Privacy Policy

Last updated: May 29, 2026

This Privacy Policy explains what personal information QuoteDrop collects, how we use it, who we share it with, and the rights you have. It applies to contractors who create accounts (“Users”) and to the homeowners, fleet operators, and other customers who receive estimates through QuoteDrop share links (“Recipients”).

1. What We Collect

From Users (Contractors)

• Account: email address, password hash, business name, owner name, phone, mailing address, license number, logo, and trade specialty.
• Pricing profile: labor rate, tax rate, minimum service charge, diagnostic fee, after-hours multiplier.
• Estimate content: photos you upload, customer names, phone numbers, job descriptions, AI-generated line items.
• Billing: Stripe customer ID, subscription state, Stripe Connect account ID. We never store full credit card numbers; Stripe handles all card data under PCI DSS Level 1.
• Usage: IP address, browser type, device, pages viewed, actions taken. We use this for security and product improvement.

From Recipients (Customers)

• Information the Contractor enters about you (name, phone, email, service address, job description, photos).
• When you view a share link: IP address, user agent, timestamp.
• When you sign an estimate: your electronic signature, printed name, IP address, timestamp, and user agent — captured as evidence of consent under E-SIGN and UETA.
• Payment information, if you pay through the share link — processed entirely by Stripe under Stripe's privacy policy.

2. How We Use Information

• To provide and operate the service you requested;
• To generate AI-assisted line items and pricing using the content and the Contractor's pricing profile;
• To send estimates and receipts to Recipients;
• To process subscription payments via Stripe;
• To detect fraud, abuse, and security threats;
• To comply with legal obligations (tax, subpoenas, audits);
• To communicate about your account, billing, and material service changes. We do not send marketing email without opt-in consent.

3. AI Processing

Estimate photos and descriptions are sent to Anthropic's API to generate line items. Anthropic processes this data under a zero-data- retention agreement — they do not train their models on your data and they do not retain it beyond the immediate request. Your photos are stored in Supabase Storage (encrypted at rest, private by default, accessible only to you and your Recipients through share links).

4. Sharing

We share personal information only with:

• Infrastructure providers who host the service (Vercel — compute + edge; Supabase — database, auth, storage; Cloudflare — CDN + DDoS protection);
• Payment processors (Stripe, Inc.) to run subscriptions and Contractor-direct payments;
• AI providers (Anthropic) for estimate generation;
• Communications(Twilio) to send SMS share links at the Contractor's request;
• Legal / safety when required by valid subpoena, court order, or to protect rights, property, or safety.

We do not sell personal information. We do not share personal information with advertisers or data brokers.

5. SMS / Text Messaging Program

QuoteDrop sends transactional SMS text messages on behalf of Contractors so that Recipients can view, approve, and electronically sign estimates and receive related service messages (for example, payment receipts or balance requests). Messages are sent from a registered business number operated by Alberts Road Service LLC dba QuoteDrop.

Consent

When a Contractor enters a Recipient's mobile number to send an estimate, the Contractor confirms that the Recipient has agreed to be contacted by text about that job. By providing a mobile number, the Recipient consents to receive transactional text messages from the Contractor through QuoteDrop at that number, including messages sent using an automated system. Consent to receive texts is not a condition of any purchase.

Message Frequency & Cost

Message frequency varies with how many estimates a Contractor sends you; most Recipients receive only a few messages per job. Message and data rates may apply. Neither QuoteDrop nor the Contractor charges for the messages, but your mobile carrier may.

Opt-Out and Help

You can opt out of text messages at any time by replying STOP to any message; you will receive a single confirmation and no further texts. Reply HELPfor assistance, email support@jobestimate.app, or call (561) 475-8052. Supported carriers include AT&T, T-Mobile, and Verizon, among others; carriers are not liable for delayed or undelivered messages.

Privacy of Mobile Data

Mobile opt-in data and SMS consent are used solely to deliver the estimate and related service messages. We do not share or sell mobile opt-in information, phone numbers, or SMS consent to any third party for marketing purposes. Text-message content is transmitted through Twilio under its privacy policy.

6. Retention

We retain Contractor accounts while active and for 30 days after deletion. We retain estimate records for up to seven (7) years after creation to comply with U.S. tax, dispute, and legal-hold requirements. Photos are deleted within 30 days of estimate deletion. Audit logs are retained for one (1) year.

7. Security

We encrypt data in transit using TLS 1.2+ and at rest using AES-256. Database access is controlled by Supabase Row-Level Security policies that ensure Contractors can only see their own data. Production access is restricted to two-factor-authenticated personnel. We run automated security advisories against our database on every deploy. No system is perfectly secure; notify us at security@jobestimate.app  if you discover a vulnerability.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. California residents have rights under the CCPA/CPRA; EU/UK residents have rights under GDPR. To exercise any right, email privacy@jobestimate.app. We will respond within 30 days. You may also complain to your local data protection authority.

9. Children

QuoteDrop is not directed to children under 13 (or 16 in the EU). We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes

We may update this Policy. Material changes will be announced via email or in-app notice at least 14 days before taking effect. Continued use after the effective date constitutes acceptance.

11. Contact

Data controller: Alberts Road Service LLC dba QuoteDrop, Texas. Privacy questions: privacy@jobestimate.app. Security vulnerabilities: security@jobestimate.app.

This Privacy Policy is provided for informational purposes and is not legal advice. Have your own counsel review before relying on it in any dispute.