Privacy Policy

Quote-Chaser is the data controller for personal information used to create and administer Quote-Chaser accounts, operate the service and provide support. You can contact us at support@quote-chaser.com.

When a business user adds information about their own customers, that business user decides why and how that information is used. In that context, the business user is normally the controller and Quote-Chaser acts as its service provider.

• Account information: name, email address, authentication identifiers and account activity.
• Business settings: business name, telephone number, address, branding, review link and message templates.
• Customer and quote data: customer names, contact details, addresses, notes, job descriptions, quote values, dates, statuses, follow-up history and PDF quote content.
• Technical information: essential security, diagnostic and service logs, such as IP address, browser information and error details.
• Support correspondence: information supplied when you contact us.

Please do not store special-category or highly sensitive personal data unless it is genuinely necessary and you have a lawful reason to do so.

We use personal information to provide accounts, store and display records, generate quotations, schedule follow-ups, open customer communications, maintain security, diagnose faults, answer support requests and improve the service.

Our lawful bases are normally performance of our contract with account holders, our legitimate interests in operating and securing the service, compliance with legal obligations and, where required, consent.

Quote-Chaser prepares links and message text for calls, WhatsApp follow-ups and review requests. The account holder chooses whether to send them and is responsible for having a lawful basis for contacting each customer and for complying with applicable direct-marketing rules.

We use trusted service providers to host and operate Quote-Chaser, including Supabase for authentication and database services, Vercel for application hosting and delivery, and PostHog for limited product analytics. They process information under contractual and security obligations. We may also disclose information where required by law, to protect legal rights or in connection with a business sale or restructuring.

We do not sell personal data.

Some service providers may process information outside the United Kingdom. Where that happens, we use appropriate safeguards recognised by UK data-protection law, such as adequacy regulations or approved contractual protections.

We use access controls, encrypted connections, managed infrastructure and database Row Level Security designed to keep each authenticated user's records separate. No online service can guarantee absolute security, so users must keep login details secure and notify us promptly of suspected unauthorised access.

We keep account and service data while an account is active and for a limited period afterwards where needed for recovery, security, fraud prevention, legal claims or statutory obligations. Support and transaction records may be kept for longer where the law requires it. Backup copies are removed through normal backup rotation.

Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase or restrict your information, object to certain processing and receive portable data. You may also withdraw consent where processing relies on consent.

Your right to object: you can object at any time to personal information being used for direct marketing. If you do, that use will stop.

To exercise a right, email support@quote-chaser.com. We may need to verify your identity. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Quote-Chaser uses essential browser storage and authentication cookies to keep users signed in, protect accounts and provide the service.

We use PostHog to record a limited set of product events such as account registration, login, customer and quote creation, and PDF generation. Events use a pseudonymous account identifier and do not include customer names, contact details, job descriptions, quote values or PDF contents. PostHog autocapture and session recording are disabled, and browser analytics are configured without persistent analytics cookies. We use this information for our legitimate interest in understanding and improving the service.

If advertising technologies or broader optional analytics are introduced, this policy and the appropriate consent controls will be updated first.

We may update this policy when the service, our providers or the law changes. Material changes will be highlighted in the service or communicated by email where appropriate.