Legal

Privacy Policy

Last updated: May 8, 2026

Working draft.This policy is a v1 draft we wrote in plain English. It’s currently being reviewed by counsel. We’ll update this page when the lawyer-reviewed version is ready.

1. The short version

You own your data. We don’t sell it. We don’t use it to train AI models without your explicit opt-in. We collect only what we need to run the product, and we delete it when you ask us to.

2. What we collect

When you use QuoteForges, we collect:

  • Account info — your email, name, and the information you enter about your company (license number, insurance info, address, etc.)
  • Business data — the leads, quotes, jobs, invoices, clients, and materials you create
  • Payment info — handled by Stripe; we never see or store full card numbers. We do see transaction metadata (amount, status, date) for the purposes of displaying your dashboard
  • Usage data — basic analytics like which pages you visit, browser type, and IP address. We use this to find bugs and understand which features are useful

3. How we use it

We use the data above to:

  • Run the product (you can’t use a CRM without storing the data you enter)
  • Bill you for your subscription via Stripe
  • Send you transactional email (login codes, payment receipts, follow-up reminders)
  • Improve the product based on aggregated usage patterns
  • Provide customer support when you reach out

4. AI features and your data

QuoteForges uses Anthropic’s Claude API for some features (AI quote generation, email tone rewrites). When you use those features, the relevant content (the scope you describe, the email draft you want rewritten) is sent to Anthropic’s API to generate a response. Anthropic’s policy is that they don’t train their models on API customer data unless explicitly opted in. We don’t opt in.

Internal data — your markup percentages, labor rates, and margin information — is never sent to AI services. The AI sees the same scope and pricing the customer would see, no more.

5. Who we share it with

We share your data only with the service providers we need to run QuoteForges:

  • Supabase — our database and authentication provider
  • Vercel — our hosting provider
  • Stripe — for processing your subscription payments and the payments your customers send you
  • Anthropic — for AI features as described above
  • Resend — for sending transactional email on your behalf

We don’t sell your data to advertisers, data brokers, or marketing partners. We’ll only share it with anyone else if legally compelled (subpoena, court order) and we’ll notify you unless legally precluded.

6. Your rights

You can:

  • Access and edit your data at any time from inside the product
  • Export your data — email us at hello@quote-forges.com
  • Delete your account, which deletes your data within 30 days (some backups may persist for up to 90 days)
  • Object to specific data uses by contacting us

7. Cookies and tracking

We use a small number of essential cookies (authentication, session) and basic analytics. We don’t use third-party ad tracking or social-media pixels. If we ever add analytics beyond first-party basics, we’ll update this page and show a cookie banner.

8. Children

QuoteForges is built for businesses and isn’t directed at children under 18. We don’t knowingly collect data from children. If you believe a child has created an account, email us and we’ll delete it.

9. International users

QuoteForges is operated from the United States. By using the service, you consent to your data being stored and processed in the US. If you’re in the EU/UK and have GDPR-specific questions, email us.

10. Changes

We may update this policy periodically. If a change is material, we’ll notify you by email or in-app banner.

11. Contact

Privacy questions go to hello@quote-forges.com.

See also our Terms of Service.