Privacy Policy

QuoteCraft AI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at quotecraftai.com. Please read this policy carefully. If you disagree with its terms, please discontinue use of the service.

1. Information We Collect

We collect information you provide directly to us when you create an account or use the service:

• Account information: Your name and email address when you sign up.
• Business profile: Your business name, industry, services offered, typical pricing, and writing tone/style preferences you configure during onboarding.
• Client data: Names, email addresses, and notes for clients you add to the platform.
• Proposal data: Project descriptions, generated proposals, edits you make to proposals, and proposal status (draft, sent, accepted, etc.).
• Usage data: How you interact with the service, including features used, proposals created, and edit patterns (used to improve AI generation quality for your account).
• Communications: Any messages you send to our support team.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the QuoteCraft AI service.
• Generate AI-powered proposals by sending your project description and business context to the OpenAI API (see Third-Party Services below).
• Personalize the AI generation experience by learning from your editing patterns and preferences over time.
• Send transactional emails such as proposal delivery confirmations and acceptance notifications via Resend.
• Respond to your comments, questions, and support requests.
• Monitor and analyze usage trends to improve the service.
• Send you service-related announcements (you may opt out of non-essential communications).

We do not sell your personal information to third parties. We do not use your proposal content to train general AI models.

3. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Authentication cookies: To keep you logged in to your account (managed by Supabase Auth).
• Session storage: To temporarily hold data between pages during your session (e.g., pre-filling proposal forms from job listings). This data is cleared when you close your browser tab.
• Analytics: We may use privacy-respecting analytics tools to understand how the service is used in aggregate. No personally identifiable information is shared with analytics providers.

You can control cookie behavior through your browser settings. Disabling authentication cookies will prevent you from staying logged in.

4. Third-Party Services

We use the following third-party services to operate QuoteCraft AI. Each has its own privacy policy:

• Supabase — Provides our database, authentication, and file storage infrastructure. Your account data, business profile, clients, and proposals are stored in Supabase's PostgreSQL database hosted on AWS. Supabase Privacy Policy
• OpenAI — Powers AI proposal generation. When you generate a proposal, your project description and business context are sent to the OpenAI API. OpenAI's data usage policies apply to this data. OpenAI Privacy Policy
• Resend — Handles transactional email delivery (proposal emails, acceptance notifications). Recipient email addresses are processed by Resend to deliver emails. Resend Privacy Policy
• Vercel — Hosts the QuoteCraft AI application. Web requests, including IP addresses, are processed by Vercel's infrastructure. Vercel Privacy Policy
• Stripe — Will be used for payment processing when paid plans are introduced. No payment data is stored on our servers. (Not yet active during beta.)

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Proposal data may be retained in anonymized, aggregated form for service improvement purposes.

6. Data Security

We take the security of your data seriously. All connections are encrypted using HTTPS/TLS, your data is isolated from other users through row-level database security, and we use secure, token-based authentication. We never store passwords in plain text, and we never sell or share your data with third parties. While no online service can guarantee absolute security, we continuously work to protect your information and will notify you promptly if a breach ever occurs.

7. Your Rights

You have the following rights regarding your data:

• Access: You can view all your data within the QuoteCraft AI dashboard at any time.
• Correction: You can update your business profile, client information, and account details directly in the app.
• Deletion: You can delete individual proposals, clients, and services from the dashboard. To delete your entire account and all associated data, contact us at support@quotecraftai.com.
• Data export: You can request an export of your data by emailing support@quotecraftai.com. We will provide your data in a machine-readable format within 30 days.
• Opt-out: You can opt out of non-essential communications by contacting us or using unsubscribe links in emails.

If you are located in the European Economic Area (EEA) or United Kingdom, you may have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

QuoteCraft AI is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date and, where appropriate, by sending you an email notification. Your continued use of the service after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: