Skip to main content
← Back

Privacy Policy

Last updated: September 21, 2026

1. Scope

This Privacy Policy explains how ProQuote collects, uses, discloses, and retains personal information when you use our websites, applications, account features, public document pages, customer portal, free tools, support channels, and related services (collectively, the "Service"). It applies to information ProQuote handles as a controller for its own purposes. When a contractor uses ProQuote to process personal information about that contractor's customers, our Data Processing Agreement may also apply.

2. Information We Collect

The information we collect depends on how you use the Service and can include:

  • Account and business information: email address, business name, contact details, business address, account settings, authentication and security settings, and subscription status.
  • Customer and job information: customer names and contact details, estimates, invoices, line items, notes, photos, change requests or change orders, expenses, time entries, payment status, and other information you choose to enter into the Service.
  • Payment information: subscription and transaction metadata needed to operate billing and payment features. Card and bank-account credentials are handled by Stripe; ProQuote does not receive or store complete payment-card numbers.
  • Security and technical information: IP address, device or browser information, timestamps, request paths, session and authentication records, rate-limit events, and other logs reasonably needed to secure, debug, and operate the Service.
  • Error and diagnostic information: error messages, stack traces, affected page or request information, and device/browser information sent to our error-monitoring provider. Depending on the error, diagnostic information may incidentally contain limited fragments of data involved in the failed operation.
  • Analytics and attribution information: cookieless pageview or product-usage events and, when you arrive through a tagged campaign link, first-touch UTM source, medium, and campaign values stored in local storage. ProQuote does not intentionally place your email address, name, customer content, estimate content, or invoice content in our standard analytics-event payloads. Campaign values may be included with product analytics events such as signup completion so we can understand which acquisition channels are useful.
  • Marketing-list information: if you separately choose to receive guides, product updates, or other marketing, we may store your email address, signup source, campaign attribution when available, consent or subscription status, and unsubscribe status.
  • Free-tool information: if you use a no-account estimate generator or similar free tool, we may store the email address, business name, job details, IP address, and browser information you submit or generate through that tool. We use that information to deliver the requested output, operate the tool, prevent fraud or impersonation, and investigate misuse. Marketing enrollment is separate and optional where offered.
  • Support and communications: messages, attachments, contact information, and related records when you contact support or otherwise communicate with ProQuote.

3. How We Use Information

We may use information to:

  • provide, maintain, personalize, and improve the Service;
  • authenticate users, secure accounts, prevent abuse, and investigate suspected fraud or security incidents;
  • create, deliver, and maintain estimates, invoices, approvals, reminders, payment workflows, customer-portal access, and other requested features;
  • process ProQuote subscription billing and enable contractor customer-payment workflows through Stripe;
  • send transactional, security, account, support, and service-related communications;
  • measure product usage, reliability, acquisition channels, and conversion performance without intentionally placing customer document content in analytics-event payloads;
  • send marketing communications when permitted and provide opt-out controls;
  • comply with law, enforce our Terms, establish or defend legal claims, and protect the rights and safety of ProQuote, our users, and others.

We do not sell personal information for money. We do not use customer estimates, invoices, job notes, or uploaded photos to build advertising profiles for third-party ad networks.

4. Service Providers and Disclosures

We use service providers to operate ProQuote. Depending on the feature, these providers may process information on our behalf or under their own terms:

  • Supabase — database and related infrastructure;
  • Stripe — subscription billing, connected-account onboarding, customer payment processing, refunds, disputes, and related payment metadata;
  • Resend — transactional and marketing email delivery;
  • Vercel — frontend hosting, CDN, performance tooling, and web/product analytics;
  • Fly.io — backend API hosting;
  • Upstash — Redis hosting for rate limiting and short-lived authentication/session data;
  • Sentry — error tracking and crash reporting.

We may also disclose information when reasonably necessary to comply with law or legal process, investigate fraud or security incidents, protect rights or safety, complete a corporate transaction, or with your direction or consent. Each provider operates under its own terms and privacy practices; our use of a provider is not a guarantee of that provider's uninterrupted service or compliance with every law that may apply to you.

