Introduction

Quotejam ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our quotation management service.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained therein. This policy describes how we handle personal information in accordance with these requirements.

Information We Collect

We collect information you provide directly to us, including:

Account information (name, email address, company name)
Business data (products, pricing, customer information for quotations)
Payment information (processed securely by our payment provider)
Communications you send to us

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send technical notices, updates, and support messages
Respond to your comments, questions, and requests
Monitor and analyze trends, usage, and activities

Our Data Promise

We believe in being explicit about what we will never do with your data. This is not just policy—it's a core principle of how we operate.

We will NEVER:

Sell your data - Your data is not a product. We will never sell, rent, or trade your personal information or business data to any third party.
Use your data for advertising - We will never use your data to serve you ads, create advertising profiles, or share data with advertising networks.
Share data for third-party marketing - We will never share your information with other companies for their marketing purposes.
Mine your content for commercial purposes - Your quotations, customer lists, and product catalogs belong to you. We will never analyze this data to gain competitive insights or sell to your competitors.
Contact your customers - We will never reach out to your customers directly for any marketing or sales purposes.
Train AI models on your data - We will never use your business data to train machine learning models that benefit other customers or are sold commercially.

We ONLY use your data to:

Operate and deliver the Quotejam service to you
Improve our product based on aggregated, anonymized usage patterns
Provide customer support when you contact us
Send you transactional emails related to your account (invoices, password resets, etc.)
Comply with legal obligations

Data processors vs. data sharing: We use third-party services (listed below) that process your data on our behalf to operate the service. This is necessary and standard. These processors are contractually prohibited from using your data for their own purposes. This is fundamentally different from "sharing" data with third parties for their benefit.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Encryption in transit - All data transmitted between your browser and our servers uses TLS 1.3 encryption
Encryption at rest - All stored data is encrypted using industry-standard AES-256 encryption
Access controls - Strict access controls limit who can access production data
Authentication security - We use Kinde for authentication, which provides enterprise-grade security including MFA support
Infrastructure security - Our infrastructure is hosted on Cloudflare, which provides DDoS protection and security monitoring

While we take security seriously, no system is 100% secure. We encourage you to use strong passwords and enable multi-factor authentication when available.

Breach Notification

In the event of a data breach that is likely to result in serious harm to affected individuals, we will:

Notify affected users as soon as practicable, and no later than 30 days after becoming aware of the breach (as required by the Notifiable Data Breaches scheme under the Privacy Act 1988)
Provide clear information about what data was affected
Explain what steps we are taking to address the breach
Offer guidance on steps you can take to protect yourself
Report to the Office of the Australian Information Commissioner (OAIC) as required by law

Data Retention

We retain your information according to the following guidelines:

Active accounts - Data is retained for as long as your account is active
Cancelled accounts - Data is retained for 30 days after cancellation to allow for account recovery, then permanently deleted
Deleted accounts - Data is permanently deleted within 30 days of deletion request
Billing records - Retained for 7 years as required by financial regulations
Error logs - Automatically deleted after 90 days

You can request immediate deletion of your data by contacting us at privacy@quotejam.com.

Data Location and Processing

Your data is processed and served through Cloudflare's global network, which spans data centers in over 300 cities worldwide. Primary data storage is in the United States, with edge caching distributed globally for performance. By using our service, you consent to your data being transferred to and processed in the United States and other countries where our service providers operate.

We use Cloudflare's infrastructure for hosting, content delivery, and security services. This means your requests are routed through the Cloudflare data center nearest to you, providing both performance and security benefits regardless of your location.

Your Rights

Regardless of your location, we provide the following rights to all users:

Access - You can view all your personal data through your account settings
Correction - You can update your personal information at any time through your account
Deletion - You can request deletion of your account and all associated data
Data portability - You can request a copy of your data by contacting us
Objection - You can object to certain processing activities by contacting us

To exercise any of these rights, you can use the tools in your account settings or contact us at privacy@quotejam.com. We will respond to all requests within 30 days.

Additional Rights for Specific Regions

Depending on where you are located, you may have additional rights under local privacy laws.

European Economic Area (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR) including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at support@quotejam.com.

California (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@quotejam.com.

Your Data

We believe your data belongs to you. If you need a copy of your data, contact us at privacy@quotejam.com and we will provide it in a standard format within 30 days.

Children's Privacy

Quotejam is a business service and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at privacy@quotejam.com and we will take steps to delete such information.

Service Availability

Quotejam is headquartered in Australia and provides customer support during Australian Eastern Standard Time (AEST) business hours. All features are available globally. Our service is hosted on Cloudflare's global network, ensuring reliable access regardless of your location.

Cookies and Tracking

We use the following types of cookies and similar technologies:

Essential cookies - Required for authentication and core functionality. Cannot be disabled.
Analytics cookies - PostHog analytics to understand how our service is used. Helps us identify issues and improve features.

You can control cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from using the service.

Third-Party Services

We use the following third-party services to operate Quotejam. Each has their own privacy policy governing their use of your information:

Stripe - Payment processing. Handles your payment information including card details, billing address, and transaction history. (Privacy Policy)
Kinde - Authentication and user management. Stores your login credentials, email address, and profile information. (Privacy Policy)
PostHog - Product analytics. Collects anonymized usage data to help us understand how our service is used and improve the user experience. (Privacy Policy)
Resend - Email delivery. Sends transactional emails including quotation notifications, password resets, and account updates. (Privacy Policy)
Sentry - Error monitoring. Captures technical error information to help us identify and fix issues. May include anonymized user context when errors occur. (Privacy Policy)
Cloudflare - Hosting and infrastructure. Your data is stored and served through Cloudflare's global network. (Privacy Policy)

AI Assistant Integrations

Quotejam offers optional integrations with AI assistants (such as Claude and ChatGPT) through the Model Context Protocol (MCP). When you connect an AI assistant:

Your data is transmitted to the AI provider — This may include customer names, email addresses, product information, and quotation details, depending on how you use the assistant.
You initiate the connection — AI access requires explicit authentication via OAuth. No data is shared with AI services unless you connect an assistant.
Third-party processing — Data transmitted to AI providers is subject to their respective privacy policies. Quotejam does not control how AI providers process, store, or use data sent to them.
You can disconnect at any time — Revoking an AI assistant's access immediately stops future data transmission. Data already transmitted to the AI provider is subject to their data retention policies.

We recommend reviewing the privacy policy of any AI service before connecting it to Quotejam.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@quotejam.com.