This policy describes how QuoteSketch works today. QuoteSketch is an actively developed software-as-a-service product, and the way information is handled will change as features are added. Where that happens, this policy will be updated, and the version identifier above will change, before the new behaviour takes effect.
It describes only what the Service does now. Where a service provider or a feature is not yet in place, this policy says so rather than describing something that does not exist. This policy describes how the Service handles information; it is not legal advice.
In short
The plainest version of this policy is short enough to read in full:
- As a guest, the quotation you are writing is held by your browser on the device you are using. It is never sent to us, and it is not saved as a quotation.
- With an account, what you save (quotations, templates, your company details, clients, items and settings) is stored in your account in the cloud, in Cloud Firestore and Cloud Storage for Firebase, so you can open it on any device where you sign in.
- You can use QuoteSketch as a guest without giving us anything at all: no account, no email address.
- QuoteSketch does not run advertising technologies, and does not sell personal information.
- Clearing your browsing data removes what this browser holds: a guest's quotation in progress, and an account's unsaved changes. What an account has saved stays in the cloud.
The sections below say the same thing precisely.
1. Who this policy covers
This Privacy Policy explains how QuoteSketch (“we”, “us”) handles information in connection with the QuoteSketch website and application (the “Service”), a software-as-a-service platform for creating, managing, previewing, printing and exporting business quotations. It applies to visitors to the public website, to people using QuoteSketch as a guest, and to people using it with an account.
It should be read together with the Terms of Service, which govern your use of the Service.
QuoteSketch is a tool for producing quotations. Where you enter another person's details into a quotation (a customer contact, for example), you are the one deciding what to enter and why, and you remain responsible for that information under the laws that apply to your business.
2. Information we collect
What is collected depends entirely on how you use the Service.
- Quotation and business information you enter
- Everything you type into a quotation or save to reuse: your company name, address, contact details, tax number, logo or letterhead, bank details, standard terms, quote messages and footer notes; the customers, products and services, preset subjects and sales people you save; and the contents of each quotation: items, quantities, prices, discounts, taxes, dates, references, images and attachments. This is your content. It is described in section 3 because where it lives matters more than the list itself.
- Account information
- If you create an account, the details needed to identify it and let you sign in: your email address, your password (held by Firebase Authentication, see section 5) and an optional display name. Guest use requires no account and no account information.
- Consent record
- A record that you have accepted the Terms of Service and this Privacy Policy, with the date and the version of each that you accepted. It is stored in your browser and, if you are signed in, also saved to your account, so you are not asked again on each new device.
- Preferences
- Settings that make the Service behave the way you have asked it to: quotation defaults, reference-number format, PDF naming, your default design and document title, and similar choices. They are stored in your browser and, if you are signed in, also saved to your account.
- Cancellation feedback
- If you cancel a plan from inside the app, the reason you pick and any note you add are saved with your account ID, your email address and the plan you were on, so we can understand why people leave. This record cannot be read back from the app, by you or by anyone else.
- Emails we send you
- When you cancel a plan or delete your account, we send a confirmation to the email address on your account. To send it, a message with your address, a subject and the text is placed in an outbox in Cloud Firestore and passed to our email provider (section 7). Sign-in emails, such as email verification and password reset, are sent by Firebase Authentication.
- Correspondence
- If you email support or sales, we receive your message, your email address and anything you choose to attach, which may include a quotation PDF you send us to look at.
- Technical information
- Requests to our website carry ordinary technical information such as the IP address of the request, the browser and operating system reported by your device, and the page requested. The specific logs kept by our hosting provider, and how long they are kept, are recorded in section 7.
QuoteSketch does not ask for and does not want special categories of personal information, and you should not enter them into a quotation.
3. Where your information is stored
Where your information is kept depends on whether you are signed in.
While you type, the quotation stays on your device. When you save it (signed in), it is stored in your account in the cloud. Guest quotations are never sent. On the device, your browser keeps the information in its local storage, and keeps images such as logos and letterheads in IndexedDB, another part of the browser's storage.
If you use QuoteSketch as a guest, three practical consequences follow, and they are worth knowing before you rely on the Service:
- Each browser is a separate workspace. A different browser, a different computer, or a private/incognito window will not show the quotation you were writing elsewhere.
- Clearing your browsing data clears your quotation. If you clear site data for QuoteSketch, the quotation you were writing goes with it, and we cannot restore it because we never received it.
- Keep your own copies. Save or print every finished quotation as a PDF. Do that for anything you would be sorry to lose.
If you sign in, what you save is stored in the cloud, under your account. Your saved quotations, companies, clients, items, preset subjects, sales people, templates, quotation settings, preferences and consent record are stored in Cloud Firestore, and the logos, letterheads and page images on them in Cloud Storage for Firebase, both Google services, held in the United States in a space identified only by your account. Because of that, you can sign in on any device or browser and find the same information there, and it survives if one device's browsing data is cleared. Each device you use also keeps a working copy in its browser storage.
