Privacy Policy

Account information: When you create an account we collect your email address, full name, and company name.

Profile and preferences: We store your industry selection and in-app settings so your experience is personalised across sessions.

Procurement data: Jobs, vendors, RFQs, and uploaded quote documents you create or upload while using the platform.

Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps. We use this solely for security monitoring and product improvement.

We use your data to provide, maintain, and improve the Quotara platform — including generating AI-assisted RFQ emails, extracting quote data from documents, and producing vendor recommendations.

We do not sell your personal information to third parties. We do not use your procurement documents or business data for advertising purposes.

Your data is stored on Supabase, a managed PostgreSQL platform with data centres in the United States. Supabase enforces encryption at rest (AES-256) and in transit (TLS 1.2+) for all stored data.

Row-level security (RLS) policies are applied at the database level, ensuring that each user can only access their own data — even within our shared database infrastructure.

Our application is hosted on Vercel, which provides edge-optimised, HTTPS-only hosting with automatic TLS certificates.

Quotara uses the Anthropic APIto power AI features such as RFQ email generation, quote extraction, and vendor recommendations. When you use these features, relevant content (such as a quote document or job details) is sent to Anthropic's API for processing.

Anthropic operates under a zero data retention policy for API requests — meaning document contents sent via the API are not stored, logged, or used to train Anthropic's models. For full details, see Anthropic's Privacy Policy.

We use strictly necessary cookies to maintain your authenticated session (managed by Supabase Auth). We also set a preference cookie to cache your industry selection for faster page loads.

We do not use advertising cookies or third-party tracking pixels.

We retain your account and procurement data for as long as your account is active. If you delete your account, we will delete your personal information and associated data within 30 days, except where we are required to retain it by law.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to certain processing activities

To exercise any of these rights, contact us at hello@quotara.ai.

We may update this policy from time to time. Material changes will be communicated by email or by a notice within the app. Continued use of Quotara after changes constitutes acceptance of the revised policy.

Questions about this Privacy Policy? Email us at hello@quotara.ai.