Privacy Policy
Last updated: September 12, 2026
This policy explains what AutoQuote collects when you use AutoQuote, why, and what you can do about it.
1. What we collect
Your name and email address; your organisation membership and role; subscription and payment records, but never card details, which Paddle holds; the prompts and replies of AI features you use, with their token counts; and technical logs such as IP address and browser type for security and error reporting.
2. Why we collect it
To run your account and organisation, bill subscriptions, send the emails the service needs (verification, invitations, billing notices), keep the service secure, fix errors and measure usage against your plan. The legal bases are performance of our contract with you and our legitimate interest in running a secure service.
3. Who processes it
Supabase (database and authentication), Paddle (payments, as merchant of record and independent controller of payment data), Resend (email), Sentry (error reporting), Anthropic and Langfuse (AI features and their traces) and Vercel (hosting). Some of these process data outside the UK and EU under standard contractual clauses.
4. Cookies
We use only the cookies needed to keep you signed in and to remember your theme. We do not use advertising or cross-site tracking cookies.
5. Retention
Account data is kept while your account exists. When you delete your account it is hidden immediately and removed permanently after 30 days. Billing records are kept as long as tax law requires. Error logs are kept for 90 days.
6. Security
Data is encrypted in transit and at rest, access is limited by role, and every request is verified on the server. No system is perfectly secure; tell us at support@autoquote.codeleap.app if you believe your account has been compromised.
7. Your rights
You can download your data and delete your account from the Account page at any time. You can also ask us to correct, restrict or erase your data, or object to processing, by emailing support@autoquote.codeleap.app. You may complain to your data protection authority; in the UK that is the ICO.
8. Children
The service is not directed at children under 16 and we do not knowingly collect their data.
9. Changes to this policy
We may update this policy. Material changes are announced by email before they take effect.
10. Contact
AutoQuote is the data controller. Privacy requests go to support@autoquote.codeleap.app.
Questions about this document: support@autoquote.codeleap.app.