Privacy Policy

Jotquote (“Jotquote”, “we”, “us”, “our”) is an AI quote, estimate and proposal generator operated by Senithu Software Solutions, the data controller for the personal data described in this policy. For any privacy question, or to exercise your rights, contact us at jotquote@senithu.lk.

This policy explains what personal data we collect when you use jotquote.com and the Jotquote service (the “Service”), how and why we use it, who we share it with, and the rights you have. It applies to visitors, account holders and subscribers. It does not cover third-party websites or services we link to, which have their own policies.

We collect only what we need to provide the Service:

• Account data — your name, email address and a securely hashed password, or your Google account identity and basic profile if you sign in with Google.
• Business profile — business name, trade, address, phone, currency, logo and the rates and price-book items you choose to add.
• Quote and client data — the job descriptions, line items, quote content, and the client names, addresses and contact details you enter or generate.
• Uploads — photos (for example of handwritten notes or business cards) and, for the voice assistant, short audio recordings. These are processed to produce your output.
• Payment data — handled by PayPal. We do not collect or store your full card or bank details; we keep a subscription reference, plan, and billing status.
• Usage and device data — log data such as IP address, browser/device type, pages viewed and actions taken, collected automatically for security and to run the Service.
• Communications — messages you send us, such as support requests.

• Directly from you — when you sign up, build a profile, create quotes or contact us.
• Automatically — through essential cookies and server logs as you use the Service.
• From third parties — for example Google (if you sign in with Google) and PayPal (your subscription and payment status).

We use your data for the following purposes (with the GDPR legal basis, where it applies):

• To provide the Service — generate quotes, run your account (performance of our contract with you).
• To process payments and subscriptions — billing, renewals and receipts (contract; legal obligation).
• To support you — answer questions and send service-related emails (contract; legitimate interests).
• To secure and improve the Service — prevent abuse, debug, and develop features using aggregated insights (legitimate interests).
• To comply with law — meet tax, accounting and legal obligations (legal obligation).

Where we rely on consent (for example any optional communications), you can withdraw it at any time.

To generate your quotes, estimates and proposals, the text, photos and voice you submit are sent to Google’s Gemini AI for processing. We send only what is necessary to produce your result, and we do not use your content to train AI models. AI Output is generated guidance and may be inaccurate — you remain responsible for reviewing it. Google processes this data under its own terms; see Google’s privacy documentation for details.

Subscriptions are processed by PayPal. When you subscribe, you provide your payment details directly to PayPal, not to us — we never see or store your full card or bank account numbers. We receive limited information such as your subscription ID, plan, transaction IDs, and whether a payment succeeded or failed, which we use to manage your Subscription and issue receipts. PayPal handles your payment data under its own privacy policy.

We share data only with the providers that power the Service, under appropriate agreements:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• Google (Gemini) — AI generation; Google Sign-In for authentication.
• Google Analytics — site-usage analytics, only with your consent.
• PayPal — subscription billing and payment processing.
• Zoho Mail — transactional and account emails.

We do not sell your personal data and we do not share it for third-party advertising. We disclose data only:

• to the service providers above, to operate the Service;
• where required by law, regulation, legal process or a valid government request;
• to protect the rights, safety and property of Jotquote, our users or the public;
• in connection with a merger, acquisition or sale of assets, in which case we will notify you and any successor will be bound by this policy.

We use essential cookies to keep you signed in and secure your session. These are necessary for the Service to function.

We also use Google Analytics to understand how visitors use our site so we can improve it. Analytics cookies are only set if you accept them in our cookie banner: we load Google Analytics with consent denied by default (Google Consent Mode) and enable it only after you opt in. You can decline, and you can change your mind later by clearing the consent stored in your browser. We do not use advertising or cross-site tracking cookies.

Where enabled, Google Analytics may process limited usage data (such as a pseudonymous identifier, pages viewed and approximate location) under Google’s own terms.

We keep your personal data for as long as your account is active and as needed to provide the Service. You can delete Your Content at any time. After you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (for example billing and tax records) to meet legal obligations.

We protect your data with measures including encryption in transit, securely hashed passwords, and row-level security so that only your organisation can access its data. Payment details are handled by PayPal’s PCI-compliant systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of significant incidents as required by law.

We and our providers may process and store data in countries other than your own, including outside your region. Where personal data is transferred internationally, we rely on providers that offer appropriate safeguards (such as standard contractual clauses) for those transfers.

Depending on where you live, you may have the right to access, correct, delete, export (portability), restrict or object to the processing of your personal data, and to withdraw consent. If you are in the EEA/UK, these are your GDPR rights; if you are in California, you have rights under the CCPA/CPRA, including the right to know and to delete, and the right not to be discriminated against for exercising them.

Much of this is available directly in your account settings. For anything else, email jotquote@senithu.lk and we will respond within the time required by law. You also have the right to complain to your local data-protection authority.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. No opt-out is needed because we do not engage in those practices.

Jotquote is a business tool intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

The Service may contain links to third-party sites and services. We are not responsible for their privacy practices; please review their policies before providing them your data.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, give notice in the app or by email.

For any privacy question, or to exercise your rights, contact Senithu Software Solutions at jotquote@senithu.lk.