This Privacy Policy describes how CMS Hub Limited (Company No. 248227, registered in Seychelles), with its registered address at House Of Francis, Room 303, Ile Du Port, Mahe, Seychelles ("Company", "we", "us", or "our") collects, uses, and shares information when you use the Quote360 web application ("App") and related services (collectively, the "Service").
1. Information We Collect
1.1 Information You Provide
We collect information you voluntarily provide, including:
- Account Information: Name, email address, and password when you create an account
- Business Information: Company name, address, phone number, logo, and tax identifiers for your quotations
- Client Data: Names, contact information, and addresses of your clients
- Product Data: Product names, descriptions, prices, SKUs, and categories
- Quotation Data: Quotes you create, including line items, pricing, notes, terms, and attachments
- Team Data: Information about team members you invite to collaborate
1.2 Information Collected Automatically
When you use the Service, we automatically collect certain information:
- Device Information: Device type, operating system, browser type, unique device identifiers
- Usage Data: Features used, actions taken, time spent in the App, pages visited
- Log Data: IP address, access times, pages viewed, errors encountered
- Analytics Data: Aggregated usage patterns and performance metrics
Quote requests sent to a supplier
A company using Quote360 can publish a link that lets anyone ask them for a quote without an account. When you send such a request we store what you enter on that form: your name, your company, your email address, an optional phone number, the role you select, the delivery address or pickup site you choose, the materials, quantities and units you ask for, a needed-by date, your notes, the language you chose, and the time you gave consent. We also record the network address and browser your request came from, which is what lets us stop the form being abused.
That information is held for the supplier you sent it to, and only that supplier can see it. Quote360 processes it on their behalf; the supplier decides how long to keep it and how to answer you. A request a supplier marks as spam is deleted automatically after 30 days.
2. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve the Service
- Create and manage your account
- Process your quotations and generate PDF documents
- Send service-related communications and notifications
- Provide customer support
- Monitor and analyze usage patterns to improve user experience
- Detect and prevent fraud, abuse, and security issues
- Comply with legal obligations
3. Data Storage and Security
Your data is stored securely using industry-standard encryption and security practices. We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.
While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.
4. Third-Party Services
We use the following service providers to operate the Service. Each processes personal data only to provide its part of the Service, under its own privacy policy. Where a provider's data location is listed, that is where we have configured it to keep your data.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Vercel | Hosting and delivery of the website and application | Request logs, IP address, page performance measurements | Provider's own infrastructure |
| Supabase | Application database | Account, company, customer, material and quote records | European Union (Frankfurt) |
| Upstash | Cache, rate limiting and the quote email send queue | Short-lived session, permission and queue data | Provider's own infrastructure |
| Clerk | Sign-in and account management | Name, email address, sign-in credentials, session information | Provider's own infrastructure |
| Resend | Email delivery: quotes, invitations, verification and contact messages | Recipient addresses, message content and attachments | Provider's own infrastructure |
| PostHog | Product analytics | Pages viewed and actions taken, linked to your user account (email, name and company) once you sign in | United States |
| Sentry | Error monitoring | Error reports with device, browser and usage context | United States |
| Google Maps | Address search and maps in the application | Addresses you search for, your IP address | Provider's own infrastructure |
| HERE | Truck route distance and time for delivered prices | Pickup and delivery locations | Provider's own infrastructure |
| TollGuru | Toll cost estimates for routes | Pickup and delivery locations | Provider's own infrastructure |
| TaxJar | Sales tax calculation, when enabled for a company | Delivery addresses and line amounts | Provider's own infrastructure |
| Google Cloud Storage | Storage of uploaded files and proposal PDFs | Documents, photos and generated PDFs | European Union (Frankfurt) |
| Pusher | Real-time notifications in the application | Notification events for your account | Provider's own infrastructure |
PostHog analytics are linked to your user account (email, name and company) once you sign in, so we can see how each workspace uses the product. They are not anonymous.
5. Data Sharing
We do not sell your personal information. We may share your data:
- With Service Providers: Third-party services listed above that help us operate the Service
- For Legal Compliance: When required by law or to respond to legal process
- For Safety: To protect the rights, property, or safety of our users or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize sharing
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Export: Request your data in a portable format
- Objection: Object to certain processing of your data
- Restriction: Request restriction of processing
To exercise these rights, please contact us at support@quote360.app.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
Quote requests sent to a supplier through their public link follow the same retention as the rest of that supplier's communications, with one exception: a request the supplier marks as spam is deleted, along with everything it contained, 30 days after they mark it.
8. Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.
9. International Data Transfers
Our application database and file storage are located in the European Union (Frankfurt). Some providers listed in section 4, including PostHog and Sentry, process data in the United States. Your information may therefore be transferred to and processed in countries other than your country of residence, which may have different data protection laws. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data is treated securely and in accordance with this Privacy Policy.
10. Cookies and Tracking
The Service uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings, though some features of the Service may not function properly without cookies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the App or sending you an email notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated Policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: support@quote360.app
- Website: https://quote360.app
- Company: CMS Hub Limited
- Address: House Of Francis, Room 303, Ile Du Port, Mahe, Seychelles