Privacy Policy

Last updated: May 2025

1. Data controller

QuoteSign is operated by Kevo. For any privacy-related questions, contact us at hello@quotesign.app.

2. Data we collect

We collect the data you provide directly: your name, email address, company details, and the business data you enter (clients, quotes, invoices, expenses). We also collect basic usage analytics and IP addresses for security purposes.

3. How we use your data

Your data is used to: (a) provide the quoting, invoicing, and document management service; (b) send you transactional emails (e.g. password reset, payment reminders you configure); (c) improve the service; (d) comply with legal obligations.

4. Legal basis

Processing is based on the performance of the contract between you and QuoteSign. For marketing communications, we rely on your explicit consent.

5. Data retention

We retain your data for as long as your account is active. If you request account deletion, we will delete your data within 30 days, except where retention is required by law.

6. Data processors

We share data with: Supabase Inc. (database hosting, EU servers — Frankfurt); Vercel Inc. (hosting and CDN); Stripe Inc. (payment processing). All processors are bound by data processing agreements.

7. Your rights

You have the right to access, rectify, delete, object to, or restrict processing of your personal data, and the right to data portability. To exercise these rights, contact us at hello@quotesign.app.

8. Cookies

QuoteSign only uses technically necessary cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Security

We apply technical and organizational measures to protect your data: encryption in transit (TLS), row-level security in the database, and access controls. All data is stored in the EU.

10. Changes to this policy

We may update this policy. We will notify you by email if the changes are material. The date of the last update is shown below.

Terms of ServiceBack to home