We keep this plain and readable. Here's exactly what data we collect, why we collect it, and how you stay in control.
Quotz is a SaaS platform that helps renovation contractors generate accurate cost estimates, shopping lists, and client proposals — fast. We are the data controller for the personal data processed through our website (quotz.app) and our application.
For questions about this policy or your data, contact us at privacy@quotz.app.
We collect only what we need to run the service and improve it. Here's the breakdown:
| Category | What exactly | How collected |
|---|---|---|
| Account data | Name, professional email address, company name, password (hashed) | You provide it on sign-up |
| Usage data | Features clicked, projects created, quote templates used, session duration | Automatically via our app |
| Project data | Renovation project details, line items, material lists, client names you enter | You enter it in the app |
| Billing data | Billing address, VAT number; card data processed directly by Stripe — we never see raw card numbers | You provide it at checkout |
| Communication data | Emails you send us, support tickets, feedback form responses | You contact us |
| Technical data | IP address, browser type, device type, crash logs, error traces | Automatically on every request |
| Cookie data | Session token, analytics identifiers, preference settings | Automatically via cookies — see section 6 |
We do not buy or sell personal data. We do not collect sensitive personal data (health, religion, ethnicity, etc.). We do not knowingly collect data from anyone under 16.
Every piece of data we hold has a specific, documented purpose and a legal basis under GDPR.
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide the service | Account data, project data | Contract performance |
| Process payments | Billing data | Contract performance |
| Send transactional emails | Email address | Contract performance |
| Customer support | Communication data, account data | Contract performance |
| Product analytics & improvement | Usage data, technical data | Legitimate interests |
| Security & fraud prevention | Technical data, IP address | Legitimate interests |
| Marketing emails (opt-in only) | Email address, name | Consent |
| Legal & accounting obligations | Billing data, account data | Legal obligation |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights. You can object at any time — see section 8.
We keep your data only as long as necessary for the purpose it was collected, or as required by law.
| Data type | Retention period |
|---|---|
| Account data | Duration of your account + 30 days after deletion request |
| Project data | Duration of your account + 30 days after deletion request |
| Billing records | 7 years (Belgian accounting law requirement) |
| Support communications | 3 years from last contact |
| Usage & analytics data | 24 months (aggregated after 12 months) |
| Server & error logs | 90 days |
| Marketing opt-in records | Until you withdraw consent + 1 year |
When retention periods expire, data is securely deleted or irreversibly anonymised. You can request early deletion at any time — see your rights below.
We apply industry-standard safeguards to protect your data:
No system is perfectly secure. If we discover a breach that affects your data, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR.
Under GDPR, you have the following rights. Exercise any of them by emailing privacy@quotz.app — we respond within 30 days.
Request a copy of all personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data, subject to legal retention requirements.
Receive your data in a structured, machine-readable format (CSV / JSON).
Object to processing based on legitimate interests, including direct marketing.
Ask us to pause processing while a dispute is resolved.
Withdraw marketing consent at any time via the unsubscribe link in any email.
You may complain to the Belgian DPA at dataprotectionauthority.be.
For any privacy question, data request, or complaint, reach us at:
Quotz BV
Email: privacy@quotz.app
Belgium
We will acknowledge your request within 5 business days and respond fully within 30 calendar days. For complex requests we may extend this to 90 days — we will let you know.
This policy may be updated from time to time. When we make material changes, we will notify active users by email and update the date at the top of this page.