Only what you have saved is sent: the quotation you are typing stays on your device until you save it, and guest use, with no account, is never synced. The cloud copy is readable only by your account; the access rules refuse every other identity. A quotation you delete is removed from your device and marked deleted in the cloud, where the marker is kept for up to 30 days so the deletion reaches your other devices before it is removed. Deleting your account removes the cloud copy.
4. How information is used
Information is used for the purposes it was given for, and for nothing else without telling you:
- To provide the Service: to build, preview, print and export your quotations, to carry your saved details onto new ones, and, for an account, to keep your saved information available on every device you sign in on.
- To remember your preferences and your acceptance of the Terms and this Policy.
- To send the account emails described in section 2.
- To operate and secure the website, including preventing abuse and diagnosing faults.
- To answer you when you contact support or sales.
- To comply with legal obligations that apply to us.
We do not sell personal information, and we do not use the contents of your quotations for advertising.
5. Accounts and authentication
Guest use requires no account. You can open the Builder, produce a complete quotation and print or download it without identifying yourself.
Accounts are provided using Firebase Authentication, a Google service. When you create an account you supply an email address and a password. Those credentials are held and verified by Firebase Authentication; QuoteSketch does not store your password, and does not receive it in a form it could keep. Signing in, signing out and password resets are carried out by that service, and a password reset is sent as an email link from it to the address on your account. The display name you give is also stored with Firebase Authentication, and saved to your account so it shows on your other devices.
Your plan is recorded on your account in Cloud Firestore: whether you are on the Free plan or a Pro trial, when a trial ends, and whether we have given you complimentary Pro access. The app reads it from there each time you sign in. Your browser keeps a copy so the app can open quickly, but the copy grants nothing on its own, and you cannot raise your own plan from the app.
You are responsible for keeping your account credentials confidential and for activity carried out under your account. Tell us promptly if you believe an account has been used without your authorisation.
6. Cookies and local storage
QuoteSketch relies on your browser's storage rather than on cookies for the things that make the product work. That means two parts of the browser: local storage, which holds your quotation in progress, your saved quotations, your saved companies, clients, items, preset subjects and sales people, your quotation settings and your consent record; and IndexedDB, which holds images such as logos and letterheads, because they are too large for local storage. For a signed-in account this is the device's working copy of what is also stored in the cloud (section 3).
That storage is strictly necessary: without it, a quotation could not survive a page reload and nothing could be saved or reused.
Analytics, only with your consent. Four public pages of the website (the home page, pricing, sign-up and sign-in) use Google Analytics, a Google service, to understand how the site is visited. No other page loads it. It records page views, the page you came from, your browser and device type and an approximate location derived from your IP address, and it does so with cookies set by Google. It runs only after you choose Accept on the banner shown on your first visit; if you decline, or have not yet chosen, no analytics script is loaded and no cookie is set. Your choice is remembered in your browser's local storage and can be changed by clearing it. Analytics never runs inside the signed-in application, the Builder or the mobile app, and nothing about your quotations is measured.
QuoteSketch operates no advertising technologies and no other third-party tracking, and sets no cookies of its own.
You can control browser storage and cookies through your browser's own settings. Clearing them will reset your local preferences and consent record on that browser and remove what the browser holds: a guest's quotation in progress, and an account's unsaved changes. An account's saved information stays in the cloud and comes back when you sign in again.
7. Service providers
The Service is delivered over the internet, so some third parties are necessarily involved in making it reach you:
- Hosting. The website and application files are served by Firebase Hosting, a Google service, which processes ordinary request information such as IP addresses in the course of delivering them.
- Authentication. Accounts are provided by Firebase Authentication, a Google service, as described in section 5. Its software is served from our own site with the rest of the application.
- Cloud storage. For signed-in accounts, saved information is stored in Cloud Firestore and images in Cloud Storage for Firebase, both Google services, in the United States, as described in section 3. They process that information only to store it for your account and return it to your signed-in devices.
- Cloud Functions. A few tasks run on our behalf in Cloud Functions for Firebase, a Google service: deleting an account and everything stored for it (section 9), sending the cancellation confirmation email, and a daily check for uploaded images that no saved record uses any more (section 8).
- Account emails. The confirmation emails described in section 2 are sent by Firebase Trigger Email, a Firebase extension, through our email (SMTP) provider, which receives your email address and the message in order to deliver it.
- Analytics. With your consent, four public pages use Google Analytics, a Google service, as described in section 6.
- Fonts and icons. The typefaces and icons are served from our own site, through Firebase Hosting. No third-party font or icon service is used.
- Email. When you write to support or sales, your message and the address you sent it from reach us by email and are handled in the ordinary way, so that we can reply and keep a record of the matter.
- Payments. QuoteSketch does not currently operate paid subscriptions. No payment provider is connected, and no payment card details are collected by the Service. If paid subscription functionality is introduced, this policy will be updated to identify the payment service providers used and to describe the information processed through them; card details would in any case be handled by that provider rather than by us.
Where a provider processes personal information on our behalf, we require it to do so only on our instructions and to protect it appropriately.
