Privacy Policy

1. Introduction

Welcome to Quote Baba, operated by AmyRamya Private Limited ("AmyRamya," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our quote and proposal generation platform available at quotebaba.com and related services (collectively, the "Service").

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy complies with applicable privacy laws including GDPR, CCPA, and Indian data protection regulations.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, company name, and profile details
• Business Information: Company logo, business address, tax details, banking information for quotes
• Quote Data: Client information, project details, pricing, terms and conditions, and custom notes
• Payment Information: Billing address and payment details (processed securely through Stripe)
• Communication Data: Messages, support tickets, and feedback you send to us

2.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent, click patterns, and user interactions
• Device Information: IP address, browser type, operating system, device identifiers
• Technical Data: Log files, error reports, performance metrics, and system diagnostics
• Analytics Data: Aggregated usage statistics to improve our service

2.3 Information from Third Parties

• Payment Processor: Transaction status and billing information from Stripe
• Authentication Services: Profile information if you sign up through social media
• Integration Partners: Data from business tools you connect to our platform

3. How We Use Your Information

3.1 Service Provision

• Create, store, and manage your quotes and proposals
• Generate PDF documents and shareable links
• Process payments and manage subscriptions
• Provide customer support and technical assistance
• Authenticate users and maintain account security

3.2 Service Improvement

• Analyze usage patterns to enhance user experience
• Develop new features and improve existing functionality
• Troubleshoot technical issues and optimize performance
• Conduct research and analytics for product development

3.3 Communication

• Send service updates, security alerts, and system notifications
• Provide customer support and respond to inquiries
• Send promotional content and feature announcements (with consent)
• Conduct user surveys and feedback collection

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using Supabase, a PostgreSQL-based database platform with enterprise-grade security. All data is encrypted in transit and at rest using industry-standard encryption protocols (AES-256).

4.2 Security Measures

• End-to-end encryption for all data transmission
• Regular security audits and vulnerability assessments
• Multi-factor authentication and access controls
• Automated backup systems with redundancy
• SOC 2 Type II compliant infrastructure
• Regular employee security training and background checks

4.3 Data Location

Your data is primarily stored in secure data centers located in the United States and European Union. We ensure appropriate safeguards are in place for any international data transfers in compliance with GDPR and other applicable laws.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We never sell, rent, or trade your personal information to third parties. Your business data belongs to you, and we act only as a processor to help you manage your quotes and proposals.

5.2 Limited Sharing

We may share your information only in the following circumstances:

• Service Providers: Trusted partners who help us operate our platform (Stripe for payments, Supabase for hosting)
• Legal Requirements: When required by law, court order, or government investigation
• Business Transfer: In the event of a merger, acquisition, or sale of business assets
• Protection: To protect our rights, property, or safety, or that of our users
• With Consent: When you explicitly authorize us to share specific information

5.3 Third-Party Services

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Supabase: Database and authentication services
• Vercel: Application hosting and CDN services
• Analytics Providers: Anonymized usage analytics for service improvement

6. Your Rights and Choices

6.1 Access and Control

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal data and account
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your personal data
• Objection: Object to certain types of data processing

6.2 Communication Preferences

• Opt out of marketing emails via unsubscribe links
• Manage notification preferences in your account settings
• Contact us to update communication preferences

6.3 Account Deletion

You can delete your account at any time through your account settings or by contacting us. Upon deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Data Retention

• Account Data: Retained while your account is active plus 90 days after deletion
• Quote Data: Retained according to your subscription plan and legal requirements
• Payment Data: Retained for 7 years for tax and accounting purposes
• Support Data: Retained for 3 years for quality assurance and legal compliance
• Log Data: Retained for 12 months for security and technical purposes

8. Cookies and Tracking

We use cookies and similar technologies to provide and improve our service. For detailed information about our use of cookies, please see our Cookie Policy.

9. Children's Privacy

Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover we have collected information from a child under 16, we will delete it immediately.

10. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and other lawful transfer mechanisms.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of material changes via email or through our service. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Information

For questions about this Privacy Policy or our data practices, please contact us:

Regulatory Authorities

If you are located in the European Union, you have the right to lodge a complaint with your local data protection authority. For users in India, you may contact the relevant authorities under the Personal Data Protection Act.