Privacy Policy

Information you provide

Clerk processes account and authentication information, such as identifiers, email address, and sign-in/session data. Quotify stores the business profile and pricing information you enter, including business name, business contact details, service area, hours, rates, and reply preferences.

Quotes can contain customer names, email addresses, phone numbers, service and job details, addresses, messages, dates, notes, prices, status, optional add-ons, and your saved reply draft. A quote link uses a random token so the customer can view and respond without an account. Quote acceptance and appointment requests are recorded. Monthly quote usage and limited billing identifiers are also stored.

Photos and AI features

When you request a photo estimate, the selected job photos and related quote context are sent to the AI service used by the app (the Replit-managed OpenAI integration) to generate a preliminary estimate and visible-condition summary. The app does not save the raw photo files with the quote; the written estimate and summary you choose to save remain part of the quote record.

When you request an AI reply draft and an OpenAI API connection is configured, the app sends relevant context such as customer name and message, business name/type, price, job details, notes, and reply preferences to OpenAI. If that connection is not configured or the AI request fails, the app can return a locally generated template instead. Quotify does not send the reply to your customer.

AI providers process information under their own service terms and settings. Quotify does not promise a specific provider retention period for submitted AI prompts. Avoid including sensitive information that is not needed for an estimate or reply.

Service providers and disclosures

The application uses Replit for hosting and database services; Clerk for sign-in; Whop for hosted checkout and subscription/payment processing; and the AI services described above. These providers receive information needed to deliver their part of the service and may process it under their own terms. Quotify serves its font files from its own site rather than requesting fonts from Google.

To create a checkout, Quotify sends Whop the selected plan and an internal Quotify account identifier in checkout metadata. Quotify then uses Whop’s server API to verify the related payment and membership. Quotify stores the checkout, plan, payment, membership, Whop user/member identifiers, and relevant subscription status and period dates needed to connect a verified purchase to your account. It does not store card or bank details. You enter payment information on Whop’s hosted checkout, and Whop handles payment processing under its applicable terms and policies. Resend is connected in the Replit workspace but is not called by the current Quotify application code. The app currently sends no marketing emails or Resend messages; Clerk may separately send authentication-related email under its own service.

Age check at signup

Quotify accounts are limited to people who are at least 18 years old. Before showing the account-creation form, the signup page checks the date of birth in the browser. The birth date is not sent to Quotify or Clerk and is not stored by Quotify; the current browser tab keeps only the age-check result through signup. This is a self-reported check, not independent identity or age verification.

Cookies, analytics, and advertising

Clerk uses cookies or similar browser storage needed for authentication and sessions. The app also stores a sidebar display preference in a cookie and a temporary signup age-check result in session storage. No session-replay SDK, recording script, advertising pixel, or analytics script is included in the current Quotify page code. An analytics helper can forward explicit product events if a host injects an Umami script; it does not read or send form-field values. The owner should verify any scripts added by hosting or deployment settings.

The app code does not implement targeted advertising. No sale of personal information or advertising-related sharing is implemented in the audited application code. This statement does not override independent processing by service providers under their own terms.

Retention and deletion

Quotify account, business, and quote information is kept while the account is active. You can delete an individual quote in the app or request account deletion from Settings. Account deletion removes the app’s account-owned quotes, business settings, usage records, local subscription mappings, and consent record, and requests deletion of the Clerk account. The app also requests cancellation of an active Whop subscription; Whop payment and transaction records are not deleted by Quotify.

Provider backups, security logs, and billing/tax records may remain with the relevant provider for its retention period or as required by law. Quotify has not configured or verified a specific backup/log deletion schedule.

Security and your rights

The app uses authenticated, account-scoped API routes and server-side authorization, and it does not store payment-card numbers in the application database. These safeguards reduce risk but cannot guarantee perfect security.

Depending on where you live, you may have rights to access, correct, delete, or limit certain personal information. Correct business and quote records in the app where possible, use the Settings deletion control for account deletion, or email support@quoteflow.app for a privacy request. The app has no separate privacy inbox or automated request-tracking portal. We will handle requests as required by applicable law.

Policy updates and contact

Material changes will be posted here with a new version and effective date. The app does not currently send policy-change email notices. Privacy questions may be sent to support@quoteflow.app, the support address linked inside the app. The mailbox’s ownership and delivery have not been independently verified.