Privacy notice
Local MVP notice · version 1 · October 24, 2026. The operator must add its legal identity, privacy contact, jurisdiction-specific disclosures, and retention review before public launch.
Free tool data
Pricing inputs, profit figures, customer details, and estimate logos are processed in your browser. They are not sent to our server unless you explicitly save a calculation or estimate in your workspace. A downloaded document stays wherever you save it. Calculator inputs are remembered on this device unless you disable saving. Estimate drafts, including customer details, are saved only if you enable Save this estimate on this device. Saved copies expire after 30 days and can be deleted in the tool. Leaving the page clears unsaved estimate data.
Your optional workspace
An account stores your email, a salted password hash, a hashed recovery code, company profile, customer records, saved service prices, named pricing/profit calculations, estimate versions and follow-up dates. Sign-in uses an essential HttpOnly cookie that expires after 30 days; HTTPS deployments use Secure cookies. Share links are private bearer links: anyone with the link can open and respond to the published estimate. Link-open counts and response names are recorded, without verifying recipient identity. Your own previews also count. Revoke links before editing an open estimate. Accepted or declined versions stay locked; make a new copy for revisions. Workspace data is retained until you delete your account. Export your data or delete your account from the company profile. The local database is on this machine; cross-device access requires deployment of this same service, HTTPS and a persistent database. Backups may retain deleted records until the operator removes or expires those backups.
Feedback and early access
We store feedback descriptions, any email you choose to provide, selected tool context, and optional diagnostic screen dimensions and language. We store early-access details and the time and version of your consent. These are private to authorized administrators.
Optional analytics
Tracking starts after you select Allow analytics. It uses random identifiers to estimate visitors and 30-minute sessions, page paths, tool activity, coarse device/browser categories, referrer hostname, and sanitized campaign label. It does not include raw calculator inputs, email, customer names, or precise location. Country attribution is unavailable. Client tracking can be blocked and is incomplete.
Essential security
Admin sessions use a secure cookie in production, expiring after eight hours. We rate-limit public submissions and log administrative actions. IP-derived rate-limit keys are hashed; proxy trust must be configured correctly in deployment.
Control and retention
Use Privacy choices to disable future analytics, remove browser identifiers, and delete the current tracked session. Save your early-access withdrawal code and use Withdraw interest to delete that registration. Analytics and sanitized error records are retained for 90 days by the retention task; inactive leads and closed feedback for two years, admin audit logs for one year. The operator must schedule this task. Backups age out according to operator policy.
Access and deletion requests
For access or deletion requests, use the support email linked below or submit a private request on the Contact page. We may need to verify account ownership before acting. Do not include sensitive identity documents. Automated website email notifications and advertising trackers are not configured.
For privacy requests, email support@quotilane.com.
Withdraw early-access interest