Privacy Statement

QuoteHQ collects only the information needed to run the quoting service:

• Account information — the email address you sign up with, and the authentication records that go with it (confirmation status, sign-in timestamps and session tokens). If you sign in with Google, we receive the email address and basic profile identifiers Google returns. We never see or store your password: it is handled by our authentication provider.
• Company profile — business name, contact name, phone, email, website, business address, NZBN, GST number, quote terms and any logo image you upload. All of these are optional and are used to brand your quotes.
• Your customers' information — customer name, phone number, email address, job address and notes that you enter, plus a verification flag you can set yourself against a customer's email.
• Quote and estimating information — job titles and descriptions, dates, labour lines (including the names and roles of workers, employees or subcontractors you add), materials, your saved materials library, quantities, costs, markup, margin, GST, totals, quote numbers, quote status and the history of status changes with timestamps.
• Settings — your quote defaults and PDF and branding preferences.
• Technical information — our hosting, database and authentication providers keep standard operational logs (for example request and connection logs, which normally include an IP address and browser type) so the service can run and be kept secure. If the app hits an error in your browser, an error report containing the error message, the page you were on and basic browser information may be sent to our hosting platform's error monitoring so we can fix faults.

QuoteHQ does not run advertising or marketing tracking, and we do not buy personal information from third parties.

QuoteHQ account holders may enter personal information about their own customers — such as names, contact details, job addresses and job information — in order to create and manage quotes. QuoteHQ processes that information on the account holder's behalf so we can provide the quoting service, and we do not use it for our own purposes.

Because that information usually comes to us indirectly, the account holder is responsible for making sure they are entitled to collect and use their customers' personal information, for telling their customers how it will be used, and for meeting the privacy obligations that apply to their own business. This does not remove QuoteHQ's own obligations under the Privacy Act 2020 for the information we hold.

• To create, save, number, price and export your quotes, including generating PDFs.
• To store your customers, materials library, company branding and settings.
• To create your account, sign you in and keep your account secure.
• To send account emails such as email confirmation and password resets.
• To diagnose faults, keep the service running and prevent misuse.
• To meet legal obligations that apply to us.

We do not sell personal information, and we do not sell, share or reuse your customer lists. We do not currently send marketing emails.

QuoteHQ is built on managed cloud infrastructure. The organisations that may process personal information on our behalf are:

• Lovable — application hosting, the platform our app runs on, and error monitoring.
• Supabase (running on Amazon Web Services) — our database, user authentication and account emails such as confirmation messages.
• Google — only if you choose to sign in with a Google account.

These providers process information only to deliver their service to us. QuoteHQ does not currently use a payment processor, advertising networks or third-party analytics products. We will update this statement before any of that changes.

We may also disclose personal information where the law requires it, or where it is needed to protect someone's safety or our legal rights.

Our database and authentication data are hosted in Amazon Web Services' Asia Pacific (Sydney) region in Australia. Application hosting and error monitoring are provided by Lovable, which operates internationally, so some technical and log information may be processed outside New Zealand. Where information is held overseas, it remains subject to our agreements with those providers, and we take reasonable steps to ensure comparable privacy safeguards apply.

Connections to QuoteHQ are encrypted in transit using HTTPS. Passwords are stored and verified by our authentication provider, not by us. Every quote, customer, material, company profile and settings record is tied to your account and protected by database-level access rules, so signing in to one account does not give access to another account's data — this is enforced in the database itself, not just in the app screens.

No online system can be completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect the information we hold. If a privacy breach occurs that is notifiable under the Privacy Act 2020, we will notify affected people and the Office of the Privacy Commissioner as the Act requires.

QuoteHQ stores your sign-in session in your browser's local storage so you stay signed in, and may keep an unsaved quote draft on your own device. This storage is necessary for the app to work. We do not use advertising or cross-site tracking cookies.

You can view and edit your account details, company profile, customers, quotes, materials and settings directly in the app at any time. Settings also includes an export option that downloads a JSON file containing your account details, company profile, settings, customers, quotes and materials library.

Under the Privacy Act 2020 you can also ask us for a copy of the personal information we hold about you and ask us to correct it. We aim to respond within 20 working days, as the Act requires. If one of your own customers asks you about information held in QuoteHQ, that request is generally yours to answer as the business that collected it.

You can delete individual quotes and customers in the app, and you can delete your entire account from Settings. Deleting your account permanently removes your quotes, quote status history, customers, materials library, company profile (including any uploaded logo) and settings from our live database, and deletes your login record. This cannot be undone.

Deleted records may remain in our database provider's routine backups for a short period before those backups expire, and standard technical logs may persist for their normal retention period. We keep your information only while your account is active, except where we must retain something to meet a legal obligation.

QuoteHQ is a business tool and is not intended for use by children.

We may update this statement as QuoteHQ changes. If we make a material change — for example adding subscription payments, analytics or new integrations — we will update this page and the date at the top, and tell you in the app or by email where appropriate.

If you have a privacy question or complaint, or you want to make an access, correction or deletion request, please get in touch through our contact page. Privacy requests are handled by the person responsible for privacy at QuoteHQ.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.