Privacy Policy

1. Information We Collect

When you use CreteQuote, we may collect the following personal information:

• Name and contact information (email address, phone number)
• Business name and address
• Payment and billing information (processed securely via Stripe)
• Project details you provide when requesting estimates or creating quotes
• Usage data such as pages visited, features used, and interactions within the platform
• Device information, browser type, and IP address
• Communication preferences and notification settings

2. How We Use Your Information

We use your information for the following purposes and on the following legal grounds:

• To provide our Service: Processing your information is necessary to fulfill our contract with you, including managing your account, generating estimates and quotes, scheduling jobs, and processing payments.
• With your consent: We send notifications (email, SMS, in-app) based on the preferences you set. You can update these at any time in your profile settings.
• For legitimate business interests: We analyze usage patterns to improve our platform, ensure security, prevent fraud, and provide customer support. We balance these interests against your privacy rights.
• To comply with legal obligations: We may process your data to comply with applicable laws, regulations, or legal requests.

3. Google Sign-In & Google Calendar

CreteQuote offers Google Sign-In for authentication and optional Google Calendar integration for job scheduling.

• Google OAuth: When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.
• Google Calendar: If you enable calendar integration, we access your Google Calendar data solely to create, update, and display job-related events. We do not read or modify unrelated calendar entries.
• Limited Use Disclosure: Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Third-Party Services

We integrate with the following third-party services to provide our platform functionality. Each processes data in accordance with their own privacy policies:

• Stripe: Processes payments securely. Your payment card details are handled directly by Stripe and are never stored on our servers.
• Twilio: Sends SMS notifications and communications on your behalf. Phone numbers and message content are transmitted to Twilio for delivery.
• OpenAI: Powers AI-assisted instant estimates. Project details you submit may be sent to OpenAI for processing. No personally identifiable customer data is sent unless included in the project description.
• Accounting service: If you connect your accounting service account such as QuickBooks, we sync invoice and customer data between CreteQuote and your accounting service to streamline your accounting workflow.
• Vercel: Hosts our platform and provides anonymous, aggregated analytics that cannot identify individual users.

5. Cookies & Session Management

CreteQuote uses cookies for authentication and session management. We use JSON Web Tokens (JWT) managed by NextAuth.js to maintain your login session. These cookies are essential for the platform to function and cannot be disabled while using the service.

6. Data Sharing & International Transfers

We do not sell your personal information. We share data only with the third-party service providers listed above, and only to the extent necessary to operate our Service.

Your data may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection standards, including the use of standard contractual clauses and equivalent protective measures where required.

7. Data Retention & Security

We retain your data for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it.

We implement industry-standard security measures including encrypted connections (HTTPS), secure database access controls, bcrypt password hashing, and regular security reviews to protect your information.

8. Your Rights

Regardless of where you are located, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, commonly used, and machine-readable format.
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Object: Object to processing of your data based on legitimate interests.
• Lodge a Complaint: You have the right to lodge a complaint with a relevant data protection authority if you believe your data has been handled improperly.

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.

9. Children's Privacy

CreteQuote is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our platform. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how your data is handled, please contact us at:

CreteQuote / Evolution Quotes LLC
Email: privacy@evolutionquotes.com