Privacy Policy
Effective date: 22 July 2026
1. Who We Are
Quotr HQ Limited ("Quotr", "we", "us", "our") is the data controller responsible for your personal data collected through the Quotr platform at www.quotr.ie. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable Irish data protection law.
For any privacy-related queries, contact us at hello@quotr.ie.
2. Data We Collect
We collect the following categories of personal data:
Account Information
Name, email address, and password when you register for an account.
Business Information
Business name, trade type, logo, labour rates, and rate card data that you enter during onboarding or while using the Service.
Voice Recordings
WhatsApp voice notes you send to our system number are received and transcribed for the purpose of generating quotes. Recordings are processed and not stored beyond the time needed to generate your quote.
Payment Information
We do not collect or store your bank account details. Online payment collection is not currently active. This notice will be updated when a payment provider is integrated.
Usage Data
Log data, IP address, browser type, pages visited, and other technical data collected automatically when you use the Service.
Customer Data You Provide
Names, contact details, and job information relating to your own customers, entered when creating quotes. You are responsible for ensuring you have a lawful basis for sharing this data with us.
3. How We Use Your Data
We use your personal data to:
- Create and manage your account
- Provide and improve the Service, including generating quotes from your voice notes
- Process payments and manage your subscription
- Send transactional emails (account confirmation, quote delivery, billing notifications)
- Respond to support requests
- Comply with our legal obligations
- Detect and prevent fraud or misuse of the Service
We do not use your data for advertising or sell it to third parties.
4. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR:
- Contract performance — processing necessary to provide the Service you have subscribed to
- Legitimate interests — improving the Service, preventing fraud, and ensuring security
- Legal obligation — where we are required to process data to comply with applicable law
- Consent — where you have given us explicit consent, such as for optional marketing communications
5. Third-Party Processors
We share data with the following trusted third-party service providers who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc | Database hosting and authentication | EU (AWS Frankfurt) |
| Meta / WhatsApp | Voice note delivery channel | USA (Standard Contractual Clauses) |
| Twilio Inc | WhatsApp Business API integration | USA (Standard Contractual Clauses) |
| OpenAI / Whisper | Voice note transcription | USA (Standard Contractual Clauses) |
| Vercel Inc | Platform hosting | EU / USA (SCC) |
| Resend | Transactional email delivery | USA (Standard Contractual Clauses) |
Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
6. Data Retention
We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Account data is retained for the duration of your subscription plus 12 months after cancellation
- Quote data and customer records you create are retained until you delete them or close your account
- Voice recordings are deleted after your quote has been generated
- Financial records are retained for 7 years as required by Irish tax law
7. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements
- Right to restriction — request that we limit how we process your data in certain circumstances
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, email us at hello@quotr.ie. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.
8. Cookies
Quotr uses essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent you from logging in.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data storage, secure HTTPS connections, and access controls limited to authorised personnel.
No system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
10. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice within the Service. The updated policy will take effect on the date stated at the top of this page.
12. Contact
For any questions about this Privacy Policy or how we handle your data, contact us at hello@quotr.ie.
Quotr HQ Limited, Republic of Ireland.