Privacy notice
1. About this policy
This notice describes the current private pilot of Easy Quotation Desk, a tool for preparing business quotations. It covers information handled by this application. Your company remains responsible for the customer and business information it enters. For pilot privacy questions, contact the project administrator who provided your access.
2. Information handled
Company administrators may create managed employee accounts with a name, mobile number, optional contact email, unique username, permissions and temporary password. Contact email does not replace the employee login or change authentication. Supabase stores and verifies their passwords. The application stores account status, required password change, last login and administrative action records; it does not store or reveal password text. A non-deliverable internal authentication identifier is used for these employee accounts; employee password recovery is handled by the manager. A disabled employee remains in the seat count.
Account information includes the Supabase account identifier and verified email. Supabase processes password authentication, email confirmation and password recovery; this application does not store plaintext passwords. Business records include company and customer names, addresses, contact details, tax registration numbers, product and service descriptions, quantities, units, prices, currencies, discounts, taxes, terms, notes, custom fields, selected payment methods and payment schedules. If you enter bank-transfer details, these can include the beneficiary, bank name, account number, IBAN and SWIFT code. Uploaded images include company logos, stamps and authorized signatures. Quotation status, document layouts and saved item libraries are also stored. Hosting and sign-in providers may handle technical connection and security information under their own policies.
3. Why it is used
Information is used to identify the signed-in account, save and load that account’s records across devices, calculate and format quotations, maintain reusable items, and generate previews, PDFs and backups at your request. The current application does not include advertising trackers, payment-card collection, automated marketing or automatic sending of quotations to customers. Users can generate PDF files on their device and choose to share them through the device share menu, email drafts or WhatsApp drafts. Selected files are held in browser memory for sharing, not uploaded to the application’s database. The external app receives the content you choose to share under its own privacy practices. Any later addition that changes these practices will require an updated notice.
4. Cloud storage and local copies
Business records are stored in a cloud database associated with the signed-in account. The browser also uses local storage for recovery copies, including data entered before the cloud upgrade. The application clears its local company recovery copies when signing out. Supabase maintains the signed-in session in browser storage until logout or expiry. On a shared device, sign out and clear this site’s browser data when appropriate. Downloaded JSON backups and PDFs remain wherever you save or share them; they are outside the application’s subsequent control.
5. Service providers and access
Supabase supplies email/password authentication and confirmation/recovery emails. Cloudflare Workers and D1 supply hosting, server processing and structured business-record storage. These providers may process information outside your country. No UAE-only storage location is promised. Application requests require a signed-in identity. Company owners can invite users by email; accepted members receive permissions assigned by the owner. Quotation ownership is recorded against the verified creator: employees can read and act only on their own quotations, while the company owner can access all company quotations. Historical documents without a reliable creator record are visible to the owner only. Customer and item libraries remain shared according to existing permissions. Read access includes the company’s records, prices and uploaded images. Only the owner assigns permissions and manages company seats; delegated user administrators can invite and remove ordinary users. Invitation records include recipient email, expiry and a hashed token. Links are generated for the owner to share; the application does not send invitation emails. Business-record access is controlled by verified login and company membership; this is not a promise that an administrator or infrastructure provider can never access stored information. Provider practices are described in their own privacy notices.
6. Stamps, signatures and historical records
Only upload images you are authorized to use. Stamp and signature images can be reproduced on quotation documents when enabled. Saved quotations retain their company-image references. Removing an image from company settings does not remove it from previous quotations or from retained image records, downloaded backups or PDFs. Likewise, deleting a customer or archiving an item does not erase references already saved in quotations. Contact the administrator if you need a broader removal request.
7. Retention and your choices
The pilot has no automatic expiration or account-erasure schedule. Records are retained until changed or removed through available controls or administrator action. You can review and edit records, export a JSON backup in Company settings, and remove individual quotations or customers using the application. Removing records does not guarantee immediate erasure of provider-managed copies. Depending on applicable law, you may request information, correction, access, portability, deletion or restrictions by contacting the pilot administrator. Requests may require identity verification and consideration of applicable obligations.
8. Security and updates
The site uses HTTPS, Supabase sign-in and server-side account checks. Browser recovery copies and exported files are not protected by a separate application password or application-level encryption. Keep your account, devices and exported files secure. No service can guarantee absolute security. This page will be updated when the product’s data practices change; the revision date appears above. This pilot notice does not replace a provider’s privacy policy.