Privacy Policy
Effective date: 2026-09-23
QuoteTalk provides a voice-powered quoting service for contractors. Users can record or upload jobsite audio and use QuoteTalk to create, edit, save, and send professional customer quotes.
This policy describes how QuoteTalk App LLC, operating QuoteTalk (“we”), handles information through the service.
1. Information we collect
Account and business details. We handle your account email, authentication identifiers and session information, and the business name, name, phone number, business email and logo you provide. Supabase processes authentication, including password credentials for email/password accounts. QuoteTalk does not store your Google password.
Quotes and customer details. We store customer names you enter, project titles, scope, line items, prices, notes, quote numbers, status and timestamps. When you send a quote, we also store the recipient email, the sent version of the quote and business details, a logo snapshot where provided, the email payload, a private-link identifier, and delivery timestamps and provider identifiers.
Recordings and transcription. We receive recordings you make or upload and process their transcripts to generate quotes. Raw audio is handled temporarily in the request-processing pipeline and is not saved in our application database or file bucket. The browser may hold your recording in memory while you work or retry a failed request. For working quote conversations, we save voice transcripts, typed notes, input order and private reference photos so you can return to your draft. These reference photos are not automatically included on customer quotes; customer-facing Project Photos are managed separately. Generated quote content is saved. This is not a promise of immediate deletion from every system: processing providers may retain information under their own policies and applicable service settings.
Billing. We store subscription status, billing periods, cancellation status, lifetime free-quote usage, and Stripe customer, subscription, checkout and webhook identifiers. Stripe processes card and payment details through its hosted payment screens; QuoteTalk does not directly store card numbers or security codes.
Technical and usage information. We store timestamps and product events such as landing-page visits, button clicks, signup, business setup, recording starts, successful quote generation, sending, free-limit milestones, checkout and subscription activation. These events use account identifiers or a randomly generated browser visitor identifier. Our diagnostic logs include broad device/browser categories, request identifiers, file size/type, recording duration, processing timings, status/error codes and transcript length—not transcript text or audio content in production. Infrastructure and authentication providers may process IP addresses, browser information and security logs when serving requests; these are not fields in QuoteTalk’s product-event table.
2. How we use information
Browser installation and abuse protection. We store a random first-party identifier in your browser to help prevent repeated free trials and automated misuse. It identifies a QuoteTalk browser installation, not a person; we do not use browser fingerprinting. Server-side security records associate its hash with successful free usage and limited request metadata, including account identifiers, timestamps, provider-call stages and status codes. When available, we use a daily keyed hash of Cloudflare-provided IP information for security correlation; we do not retain the raw IP in these records or limit free trials based on a shared IP alone. Detailed security-attempt records are eligible for deletion after seven days and are removed during subsequent generation requests. Daily IP-hashing keys are removed during requests on subsequent days. The installation’s free-usage counter is retained to enforce the lifetime trial. These controls are separate from your free-quote allowance: failed attempts may count toward security limits but do not consume a free quote. Clearing browser storage may reset the installation identifier, but does not reset your account allowance.
We use information to authenticate accounts, prepare and save quotes, deliver customer emails and quote links, manage subscriptions and usage limits, provide support, diagnose failures, protect the service from abuse, and understand and improve product usage. We do not use AI to independently set your prices: you remain responsible for checking each quote.
3. Google sign-in and Google account data
When available and chosen by you, Google sign-in requests only basic authentication scopes: openid, email and profile. Google may provide an account identifier, verified email, name and basic profile information such as a profile image. Supabase stores the linked authentication identity and related profile metadata; authentication/session information is also stored in your browser. QuoteTalk uses this information for sign-in, account creation, account linking supported by Supabase, and prefilling business setup. A profile name or email saved to your business profile remains there until you change it or request deletion.
QuoteTalk does not request access to your Gmail, Drive, Calendar, Contacts, Photos or documents. Google account data is processed by authentication and hosting providers as needed to run your account. If you include your name or email in your business details, those details can appear on quotes you choose to send and be processed by our email provider. We do not use Google sign-in to read your customer communications or other Google content.
