Privacy Policy
We collect the business, job, and photo data needed to run QuoteX for you. We never store your clients' card details ourselves. Client photos are sent to OpenAI to generate an AI price suggestion. We share data only with the processors that run the platform — Stripe, Resend, Supabase, and OpenAI — never for advertising, and never sold to anyone else.
1. Who we are
QuoteX is operated by Roundbox Investments Pty Ltd (ACN 676 425 899, ABN 60 676 425 899), trading as QuoteX, an Australian company. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy covers two groups of people: cleaning businesses who create a QuoteX account ("you", "cleaners"), and the clients who receive quotes through a cleaner's QuoteX link ("clients"). Where something applies to only one group, we say so.
2. What we collect
From cleaning businesses (account holders):
- Business details — business name, owner name, email, phone number, and ABN (where provided)
- Account credentials (your password is stored encrypted; we never see it in plain text)
- Job and quote data you create or that's generated on your behalf — pricing, scope, addon selections, scheduling, and completion records
- Payment information for your own QuoteX subscription — collected and stored directly by Stripe; QuoteX never sees or stores your full card number
- Stripe Connect account information, if you enable client card payments — this is managed through Stripe's onboarding flow, not entered directly into QuoteX
From clients (people who receive a quote):
- Contact details you provide when requesting a quote (name, phone or email, property address)
- Photos of the property you upload for quoting purposes
- If you save a card to pay a cleaner — the card is entered directly into Stripe's secure payment form. QuoteX never receives, sees, or stores your full card number; we're shown only the card brand and last four digits, for display purposes.
We do not collect more than we need to run the quoting, scheduling, and payment features described on this site.
3. AI photo processing
When a client uploads photos of a property, those photos are sent to OpenAI's AI models to help generate a suggested price for the cleaning job — this is a core part of how QuoteX works. Photos (and the pricing details derived from them) are processed by OpenAI as our sub-processor for this purpose; OpenAI does not use this data to train its models under the terms QuoteX operates under with it. The AI's price suggestion is only ever a starting point — the cleaning business always reviews and can change it before a quote is sent, and no quote is finalised or charged without that review.
4. How we use your information
We use the information described above to: operate your account and the quoting/scheduling/payment features; generate AI price suggestions from uploaded photos; process your subscription billing and, if enabled, your clients' job payments; send transactional emails (like quote notifications, payment confirmations, and account alerts); respond to support requests; and meet our legal and accounting obligations. We do not use your data for advertising, and we do not sell personal information to third parties.
5. Who we share it with, and why
We share data only with the service providers ("sub-processors") that run the platform on our behalf, strictly for the purpose of providing QuoteX to you:
| Provider | Used for | What's shared |
|---|---|---|
| Stripe | Subscription billing and client job payments (Stripe Connect) | Payment details, business and client contact info needed to process a charge |
| OpenAI | AI-generated price suggestions from property photos | Uploaded property photos and job context needed to price the clean |
| Resend | Transactional email delivery (quote links, notifications, receipts) | Recipient email address and the content of the email sent |
| Supabase | Application database and account authentication | All account, job, and quote data described in Section 2 |
| Upstash | Rate limiting, to protect the platform from abuse | IP addresses and request counters |
| Google Places API | Address autocomplete during job intake | Property address search queries |
Some of these providers may process data outside Australia as part of their global infrastructure — for example, OpenAI's and Stripe's services operate internationally. Where data is disclosed overseas, we rely on these providers' own compliance obligations and contractual data protection commitments as part of engaging them. We otherwise disclose personal information only where required by law, to enforce our terms, or to protect the rights, safety, or property of QuoteX, our users, or others.
6. Data storage and security
Application data is stored using Supabase's hosted infrastructure. Our data is hosted in Supabase's Sydney (ap-southeast-2, Oceania) region. We take reasonable technical and organisational measures to protect your data, including encrypted storage of credentials and restricted access to production systems. No online service can guarantee absolute security, but we work to keep your data safe and will notify affected users as required by law if a data breach occurs.
7. Data retention and deletion
We keep your account, job, and quote data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution obligations (typically consistent with Australian tax record-keeping requirements). If you close your account, you can request deletion of your personal data by contacting us; we'll action this unless we're required to retain specific records by law (for example, financial records related to processed payments).
8. Cookies
QuoteX uses only essential cookies needed to keep you securely signed in (via Supabase authentication). We do not use advertising or third-party tracking cookies, and we do not run analytics tools that track you across other websites.
9. Your rights
Under the Australian Privacy Principles, you have the right to: ask what personal information we hold about you; request access to it; ask us to correct it if it's wrong or out of date; and, subject to our legal retention obligations, ask us to delete it. To exercise any of these rights, contact us using the details in Section 11.
10. Changes to this policy
We may update this policy from time to time. We'll post the updated version here with a new "last updated" date, and where a change is material we'll make reasonable efforts to notify active users by email.
11. Contact and complaints
Questions, access/correction requests, or privacy complaints can be sent to contact.quotex@gmail.com. If you're not satisfied with our response, you can escalate a privacy complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.