Privacy, in plain language.
QuoteIron is built local-first: your business data — your price book, clients, quotes, and invoices — lives on your device. We designed it that way on purpose. Using the app requires a lightweight account — just an email address and a passkey or magic-link sign-in, no password — and it comes with an automatic, encrypted cloud backup we can't read. Details below.
What we don't collect
- Creating an account only gives us your email address, a passkey or magic-link credential, and your subscription status — not your clients' names, your prices, or your business documents. Those stay on your device.
- We never process or hold payments between you and your customers.
What we do collect
- Website analytics: anonymous, aggregate counts only. Page views are tallied per day, page, referrer domain (or ad-campaign label), and country — never your IP address, device, or any ID that could identify you — and we honor Do-Not-Track. Shared estimates and invoices are tracked the same way: how many were viewed, approved, or declined, by day and document kind only, never which document or client. No cookies, no third-party trackers, and no sale of data.
- Email address: required to create an account — used to sign you in (passkey or magic link) and for support and billing receipts.
- Purchase records: handled by our payment processor, Stripe — we see order and subscription details, never full card numbers. Stripe's own privacy terms govern your payment data.
Cloud backup
Creating an account automatically sets up cloud backup: your book is encrypted on your device before it ever leaves it, so what we store is ciphertext we cannot read. Only your passkey or your recovery code — given to you once, at setup — can unlock it; losing all your passkeys and your recovery code means the backup can't be recovered, by you or by us. We can see when a backup happened and how large it is; we can never see your prices, clients, or documents.
Share links
Send a customer a link to an estimate or invoice, and we host an encrypted copy of that one document so the link works — encrypted on your device before it's uploaded, with the key living in the link itself, which never reaches us. We can't read it. The link auto-expires after about 180 days of inactivity, and while we record that it was viewed or approved (so your app can show status), we can't see what's in it.
Questions
[email protected] · QuoteIron is a product of 20M HODL LLC, St. Petersburg, Florida, USA.