What this policy covers

This policy explains what data QuotationStudio processes when you create an account and issue quotations and invoices, why it is processed, how long it is kept, and what rights you have.

Data we process

• Account data: email, name, company name and subscription state.
• Business data: your business profile, logo and stamp, and any bank details you enter.
• Document data: the customers, products, line items, taxes and terms you write.
• Optional usage data: page visits and sign-ins — collected only after you consent.
• Payment records: created only once payments are switched on, and handled by the payment provider.

Why we process it

To deliver the service you asked for (creating, storing and sharing documents), to protect accounts and prevent abuse, and to meet accounting and tax obligations. Optional analytics rely on your consent, which you can withdraw at any time.

Storage, security and location

Data is stored in a Supabase database with per-account isolation enforced at the database level, and files are kept in private storage reachable only through short-lived links. The application is hosted on Lovable infrastructure. Processing may take place outside the UAE at the service providers listed below.

Sub-processors

• Supabase — Database, authentication and private file storage (Cloud region assigned to this project)
• Lovable — Application hosting and delivery (Global edge network)
• Stripe — Card payments — only once payments are switched on (Global)

Retention

Organization closure revokes shares, stops jobs/member access and purges non-retained drafts, catalog and reply content. Issued revisions, acceptance/receipts, settlements and billing evidence are retained for the operator-confirmed legal period; without confirmation they are never auto-erased. Operational inbound bodies are eligible for removal after 90 days; the job is not enabled yet. AI pasted requests are ephemeral.

Your rights

You can access, correct, export and delete your data from Settings → Data & privacy, and you can withdraw analytics consent at any time.

Documents are your responsibility

The documents you create are human-readable documents, not a structured accredited eInvoice. You remain responsible for the accuracy of tax numbers, tax categories and legal details in your documents.