Privacy Policy
Last updated October 22, 2026 · Version 0.1-draft
Draft, not yet in effect
This policy explains what Quoza stores, why, and your rights under UK GDPR.
What we store
- Your account: email address, name, business name and the details you add in Settings (phone, address, VAT number, logo).
- Your work: price list, customers, quotes, signatures, invoices and payment records you create.
- Your customers: the name, email, phone and job address you enter, and what they do on the quote page (view, choose, sign, request changes).
- Signature records: typed name, time, IP address and browser, kept as evidence of the signature.
- Technical logs: requests and errors, kept for a short time to run and secure the service.
What we don't store
Card numbers or bank logins. Deposits go directly from your customer to you; we never handle the money.
Free quote maker
What you type into the free quote maker preview is processed on our server only to work out totals and make the PDF. It isn't stored or logged. A draft is saved only when you press Send, and is deleted after 7 days if you don't claim it with an account.
Why we use it (lawful basis)
To provide the service you signed up for (contract). To keep it secure and improve it (legitimate interests). To keep records the law requires (legal obligation). For your customers' details, you are the controller and we process them on your behalf.
Signing in
We email you a one-time link that works once and expires. If you choose Google or Apple, we receive your name and email from them, nothing else.
Cookies and analytics
We set one strictly necessary cookie to keep you signed in, and a security cookie on the sign-up and log-in forms. The quote page your customers see sets no cookies. Our marketing pages set none. Because these are strictly necessary, there is no cookie banner.
We measure how the product is used on our own servers, without cookies, advertising trackers or selling data. Analytics events contain no names, emails or phone numbers.
AI
When you use AI features, we send the job description and line items needed for the quote to our AI provider. We don't send your customers' contact details.
Who we share data with
Only providers that help us run Quoza (hosting, database, email delivery, AI), under contracts that limit use to providing the service. Some providers are outside the UK; transfers use approved safeguards. We don't sell personal data.
How long we keep it
While your account is open. Signed documents and their evidence are kept for as long as they may be needed as a record of the agreement. When you delete your account, we delete or anonymise the rest.
Your rights
You can access, correct, export or delete your data, object to or restrict its use, and complain to the Information Commissioner's Office (ico.org.uk).
Contact
antony@quoza.app