Privacy policy

Who this covers

This policy covers two groups: the businesses who subscribe to the service ("customers"), and the people those businesses were quoting ("recipients") whose contact details the customer adds to the service.

What we collect from customers

• Account details: name, email address, password hash held by our auth provider.
• Business details: business name, trade, phone, website, timezone, business hours.
• Billing details held by our payment provider. We never receive card numbers.
• Usage records: messages sent, quotes added, sign-in times, actions taken.

What we hold about recipients

• Name, email address and/or mobile number as supplied by the customer.
• The estimate amount, date and service type the customer recorded.
• The basis the customer attested for contacting them, and when it was recorded.
• Messages sent, replies received, delivery outcomes, and opt-out status.

The customer decides who is added. We process that data to deliver follow-up on the customer's behalf, and we do not sell it, rent it, or use it to market to recipients on our own behalf.

Why we process it

To provide the service, bill for it, prevent abuse and spam, meet messaging requirements, keep the service secure and reliable, and answer support requests.

Who we share it with

Only the service providers needed to run the product: hosting and database, transactional email delivery, text messaging (when enabled), payment processing, and error monitoring. Each receives only what it needs. We also disclose data where the law requires it.

How long we keep it

Account and quote data is kept while the account is active. After cancellation it is retained for a defined retention window so the account can be reactivated without losing history, then deleted. Opt-out and suppression records are kept indefinitely on purpose — deleting them would risk contacting someone who asked not to be contacted.

Your controls

• Export your quotes, contacts and message history at any time.
• Request deletion of your account and its data.
• Correct your business and account details yourself.
• Ask us what we hold about you.

A recipient who wants their details removed should ask the business that quoted them; that business can suppress and delete them, and we will act on a direct request too.

Cookies

We use cookies that are necessary to keep you signed in and to keep the service secure. We use privacy-conscious product analytics to understand where people get stuck; it is not used to build advertising profiles.

Security

See our security page for how accounts are separated, what is encrypted, and how administrative actions are logged.

Changes and contact

We will post material changes here. A published privacy contact address is an outstanding owner action and will be added before commercial launch.