Privacy Policy
Last updated: June 18, 2026
Smart Quote AI ("we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the rights you have under Canadian (PIPEDA) and U.S. (including CCPA/CPRA) privacy laws.
1. Information We Collect
Account information: name, email, business name, password (hashed).
Quote content: job descriptions, line items, client names and email addresses you enter, and pricing information.
Billing information: processed by Stripe; we receive only the last four digits of your card, brand, and billing country. We never see or store full card numbers.
Usage data: pages viewed, features used, device type, browser, IP address, and approximate location, collected via Google Analytics 4.
2. How We Use Information
- To provide, maintain, and improve the Service.
- To generate AI quote drafts from your inputs.
- To process subscriptions and send transactional emails (receipts, password resets).
- To detect, prevent, and respond to fraud or abuse.
- To comply with legal obligations.
3. AI Processing
When you click "Generate with AI", your job description is sent to our AI provider (Google via the Lovable AI Gateway) to draft quote content. Inputs are not used to train third-party models.
4. Sharing
We share personal information only with: (a) service providers we rely on to operate the Service — Stripe (payments), Supabase / Lovable Cloud (hosting & database), Google (analytics & AI), Sentry (error tracking); (b) authorities when required by law; (c) a successor entity in connection with a merger or acquisition. We do not sell personal information.
5. Data Retention
We retain account and quote data for as long as your account is active and for up to 30 days after deletion to allow recovery, after which it is permanently removed. Billing records are retained for 7 years to meet tax and accounting obligations.
6. Your Rights
Depending on where you live (Canada — PIPEDA; California — CCPA/CPRA; other U.S. states with comprehensive privacy laws), you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to opt out of "sale" or "sharing" (we do neither). Email privacy@smartquoteworks.com to exercise these rights. We respond within 30 days.
7. Cookies & Analytics
We use first-party cookies for authentication and Google Analytics 4 cookies to understand usage. You can disable cookies in your browser; doing so may limit functionality.
8. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to authorized personnel. We monitor errors and security events with Sentry. No system is perfectly secure; you use the Service at your own risk.
9. International Transfers
Our infrastructure is hosted in North America. By using the Service from outside North America, you consent to your information being processed there.
10. Children
The Service is not intended for anyone under 18. We do not knowingly collect information from children.
11. Changes
We will notify you of material changes by email or in-app notice at least 14 days before they take effect.
12. Contact
Privacy Officer: privacy@smartquoteworks.com