8. Data retention
A guest's quotation is held only by the browser, so you control how long it is kept: it stays until you start a new one or clear your browser's data for the site. We hold no copy of it and therefore cannot restore or delete it for you.
For an account, we hold the cloud copy of what you save, and each of your devices keeps a working copy that you remove by signing out and clearing the browser's data for the site.
Information we hold is kept only as long as it is needed:
- The cloud copy of a signed-in account's saved information (section 3) is kept for as long as the account exists. A record you delete is marked deleted in the cloud and the marker removed after 30 days; deleting the account removes the copy.
- An uploaded image that no saved record uses any more (because you replaced a logo, for example) is found by a daily check and may be deleted once it has stayed unused for 30 days. If a record uses it again within that time, it is kept.
- Account information, your consent record and your preferences are kept for as long as the account exists, and for any period afterwards required by applicable law.
- Cancellation feedback, and the outbox copy of each account email sent to you, are kept so we can learn from the feedback and keep a record of what was sent. They are not removed when you delete your account; ask us and we will remove them.
- Correspondence with support or sales is kept only for as long as is reasonably necessary to deal with the matter and to keep a reasonable record of it, and then deleted, subject to any retention required by applicable law.
- Request information processed by our hosting provider is retained according to that provider's own practices for the service, and is not retained separately by us.
9. Account deletion and subscription cancellation
You can delete your QuoteSketch account at any time from inside the app.
Cancelling a subscription. QuoteSketch does not currently operate paid subscriptions and no payment provider is connected, so there is nothing to cancel and no charge is made. Until a payment provider is connected, Manage Subscription is not shown in Profile. A Pro trial ends by itself after 30 days and the account moves to the Free plan; complimentary Pro access ends on the date we gave you, or when we withdraw it. Your saved information is kept either way; only the Free plan's limits apply. When paid plans are introduced, Profile will show Manage Subscription, and this policy will be updated to describe how cancelling works and what happens to a period already paid for.
To delete your account:
- Sign in to QuoteSketch (web or Android).
- Open Profile.
- Tap Delete Account.
- Enter your password to confirm.
Once you confirm, your account and all associated data are permanently removed from our servers. This includes your saved quotes, clients, items, settings, and uploaded images. We do not keep backups, archives, or copies of your data anywhere else. Deletion is immediate and cannot be reversed, so please export anything you want to keep before you proceed. Cancellation feedback you gave and the outbox copy of the confirmation emails are kept separately from the account, as section 8 explains, and we remove them if you ask.
If you need help, email support@quotesketch.com.
10. Security
We use reasonable technical and organisational measures appropriate to the Service. A signed-in account's saved information is stored in Cloud Firestore and Cloud Storage for Firebase, and access rules allow only that account to read or change it. Information is sent between your device and these services over encrypted connections.
Some security measures are yours to control: keeping your device and browser up to date, using a screen lock, choosing a strong password, and not leaving a signed-in session open on a shared computer. A guest's quotation is held only by the browser, so protecting that device protects it.
No internet-based service can guarantee absolute security, and we do not claim otherwise. If we become aware of a breach affecting personal information we hold, we will act as required by applicable law.
11. Your rights and choices
Depending on where you live, you may have rights over personal information relating to you: typically to ask for access to it, to have it corrected or deleted, to object to or restrict how it is used, to receive a copy in a portable form, and to withdraw consent you have given.
Two things are worth knowing about exercising those rights with QuoteSketch:
- You can act on most of it yourself. You can view, correct, export and delete your quotations and saved information directly in the product, without asking us, and deleting your account removes your account and your saved information (section 9).
- For anything else we hold (correspondence, account information, cancellation feedback, server logs), write to support@quotesketch.com. We may need to verify who you are before acting on a request.
If you believe we have not handled a request properly, you may be entitled to complain to the data protection authority in your own country. We would ask you to raise it with us first at support@quotesketch.com so that we have a chance to put it right.
12. Children
QuoteSketch is a business tool and is not directed to children. We do not knowingly collect personal information from anyone below the age required by applicable law to consent to the use of an online service. If you believe a child has provided personal information to us, contact support@quotesketch.com and we will delete it.
13. International transfers
QuoteSketch is available over the internet, and the providers named in section 7 operate global infrastructure that may process information in countries other than your own. A signed-in account's saved information is stored in the United States, in Cloud Firestore and Cloud Storage for Firebase, so if you live elsewhere it is transferred there. Where personal information we hold is transferred across borders, we take the steps required by applicable law to protect it. This policy will be updated as our service providers and infrastructure are added to or changed.
A guest's quotation is not transferred anywhere, because it does not leave the device.
14. Changes to this policy
We may update this policy as the Service changes. The version identifier and update date at the top of this page tell you which version you are reading.
Where a change is material, we will make the change visible rather than quiet, and where the law requires it we will ask you to review and accept the updated version before continuing to use the Service. QuoteSketch records which version of this policy you accepted, so a new version can be recognised as new.
15. Contact
Questions about this policy, and requests about personal information, can be sent to QuoteSketch at support@quotesketch.com. Privacy enquiries are handled through that address.
Other ways to get in touch are on the Contact page.