Privacy Policy

Effective September 16, 2026

QuoteDuct ("we", "us") is an estimating tool for contractors, operated in the United States. This policy explains what information we collect, how we use it, and the choices you have. The short version: we collect only what the product needs, we don't run ads or analytics trackers, and we never sell your information.

Information we collect

Account information — when you sign up we collect your email address, and any profile details you add: your name, company name, phone number, city/state, and license number. Sign-in uses one-time email links; we never store passwords.

Customer information you enter — contractors enter their own customers' details (name, email, phone, job address) to build and send estimates. For this information, the contractor is the owner and we process it only on the contractor's behalf to provide the service. Homeowners: questions about an estimate or your details should go to the contractor who sent it.

Estimate content — line items, prices, notes, tax settings, and (for Pro accounts) payment links you choose to attach. Internal notes are never shown to your customer.

Technical basics — essential cookies for signing you in (no advertising or analytics cookies), and standard server logs (such as IP address and request time) kept briefly by our hosting provider for security and reliability.

How we use it

To run QuoteDuct: creating and delivering estimates, sending the emails you trigger (estimate links, reminders, sign-in links, approval notifications), billing Pro subscriptions, answering support requests, and keeping the service secure. We send only transactional email — no marketing lists.

Payments

QuoteDuct never collects or processes payments between contractors and their customers. If a contractor attaches a payment link to an estimate, paying through it happens entirely on that provider's site under its terms. Pro subscription billing is handled by Stripe; we never see your card number.

Who we share it with

Only the service providers that make QuoteDuct work: Vercel (hosting), Supabase (database and sign-in), Resend (email delivery), and Stripe (subscription billing). Each receives only what its role requires. We do not sell personal information, and we don't share it for cross-context advertising. We may disclose information if the law requires it.

Security

All traffic is encrypted in transit (HTTPS). The database is locked to server-side access only, with row-level security enabled. Sign-in links expire after an hour and work once.

Retention, export, and deletion

We keep your data while your account is active. You can export your quotes as a CSV file any time from Settings. To delete your account and its data, use the Help & Support form in Settings — we'll confirm and complete deletion promptly.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Whatever the jurisdiction, our practice is the same: ask through the Help & Support form and we'll do it.

Children

QuoteDuct is a business tool and is not directed at children under 13.

Changes

If we change this policy materially, we'll update the date above and note the change on this page.

Contact

Use the Help & Support form in Settings, or reply to any email QuoteDuct has sent you.