This Privacy Policy explains what data SudsQuote ("we", "us") collects, the legal bases we rely on, who we share data with, and the rights you have under the EU General Data Protection Regulation (GDPR / UK GDPR), the California Consumer Privacy Act (CCPA/CPRA) and other applicable laws. It applies to the website sudsquote.1201126.xyz, the application at app.sudsquote.1201126.xyz and related services.
SudsQuote is operated by an independent developer (the data controller for account and website data).
We respond to verified data subject requests within 30 days, as required by GDPR Article 12.
Two different roles exist depending on the data:
| Category | Examples | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Account data | Email address, business name | Contract performance (6(1)(b)) - needed to create and operate your account | While your account is active + 30 days after deletion |
| Business data you enter | Quotes, invoices, client names, client contacts, job notes | Contract performance (6(1)(b)) - processed on your instructions as processor | While your account is active + 30 days after deletion |
| Payment data | Card data (processed by our payment provider Creem; we never see full card numbers) | Contract performance (6(1)(b)) and legal obligation (6(1)(c)) for tax records | Per tax law via our processor |
| Technical data | IP address, request logs, device/browser info | Legitimate interests (6(1)(f)) - security, rate limiting, abuse prevention | Up to 30 days (logs) |
| Analytics | Aggregate page-view statistics (cookieless) | Legitimate interests (6(1)(f)) - improving the service | Aggregated, not identifiable |
Consequence of not providing data: providing your email is a contractual requirement - without it we cannot create an account or send login codes. All other fields are optional.
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, database (D1), cache (KV), email routing | Global edge network incl. EU and US |
| Resend | Transactional email delivery (login codes, quote emails) | US/EU |
| Creem (MoR) | Payment processing, tax handling and subscription billing | See Creem's privacy policy |
Each provider receives only the data needed for its role, processes it under data processing agreements, and only on our documented instructions. We do not share your data with any other third parties unless required by law.
Data is stored with Cloudflare on its global network, which may include locations outside the EEA/UK. Where personal data of EEA/UK users is transferred outside the EEA/UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) offered by our processors (Cloudflare, Resend), together with supplementary safeguards where required. By using the service you acknowledge this international processing.
We use privacy-friendly, cookieless analytics (Cloudflare Web Analytics) that do not track you across websites and do not require consent under GDPR. If we later add third-party analytics or advertising cookies, we will update this policy and ask for consent first. See our Cookie Policy.
We do not engage in automated decision-making, including profiling, that produces legal or similarly significant effects on you (GDPR Art. 22).
If you are in the EU/EEA or the UK, you have the right to:
To exercise any right, email privacy@sudsquote.1201126.xyz. To protect your data, we verify the identity of requesters before responding. We will never discriminate against you for exercising your rights.
California residents have the right to know what personal information we collect, request deletion, opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information), and not be retaliated against for exercising these rights. Contact us at the address above to make a request.
We use HTTPS everywhere, encrypted storage, email-OTP login (no password database), signed webhooks and rate limiting. In the unlikely event of a personal data breach, we will notify affected users without undue delay where required by GDPR Art. 33/34, and notify the relevant supervisory authority where applicable. No method of transmission is 100% secure, but we follow industry practice to protect your data.
The service is intended for business users aged 18 and over. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.
Our pages may link to third-party sites (for example our payment provider). Those sites have their own privacy policies, and we are not responsible for their practices.
We may update this policy as the service evolves. Material changes will be announced on this page with an updated date. Continued use after changes means you accept the updated policy.
Questions or requests: privacy@sudsquote.1201126.xyz, or use our contact page.