5. Customer Payment Data

Customer invoice payments are processed on the contractor's connected Stripe account. Stripe receives the information necessary to provide its payment services and controls matters such as card or bank-account payment credentials, verification, processing, settlement, payouts, disputes, returns, chargebacks, and certain fraud checks under its own terms and privacy notices. ProQuote receives payment and status information needed to reflect transactions in the Service, but does not receive complete card numbers or complete bank-account credentials.

6. Data Retention

We retain account and business data while an account is active and for periods reasonably necessary to provide the Service, maintain security and audit records, resolve disputes, meet legal or accounting obligations, and enforce our agreements.

When you request account deletion, the account enters a 30-day grace period during which reactivation may be available. After that period, ProQuote is designed to delete or de-identify account data associated with the account, subject to limited information we may retain where reasonably necessary for security, fraud prevention, legal compliance, tax or accounting obligations, dispute handling, backup-cycle completion, or the establishment or defense of legal claims. Backups may persist for a limited period until they rotate out of normal backup cycles.

No-account free-tool submissions are generally retained for up to 90 days for delivery, troubleshooting, fraud-prevention, and abuse-investigation purposes, unless a longer period is reasonably necessary for an active investigation, legal obligation, or claim. Marketing-list records are retained while you remain subscribed and for a limited period afterward as needed to maintain suppression or unsubscribe records and demonstrate compliance.

7. Your Choices and Rights

Depending on where you live, applicable law may provide rights concerning your personal information. ProQuote also provides practical account controls that may include:

  • Access and export: use the export and download tools available to your plan, including account-data export where offered;
  • Correction: update account, business, customer, and document information through the Service where editable;
  • Deletion: request account deletion through Settings where available;
  • Marketing opt-out: use the unsubscribe method in a marketing email or contact us. Opting out of marketing does not stop transactional, security, billing, or service communications that are necessary to operate your account or fulfill a request.

We may need to verify your identity before completing certain privacy requests, and a request may be limited where applicable law permits or requires us to retain information. To exercise a right not available through the product, contact us.

8. Cookies and Local Storage

ProQuote uses authentication cookies and local browser storage needed for account sessions, preferences, and product functionality. We also use Vercel's cookieless analytics tooling and may store first-touch campaign-attribution values in local storage. We do not use third-party cross-site advertising cookies in the Service.

9. Do Not Track and Browser Signals

Browsers may offer "Do Not Track" or similar signals. Because there is not a universally applied standard governing every such signal, ProQuote does not currently alter all Service behavior in response to DNT alone. We do not use third-party cross-site advertising cookies regardless. Where a legally recognized browser-based opt-out signal applies to a processing activity we perform, we will address it as required by applicable law.

10. International Data Transfers

Our providers operate infrastructure in multiple countries, including the United States and locations in Europe. As a result, information may be processed outside the jurisdiction where you live. Where applicable data-protection law requires a transfer mechanism, we rely on the mechanisms made available by our providers or other legally recognized safeguards as appropriate. This statement does not itself certify that any particular transfer mechanism applies to every user or transaction.

11. Security

We use technical and organizational safeguards intended to protect information, including HTTPS/TLS in transit, password hashing, database access controls, rate limiting on sensitive endpoints, authentication controls, logging, and monitoring. Security is a shared and evolving responsibility, and no online service or security measure can guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

12. Email Communications

ProQuote sends transactional and relationship messages needed to operate the Service, such as verification, password-reset, security, estimate, invoice, payment-reminder, portal-access, support, and subscription messages. We may separately send marketing or re-engagement communications where permitted. Marketing messages include an opt-out method where required; opting out of marketing does not unsubscribe you from necessary transactional or security messages.

13. Children

ProQuote is intended for businesses and is not directed to children under 13. We do not knowingly solicit personal information from children under 13. If you believe a child has provided personal information to ProQuote, please contact us so we can review and address it.

14. Business Transfers

If ProQuote is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of the relevant business or assets, information may be transferred as part of that transaction, subject to applicable law. We will provide any notice required by law if the treatment of personal information materially changes.

15. Changes to This Policy

We may update this Privacy Policy as the Service, our providers, or legal requirements change. The page will show the current last-updated date. If a change is material, we will provide additional notice where required by applicable law.

16. Contact

Questions or privacy requests? Contact us or email [email protected].