Privacy Policy

This is a standard starting template, not legal advice — reviewed by Mahmas Studio, not a lawyer. It's a reasonable, honest draft of how QuoteBuddy handles data, not a polished legal document. Get it checked by a professional before relying on it.

Last updated 8 September 2026

Who we are

QuoteBuddy is a voice-to-quote tool for tradespeople, built and operated by Mahmas Studio. This policy covers the QuoteBuddy web app and marketing site.

What we collect

Account and business details you enter: your name, email, password (stored hashed by our auth provider), business name, ABN, phone number, business logo, default hourly rate and GST setting.
Quote content you create: job descriptions, voice recordings you make in the app (which are transcribed to text), line items, prices, notes and quote status.
Your customers' details that you enter to send a quote: customer name, email address and phone number. You are responsible for having a lawful basis to provide these to us.
Billing information for paid subscriptions, handled by Stripe. We do not see or store full card numbers; we keep a Stripe customer/subscription reference and your plan status.
Technical and session data: a sign-in session token, plus standard server logs (IP address, timestamps, error traces) used to run and secure the service.

How we use it

To provide the service: creating, pricing, storing and displaying your quotes.
To draft quote content with AI from your voice or typed input (see "AI-generated content" below).
To email quotes and follow-ups to the customer addresses you enter.
To process your subscription and manage your plan.
To keep you signed in, prevent abuse, debug problems and improve the product.

We don't sell your data and we don't use it for third-party advertising.

Service providers we share data with

Supabase — authentication and the primary database. Your account, business and quote data is stored in a Supabase project hosted in Sydney, Australia (AWS ap-southeast-2).
OpenAI — used to transcribe your voice notes and to draft quote line items and wording from your input. The text and audio you submit for a quote is sent to OpenAI's API to generate that draft.
Stripe — subscription billing and payment processing. Stripe handles card data directly under its own terms and privacy policy.
Resend — sends the quote and follow-up emails to your customers on your behalf. The recipient address, your business name and the quote summary are included in those emails.

Some of these providers may process data outside Australia. We rely on their contractual and security commitments to protect it.

AI-generated content

Quotes are drafted by an AI model from what you say or type. AI output can be wrong, incomplete or mispriced. Every quote is editable, and you should review and correct each one before you send it to a customer. You are responsible for the final quote.

Cookies and sessions

We use a sign-in session token (stored in your browser) to keep you logged in and to secure requests to our server. We don't use third-party advertising or analytics tracking cookies. Clearing your browser storage will sign you out.

Retention

We keep your account and quote data for as long as your account is active, and for a reasonable period afterward to meet legal, tax and dispute-resolution needs. Emails sent through Resend and billing records in Stripe are retained under those providers' policies.

Your choices and rights

You can view and update your business details in the app at any time. You can request a copy of your data, correction of it, or deletion of your account and its associated data. Use the account controls in the app, or the contact method published on this site. (A dedicated contact address is being set up and will be added here.)

Children

QuoteBuddy is a business tool and is not directed at children. Don't use it if you are under 16.

Changes

We may update this policy as the product changes. Material changes will be reflected by the "last updated" date above.