Privacy Policy

This policy explains what RinseQuote Software ("RinseQuote," "we," "us") collects when you use RinseQuote, why we collect it, and the choices you have. It is written to match how the product actually handles data.

Who controls your data

For your account and the data you enter, RinseQuote Software is the data controller. When you use RinseQuote to store your own customers' details and quotes, or to collect requests from your website, you are the controller of that information and we process it on your behalf as described here.

If you are a homeowner who received a quote, or who asked for a price on a contractor's website, that contractor controls your details. Contact them to see, correct or delete them; we help them act on your request.

What we collect

• Account data: your name, email, password (stored only as a secure hash), and your company profile (name, logo, address, phone, license number, website).
• Customer records you enter: the names, contact details, addresses, and job notes you add for your own customers, and the quotes you build for them, including job addresses and any photos you attach.
• Quote events: when a quote is sent, opened, accepted, or declined. When a customer accepts, we record the name they type, the time, their browser's user agent and a hashed IP address (never the raw address); a decline can carry the reason they give.
• Website widget requests: when someone asks for a price through the estimator on a contractor's website, we store the name, email, phone and address they enter, the job details and the estimate shown, any photos they upload, the page they came from, their browser's user agent and a hashed IP address. We also keep a consent record: the exact sentence they agreed to and when.
• Reviews: the name and email a contractor sends a review request to, and the rating and comment the customer leaves. A review the contractor publishes shows the reviewer's name, rating and comment in that contractor's widget.
• Calendar entries: the jobs and visits a contractor books, with any notes and the lead or quote they belong to.
• Email records: for each email we send, the recipient address, the subject and, for most messages, the content, so delivery can be checked and a message resent.
• Payment data: subscription billing is handled by Stripe. When a contractor collects a deposit, the customer pays through Stripe on the contractor's own Stripe account. We never see or store full card numbers.
• Analytics: product usage via PostHog (EU region), loaded only under the consent rules in our cookie policy.

Why we collect it

• To provide the service: creating and sending quotes, recording acceptance, and delivering website requests to the contractor they were meant for.
• To bill your subscription and prevent abuse, such as spam submitted through a widget.
• To improve the product using aggregate, consent-based analytics.
• To provide support when you ask for it.

Processors we use

We share data only with the processors needed to run the service:

• Supabase (database, authentication, and file storage, including photos, quote PDFs and data exports)
• Hostinger (application hosting)
• Stripe (subscription payments, and deposits paid to contractors)
• Resend (transactional email)
• Upstash (rate limiting, using IP addresses and sign-in emails as short-lived counters)
• Sentry (error monitoring)
• PostHog, EU region (product analytics, consent-gated)
• Cloudflare Turnstile (a bot check on website widget requests, only when enabled)

Integrations a contractor turns on

A contractor can connect their account to tools such as Zapier or Make with webhooks. When they do, details of new widget requests, lead status changes, accepted quotes and new reviews, including the homeowner's contact details, are sent to the address the contractor sets up. The contractor chooses that destination and is responsible for it. A contractor can also subscribe a calendar app to their jobs feed, which shares their calendar entries with that app.

International transfers

Some processors may handle data outside the EU/EEA. Where that happens, transfers rely on appropriate safeguards such as standard contractual clauses. Analytics is hosted in the EU region.

How long we keep it

• Account and company data, including customers, quotes, widget requests, reviews and calendar entries: kept until the company is deleted, then removed within 30 days.
• Email records: 12 months.
• Data exports: the download link lasts 7 days, and the file is removed the next time the company exports or when the company is deleted.
• When a contractor deletes a customer, that customer's details are removed at once from the customer record, its quotes, the stored quote PDFs, the quote history and the email records. Widget requests, reviews and calendar entries are separate records that the contractor deletes on their own.

Your rights

You can access, export, and delete your data. Export is self-serve from your settings: one zip with your records as JSON and CSV files plus your quote PDFs. Deletion offers an export first, then soft-deletes, with a hard delete 30 days later. To exercise any right, contact us at support@rinsequote.com.

Contact

RinseQuote Software. Email support@rinsequote.com.