Privacy Policy

Questions: privacy@otechlabs.io (or support@otechlabs.io). QuoteProof is operated by Otech Labs LLC, 33 W Palmer St, Danielson, CT 06239.

What we collect

• Account. Your name, email, and password (stored hashed by our auth provider). If you sign in with Google, we receive your name and email from Google.
• Business settings. Company name, trade, labor and travel rates, suppliers, and your base address (used to calculate drive distances).
• Jobs & clients. Job details and the client name, phone, email and site address you enter to send quotes and proof reports.
• Photos & precise location. Photos you capture or upload for a job. When available, we read the photo's original capture time and GPS coordinates (precise location) from its metadata to document when and where work was done. Photos are stored securely and shown only on your account's jobs and the private links you choose to share.
• When you tap ‘Use where I am’, or upload a photo that contains GPS data, we collect its precise location to fill in your address and stamp the photo in your proof report. Coordinates are sent to Google Maps Geocoding and, as a fallback, OpenStreetMap Nominatim to look up the address. We store photo coordinates with your job; the uploaded image file has its location metadata removed. You can type addresses instead and deny location permission.
• Device & usage. Basic app and device information (web, iPhone or Android app, and app version) and error diagnostics to keep the app working. We also record, tied to your account, which screens you open and which features and buttons you use (for example, finishing a setup step, opening a help topic, or tapping send), and how a quote the AI drafted is edited before it is sent, as numbers only (for example, how many lines or hours changed and by what percentage). These records never contain your customers' names, addresses, phone numbers or emails, your notes, line-item descriptions, or photos.
• Support requests. When you ask us for help in the app or with the “Trouble signing in?” form: your email, what you wrote, and the screen and app you used. Our replies are kept with your request. To stop abuse of the public form we keep a one-way scrambled (hashed) copy of your IP address for 48 hours, and sign-in help requests are deleted after 180 days.

How we use it

To run the core features: drafting quotes, calculating prices and travel, generating proof reports, and delivering the quote/proof/booking links you send. Existing-condition photos and your notes are sent to our AI provider solely to draft a quote or completion summary that you review and edit. We use the usage records described above only to improve QuoteProof (for example, to see where setup gets stuck and how accurate AI drafts are) and to help you when you contact support. They are kept by us (first-party, no third-party analytics or advertising tools), are not shared, and are not used for ads or tracking across other apps or websites. We do not sell your data or use it for advertising.

Who we share it with

• Infrastructure and database hosting (Supabase / Lovable Cloud).
• Google Gemini, reached through the Lovable AI Gateway, which drafts quotes and summaries. It receives the job name, the job-site address, site access notes, work types, your notes, rates and supplier names, photo captions, and your job photos (through links that expire after 10 minutes). Job names and notes may contain customer names.
• Stripe, for subscriptions bought on the web; Apple In-App Purchase for subscriptions bought in the iPhone app; and RevenueCat, which keeps track of in-app subscription status using an app user ID and Apple transaction IDs (never your card).
• Map/geocoding services to measure drive distance from an address.
• Google Fonts, which serves the site's fonts (Google receives your IP address when they load).
• People you explicitly share a quote, proof, or booking link with.

Cookies and similar

We don't use advertising or cross-site tracking cookies. Our host's security service (Cloudflare) sets __cf_bm to filter bots, and our hosting sets __dpl to keep you on one version of the site. Both are strictly necessary and expire quickly. We count page views with our hosting provider's first-party analytics (Lovable), which doesn't use advertising IDs. The app also saves your settings in your browser's local storage.

Client details you enter about other people

QuoteProof is a business tool for contractors. To send a quote, book a job, or produce a proof report, the contractor enters details about the customer they are working for — a name, phone, email and job-site address. When you enter another person's details, you confirm that you have a direct working relationship with that person and their permission to store this information and contact them about their job. You are responsible for that permission; QuoteProof only processes these details on your behalf to run the features you ask for.

We do not sell this information, share it with data brokers, or use it for advertising. A customer's details are visible only on your account's jobs and on the private quote, proof, or booking links you choose to send them. When a customer fills in a booking form you sent, they are entering their own details directly and are shown a short notice and a link to this policy before they submit.

If you are a customer of a contractor who uses QuoteProof and you want your details corrected or removed, ask that contractor (they control the record), or email support@otechlabs.io and we will help route the request.

Retention & deletion

We keep your data while your account is active. You can permanently delete your account and all associated jobs, quotes and photos at any time from Settings → Delete account, or at quoteproof.dev/account/delete, or email support@otechlabs.io. Deletion is immediate and irreversible; shared links stop working at once. Usage records are deleted automatically after 180 days, and right away when you delete your account.

Your choices

You control what photos and client details you enter. On the app you can allow or deny camera, photo library, microphone and location access in your device settings; denying some may limit features (for example, location won't be stamped on proof photos).

Children

QuoteProof is a business tool and is not directed to children under 13.

Changes

We'll update this page and the effective date when this policy changes.