Privacy, in plain language.

QuoteIron is built local-first: your business data — your price book, clients, quotes, and invoices — lives on your device. We designed it that way on purpose. Using the app requires a lightweight account — just an email address and a passkey or magic-link sign-in, no password — and it comes with an automatic, encrypted cloud backup we can't read. Details below.

What we don't collect

• Creating an account only gives us your email address, a passkey or magic-link credential, and your subscription status — not your clients' names, your prices, or your business documents. Those stay on your device.
• We never process or hold payments between you and your customers.

What we do collect

• Website analytics: anonymous, aggregate counts only. Page views are tallied per day, page, referrer domain (or ad-campaign label), and country — never your IP address, device, or any ID that could identify you — and we honor Do-Not-Track. Shared estimates and invoices are tracked the same way: how many were viewed, approved, or declined, by day and document kind only, never which document or client. No cookies, no third-party trackers, and no sale of data.
• Email address: required to create an account — used to sign you in (passkey or magic link) and for support and billing receipts.
• How you found us and how you get on: when you create an account we record a few plain signals about your relationship with the service — never about your work. That's which door you came in (the website or the app), which page or ad brought you and whether it was an ad click (we keep only that it was one, never the tracking value), the language you use the app in (so our emails match it), and a handful of product milestones kept as simple timestamps — when you first made a quote, first sent one, first had one approved, and first subscribed. We use these to make the product and our emails better, nothing else. We never record what's in your quotes, invoices, prices, or clients — your book stays sealed on your device, as always. No cookies or third-party trackers are involved, and none of this is ever sold.
• Marketing list (optional, and separate from your account): if you enter your email on the Book Builder to get launch news and pricing tips, that goes on a marketing list kept apart from any app account — neither is ever derived from the other. We use double opt-in: you get a confirmation email and are added only if you click to confirm. Every email carries a one-click unsubscribe link, and unsubscribing takes you off immediately. The list holds your email address and nothing else, and we never sell it.
• Purchase records: handled by our payment processor, Stripe — we see order and subscription details, never full card numbers. Stripe's own privacy terms govern your payment data.

Cloud backup

Creating an account automatically sets up cloud backup: your book is encrypted on your device before it ever leaves it, so what we store is ciphertext we cannot read. Only your passkey or your recovery code — given to you once, at setup — can unlock it; losing all your passkeys and your recovery code means the backup can't be recovered, by you or by us. We can see when a backup happened and how large it is; we can never see your prices, clients, or documents.

Share links

Send a customer a link to an estimate or invoice, and we host an encrypted copy of that one document so the link works — encrypted on your device before it's uploaded, with the key living in the link itself. If you email it yourself, it never reaches us at all. If you use QuoteIron's Send Email button, the link passes through our server just long enough to hand it to your customer's inbox — we don't store it, log it, or open it. We can't read the document either way. The link auto-expires after about 180 days of inactivity, and while we record that it was viewed or approved (so your app can show status), we can't see what's in it.

Questions

[email protected] · QuoteIron is a product of 20M HODL LLC, St. Petersburg, Florida, USA.