4. Service providers and sharing
We disclose information to providers as needed to operate the service:
- OpenAI: audio transcription and quote generation from transcripts and job details. Quote-generation requests disable optional response storage; provider-side retention is governed by the applicable OpenAI service settings and policies.
- Supabase: authentication, identities and sessions. QuoteTalk’s saved business profiles and quotes are stored in Cloudflare, not in Supabase application tables.
- Cloudflare and OpenAI Sites: application hosting, infrastructure and operational tooling; Cloudflare D1 stores application records and R2 stores business logos, delivery-logo snapshots, project photos and private working-conversation photos.
- Resend: customer quote emails, including recipient, message content, quote link and delivery metadata.
- Stripe: payment processing and subscription management.
- Google: optional sign-in. The main application also loads web fonts from Google, which involves ordinary network requests.
These are independent providers. Their handling of information is also subject to their applicable terms and policies. We may disclose information when legally required, to protect rights or service security, or at your direction, including sending quotes to customers. A customer quote link can be opened by anyone who has that link; recipients may forward it. Keep those links private.
5. Information about contractors’ customers
Contractors may submit customer and job information to prepare and send quotes. We process it to provide that service. Receiving a quote does not create a QuoteTalk account for the customer. Contractors are responsible for having authority to provide this information. Customers may contact the contractor or us about information included in a quote.
6. Browser storage
We use browser storage to keep you signed in, maintain the security information needed for authentication, remember an intended new quote through sign-in, and store a visitor identifier for product analytics. The sign-in intent expires after 24 hours; the visitor identifier remains until browser storage is cleared. Clearing or blocking storage can sign you out or prevent sign-in from completing.
Advertising measurement. We use the Meta Pixel to measure public marketing page visits and confirmed account registrations, quote creations, and initial paid subscriptions associated with advertising. Conversion events use an opaque event identifier; paid conversions can include the payment amount and currency. Meta may receive the page URL, referral information, browser/device information, IP address and cookie identifiers. We do not include account fields, recordings, transcripts, quote contents or customer details in our Meta events. Application screens send only these explicit conversion events, not page views. The pixel is not loaded on shared customer quotes or the admin dashboard. We honor browser Global Privacy Control and Do Not Track signals for this pixel. Meta handles this information under its Privacy Policy; you can also manage advertising preferences through Meta and your browser settings.
7. Retention
Account, quote, delivery, billing and usage records are retained to provide quote history and shared documents, operate the service, address support and security matters, and meet applicable obligations. The current service does not automatically purge these records on a fixed schedule. You can delete quotes in the app and request account/data deletion by contacting us. Subscription cancellation does not delete your account or quote history. Some billing, security, backup or provider records may remain when needed for legitimate operational or legal purposes. Emails already delivered to recipients are outside our ability to recall.
Raw audio is processed temporarily as described above. Working conversation transcripts, typed notes and private reference photos are stored with your account; unfinished conversations can be discarded in the app. Provider retention and backup practices may differ from the application’s storage behavior.
8. Security
We use technical safeguards including authenticated requests, server-side ownership checks and restricted access to account data. We also limit access needed to operate and support the service. No system or transmission is perfectly secure. Protect your login credentials and customer quote links.
9. Your choices and requests
You can view and edit business information in Settings, review and edit saved quotes, delete quotes, and manage a paid subscription through the Stripe portal linked from Settings. Contact dconnorskillman@gmail.com to request access, correction or deletion of account information or to raise a privacy question. Depending on where you live, you may have additional rights under applicable law. We may need to verify your identity and consider legal retention requirements. Account deletion requests are handled by support; there is no automated account-deletion screen.
10. Children
QuoteTalk is intended for business and professional users and is not directed to children under 13. If you believe a child has provided personal information, contact us.
11. Changes
We may update this policy and its effective date as the service changes. We will provide additional notice when required by applicable law.
12. Contact
For privacy questions, support or deletion requests, contact QuoteTalk App LLC at dconnorskillman@gmail.com.