Privacy Policy

This policy applies to the Quodaro website, application, account, paid access, support, and reminder services. Quodaro is operated by Alex Rowan, a sole proprietor doing business as Quodaro, located in New York, New York, United States.

For account and service data, Quodaro generally determines why and how personal information is processed. For information a business user enters about its own customers, that user controls the business purpose and Quodaro processes the information to provide the service.

Account information: email address, account identifier, email-verification state, paid-access status and expiration, and authentication events.

Quote and Job information: customer names, project names, quote values, follow-up dates, saved job names and prices, descriptions, internal notes, outcomes, loss reasons, and activity timestamps supplied by the user.

Reminder information: whether reminders are enabled, delivery hour, timezone, delivery status, attempt history, and provider message identifiers.

Billing information: Stripe customer, Checkout Session, and legacy subscription identifiers; product information; payment status; and access-expiration dates. Stripe collects and processes full payment-card details; Quodaro does not store them.

Technical information: IP address and ordinary request, device, browser, security, and diagnostic information generated when the service is used.

Support information: messages, attachments you choose to send to support, and records needed to resolve the request.

We receive information directly from users, automatically from use of the service, and from providers that support authentication, billing, email delivery, hosting, and security. Business users may also enter information about their customers and are responsible for having authority to do so.

• create, authenticate, secure, and administer accounts;
• store and display quotes, Jobs, follow-up dates, and outcomes;
• send requested authentication, billing, reminder, and support communications;
• process payments, paid access, account deletion, and refund requests;
• prevent fraud, abuse, unauthorized access, and security incidents;
• diagnose failures and maintain service reliability;
• comply with law and enforce our agreements; and
• analyze aggregated or de-identified information to understand and improve Quodaro.

Where a law requires a legal basis, we rely as applicable on performance of our contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where specifically requested.

Quodaro currently sends service communications only, including account confirmation, password recovery, billing, support, security, and user-configured quote reminders. We do not currently send promotional marketing emails.

Users may disable quote reminder emails in Account settings. Essential authentication, security, billing, and account notices cannot always be disabled while an account remains active.

We disclose information only as reasonably necessary to operate the service, complete a transaction, comply with law, protect rights and safety, or complete a business transfer. Providers currently include:

• Supabase for authentication and database services;
• Stripe for checkout, payment processing, receipts, and legacy subscription management;
• Resend for authentication and reminder email delivery;
• OpenAI Sites and Cloudflare for application hosting and network delivery; and
• professional advisers or authorities when reasonably necessary or legally required.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use customer records for advertising.

Quodaro uses browser storage and similar technology for secure authentication sessions, installation behavior, onboarding completion, interface preferences, and the one-time mobile swipe lesson. These functions support the service and are not used for advertising.

Blocking essential browser storage may prevent sign-in or other application functions from working correctly.

Account, quote, and Job records are generally retained while the account exists, including after paid access expires. When an account is deleted, active production records are deleted or de-identified, subject to lawful exceptions.

Deleted information may remain in restricted, encrypted backups for up to 30 days before aging out. Operational and security logs are ordinarily retained for up to 90 days. Support correspondence may be retained for up to 24 months. Stripe and other providers may retain transaction or compliance records under their own legal obligations.

We may retain information longer when reasonably necessary for fraud prevention, dispute resolution, enforcement, tax or accounting obligations, or a legal hold. Aggregated or de-identified information may be retained without these limits when it cannot reasonably identify a person.

We use administrative, technical, and organizational safeguards designed for the nature of the information handled, including encrypted network connections, authenticated access, per-user database controls, restricted server credentials, and payment processing by Stripe.

No system is completely secure. Users must protect their credentials and promptly report suspected unauthorized access to support@quodaro.com.

Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal of a denied privacy request.

Account holders can access and update records in Quodaro, export quote data, change reminder settings, and request account deletion through Account settings. Other requests may be sent to support@quodaro.com.

We may verify identity before completing a request. Authorized agents may submit requests where permitted by law. We will not discriminate against a person for exercising an applicable privacy right.

If your information was entered by a Quodaro business customer, contact that business first. We will assist the business with valid requests as appropriate.

Quodaro is operated from the United States and uses providers that may process information in the United States and other countries. Those locations may have data-protection rules different from those where a user lives.

Users outside the United States are responsible for determining whether Quodaro meets their business obligations. Where required, we use contractual or other recognized safeguards for international transfers.

Quodaro is a business service for adults and is not directed to children. People under 18 may not create or use an account. If we learn that we collected a child’s personal information contrary to this policy, we will take reasonable steps to delete it.

Users must not enter health information, full payment-card numbers, bank-account details, government identification numbers, passwords, biometric information, or similarly sensitive information into quote, Job, description, or notes fields.

We may update this policy as the service or legal requirements change. We will post the revised policy with a new effective date and provide at least 30 days’ notice before material changes when practical.

Privacy questions and requests may be sent to:

Alex Rowan, a sole proprietor doing business as Quodaro
New York, New York, United States
support@quodaro.com

Paid-access and service rules are described in our Terms of Service.