Privacy Policy

QuoteForge is provided by Walter Christmas, an individual doing business as QuoteForge. This policy explains what information we collect when you use QuoteForge, how we use it, and your choices. For questions or requests, email support@quoteforgeusa.com or write to Walter Christmas, 3602 Hewitt St, Greensboro, NC 27407, United States.

• Account information: your name, email address and password (stored only in hashed form by our authentication provider), and your role in each workspace.
• Workspace content: what you and your team put into QuoteForge, such as RFQs, documents and drawings, customer and supplier names and contact details, quotations, emails and notes.
• Company settings: company name, address, phone, email, website, logo and quote defaults.
• Billing information: your plan and billing history. Card details are entered on Stripe's pages and handled by Stripe; QuoteForge never receives your full card number.
• Usage and technical information: activity logs inside your workspace, usage counts for plan limits, and server logs (such as IP address, browser type and errors) used to keep the Service secure and working.

• to provide the Service: store your work, run the features you use, send the emails you approve, and show your team activity;
• to run AI features you start, such as reading an RFQ's documents or a supplier's quote;
• to manage accounts, billing, plan limits and support;
• to keep the Service secure, prevent abuse and fix problems;
• to send service messages (for example invitations, password resets, billing notices). We don't send marketing email without your consent.

We do not sell your personal information, and we don't use Your Content to advertise to you.

When you run an AI feature, the relevant document text and images are sent to our AI provider, Anthropic, through its commercial API to produce the result. Under Anthropic's commercial terms, this data is not used to train its models. QuoteForge does not use Your Content to train AI models either.

We share information only with providers that help us run the Service, and only as needed for that purpose:

• Supabase: database, file storage and sign-in;
• Vercel: hosting of the website and application;
• Anthropic: AI document reading, when you start it;
• Resend: delivery of emails sent by QuoteForge;
• Stripe: payments and subscription management.

We may also disclose information if the law requires it, to protect rights and safety, or as part of a business transfer (in which case this policy continues to apply to your information).

QuoteForge uses only cookies that are needed for it to work: to keep you signed in and to remember which workspace you're using. We don't use advertising or third-party tracking cookies. The full list is in our Cookie Policy.

We keep workspace content while the workspace is active. When you delete your account or an admin deletes a workspace, the data is removed from QuoteForge straight away; copies in our providers' encrypted backups expire within 30 days. Billing records are kept by our payment processor as the law requires. Server logs are kept for a limited period for security.

Each workspace's data is kept separate by access rules enforced in the database. Connections are encrypted (HTTPS), files are stored privately, secret keys never reach your browser, and emails to customers and suppliers need a person's approval before they are sent. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.

• You can view and update your name in Settings, and admins can update company details and remove team members.
• Delete your data yourself: delete your account under Settings → Your account; an admin can delete a whole workspace under Settings → Workspace.
• You can also ask us for a copy of your personal information, or to correct or delete it, by emailing support@quoteforgeusa.com. We respond within 30 days (or sooner where the law requires).
• Emails: QuoteForge only sends emails needed for the service (sign-in, invitations, password resets, and emails your team approves). We don't send marketing emails; if we ever do, each will include a one-click unsubscribe link.
• Depending on where you live (for example California), you may have additional rights under local privacy laws. We will honor those rights and will not treat you differently for using them.
• If your information was added to QuoteForge by one of our customers (for example, as their supplier contact), please contact that company first; we will help them with your request.

QuoteForge is operated from the United States, and our providers may process information in the United States and other countries. We use providers that protect information with appropriate safeguards.

QuoteForge is a business service for people aged 18 or over; everyone confirms this when creating an account. We don't knowingly collect information from children. If you believe a child has given us information, email support@quoteforgeusa.com and we will delete it.

We may update this policy. For material changes we will notify you by email or in the Service before they take effect. The effective date at the top shows when it last changed.