Privacy policy
Last updated 7 November 2026 · version 2026-11-07
Short version: we collect what we need to run truequote, we do not sell your data, and you can delete it any time.
1. Who we are
truequote (“we”, “us”) is operated by Ameet Pandey, an individual (sole proprietor) based in India. We provide a mobile app and websites that help tradespeople create quotes and invoices and collect electronic signatures. Contact: pandeyamitbiz@gmail.com.
For data about your customers that you enter into truequote, you are the controller and we act as your processor. For your own account data, we are the controller.
2. What we collect
| Data | Why |
|---|---|
| Account: name, email, Google or Apple sign-in identifier | To create and secure your account |
| Business profile: business name, trade, country, phone, address, logo, tax number, licence number, payment instructions | To print on your quotes and invoices |
| Your customers: name, phone, email, site address, notes | To prepare and send quotes and invoices on your behalf |
| Quotes, invoices, line items, photos, chat messages | To provide the service |
| Signature record: signer name, time, IP address, device/browser string, document hash | To create a reliable record that a quote was signed |
| Subscription status (not your card number) | To unlock Pro features. Payment is handled by Apple or Google |
| Device notification token, app version, crash and diagnostic data | To send alerts and keep the app working |
| Messages you send us through forms or email, including IP address (stored only as a salted hash) | To answer you and prevent spam |
We do not collect your precise location, contacts, or payment card details. We do not process payments between you and your customers.
3. Legal bases
Where the UK or EU GDPR applies: contract (providing the service), legitimate interests (security, fraud and abuse prevention, product improvement), consent (marketing emails, non-essential cookies, notifications), and legal obligation (tax and accounting records). Under India’s Digital Personal Data Protection Act, 2023 we rely on your consent and on legitimate uses permitted by that Act.
4. Who we share data with
We use a small number of service providers (processors) under contract. They may only use data to provide their service to us:
- Supabase — database, file storage and server functions.
- Google Firebase — sign-in and push notifications.
- RevenueCat, Apple App Store, Google Play — subscription management and billing.
- Cloudflare — spam protection on our website forms and content delivery.
- Email delivery providers — to send verification and support emails.
When you send a quote, your customer sees the details in it, including your business name and contact details. We disclose data if required by law or to protect rights and safety. We do not sell personal data and do not share it for advertising.
5. International transfers
We are based in India and our providers store data in data centres that may be in the United States, the UK, the EU or elsewhere. Where required, we rely on safeguards such as standard contractual clauses and the UK addendum.
6. How long we keep data
- Account and job data: while your account is open. After you delete your account it is removed within 30 days; backups roll off within 35 days.
- Billing records: as long as tax law requires (generally up to 8 years).
- Website form messages: 24 months.
- Deletion and consent records: 3 years.
7. Your rights
Depending on where you live (including India, the UK, EU, California and other US states) you can ask to access, correct, export or delete your data, withdraw consent, object to or restrict processing, and complain to a regulator. Use the app (Me → Data), the data request form, or email pandeyamitbiz@gmail.com. We reply within 30 days. We will not treat you differently for using these rights. You may also complain to the UK ICO, your local EU authority, the California Attorney General, or the Data Protection Board of India.
California: we do not sell or share personal information as those terms are defined in the CCPA/CPRA.
8. Security
Data is encrypted in transit and at rest. Access is limited by row-level security so a tradesperson can only see their own records. See our security page. No system is perfectly secure; if a breach affects you we will tell you and the relevant authority as the law requires.
9. Children
truequote is for businesses and people aged 18 and over. We do not knowingly collect data from children.
10. Cookies
See our cookie policy. We do not run advertising trackers.
11. Changes
If we make a material change we will update the date above and notify you in the app or by email.
12. Contact and grievances
Grievance officer (India): Ameet Pandey, pandeyamitbiz@gmail.com. We acknowledge complaints within 48 hours and resolve them within 15 days.