| Running your account and the service you signed up for | Our contract with you |
| Emails about your account, trial and plan | Our contract with you |
| Keeping our own billing records for Revenue | A legal duty (Irish tax law asks for six years) |
| Spam checks, sign-in and change logs, usage limits, fraud checks | Our legitimate interest in keeping the service and your account safe |
| Support staff looking at an account to help, each look logged | Our legitimate interest in giving support |
| Keeping a record of what you agreed to, including that you’re 18 or over | Our contract with you, and our legitimate interest in being able to show what was agreed |
| Product news, about once a month, only if you ticked the box at sign-up, with a way to stop it in every email | Your consent, which you can take back at any time |
| Waitlist launch emails and the launch-day WhatsApp | Your consent, which you can take back at any time |
| Alerts on a phone or computer | Our contract with you; you turn them on per device |
05 Voice quotes
When you record a quote, the recording goes through OpenRouter to OpenAI, both in the United States, to be turned into text. OpenAI may keep it for up to 30 days to check for abuse, then deletes it. The text, with the names of your price list items, then goes through OpenRouter to Anthropic (also in the United States) to fill in the quote; Anthropic deletes it within 30 days. These transfers are covered by the EU’s standard contractual clauses.
We delete our copy of the recording once the draft quote is made. The text stays with the quote. The model never sets a price, and nothing goes to your customer until you have checked and approved it.
06 Price ranges and trade research
We publish price ranges on this website built from real quotes: the middle half of the unit prices before VAT, for each job and province, from quotes sent in the last 12 months. A range only shows once it comes from at least 30 quotes from 5 different businesses, with no one business giving more than half of them, and test accounts are left out. Nobody can tell from a range who quoted what, and it never includes customer details.
When a business names its own trade, we look at that trade’s name, its units and the names of its price list items and categories, grouped across businesses, to decide which trades to support next. Never prices, customers or quote details.
07 Who else handles it
Only the companies that help us run QuotePaid, and only what each one needs: hosting, database, email, payments, voice quotes and spam checks. Our list of suppliers names each one, what it handles and where. We never sell your data or share it for advertising.
Card payments from your customers go through Stripe under Stripe’s own privacy policy. Cloudflare runs the spam check on our forms (Turnstile) and also uses some of what it sees to improve that check, under its own policy.
Alerts reach your phone or computer through the push service your browser uses (Apple, Google or Mozilla). We don’t choose it. It sees only a device address and a message it can’t read, because the message is encrypted for your device.
Support: our support staff can see your account when they help you. Each time they open it, we record who, when and why.
08 Where it’s kept
Your data is stored in Ireland: the database with Supabase in Dublin (Amazon Web Services, eu-west-1) and the website and app run by Vercel in Dublin.
Our suppliers are US companies, so some data does reach the United States: Resend keeps its email logs there, and voice quotes go there as explained above. Each transfer is covered by the EU–US Data Privacy Framework where the supplier is certified, and by the EU’s standard contractual clauses in every supplier’s agreement with us.
09 How long we keep it
While your account is open we keep what you put in. If you cancel, or your plan lapses, you can still log in and download your quotes and invoices for 90 days. We warn you before we delete. Your invoices are your business records: Revenue asks you to keep them for six years, so download them before then.
| What | Kept for |
|---|---|
| Your account, customers, quotes and invoices | While your account is open, then 90 days after it lapses or you cancel |
| What you agreed to (versions, 18 or over, product news) | While your account is open, then 90 days after it lapses or you cancel |
| Our invoices to you and your payments to us | Six years (Revenue’s rule) |
| Records of card payments from Stripe | Six years |
| The record of each email or message sent | As long as the quote or invoice it was about, plus 90 days |
| Voice recordings | Deleted once the draft quote is made (OpenAI: up to 30 days) |
| The text of a voice quote | As long as the quote |
| Sign-in log | 90 days |
| Account change log | 12 months |
| Support access log | Two years |
| Alerts on a device | Until you turn them off or log out on that device |
| Spam-check count for a connection (scrambled) | One day |
| Waitlist details | Six months after launch, or until you ask to be removed |
10 If you’re a customer of a business
If a business sent you a quote or invoice through QuotePaid, that business holds your details and decides how they’re used. Ask them first about your details. We store them for the business and use them only to send what it asks, such as the quote, the invoice and payment reminders. We never use them to market QuotePaid to you. If you can’t reach the business, write to support@quotepaid.ie and we’ll pass your request on.
11 Emails we send
Emails about your account, trial and plan are part of the service. Product news comes now and then, with a link to stop it in every email. Waitlist emails are only about the launch, each with a Remove me link. Quotes, invoices and reminders to your customers are sent in your business’s name. Their last line says “Sent with QuotePaid”, with no link and no offer.
12 Your rights
You can ask for a copy of your data, ask us to correct it or delete it, ask us to stop or limit using it, object to uses based on our legitimate interests, and take your data to another service. Where you gave consent, you can take it back at any time. Email support@quotepaid.ie and we’ll answer within a month. Some of it you can do yourself: edit your details in Settings and download any quote or invoice as a PDF.
We can’t delete what the law tells us to keep, such as our own billing records. If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission.
13 The waitlist
This policy replaces the interim notice the waitlist was shown before. Nothing changes for your waitlist details: we use them only to tell you about the launch, keep them until six months after launch, and delete them the moment you tap Remove me. If you sign up, they move to your account and the rest of this policy covers them.
14 Changes to this policy
If we change how we use your data, we’ll email you before it takes effect, and tell waitlist members in their next email. The date at the top shows the latest version.