Privacy Policy

Wabi LLC ("we," "us," "our") operates QuoteShot, an AI-powered estimate generation service for residential contractors. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

This policy applies to getquoteshot.com and all associated services. By using QuoteShot, you agree to the practices described here.

We collect the following categories of information:

• Account information: your email address, used for magic-link authentication via Supabase Auth.
• Profile information: company name, owner name, phone number, city, and trade/specialty — provided voluntarily during profile setup.
• Job data: photos you upload to generate estimates (stored in Supabase Storage), text descriptions you provide, and the generated estimate content including line items, scope of work, assumptions, and totals.
• Payment information: collected and processed entirely by Stripe. We store a Stripe customer ID and subscription status but never see or store your full card number.
• Usage data: pages visited, features used, and timestamps — collected via Vercel Analytics.
• Device and browser data: IP address, browser type, and operating system — collected automatically via server logs.

• Authenticate your account via magic-link email.
• Generate AI-powered estimates by sending your uploaded photos and text descriptions to the Anthropic API (Claude).
• Process subscription payments via Stripe.
• Display and export your estimates as branded PDF documents.
• Improve the service through anonymized, aggregate usage analysis.
• Communicate service updates, billing notices, and support responses.

We use the following third-party services to operate QuoteShot. Each receives only the data necessary for its function:

• Supabase — authentication, database, and file storage. Receives your email, profile data, photos, and estimates.
• Anthropic — AI estimate generation. Receives your photos and text descriptions for processing. Per Anthropic's API terms, this data is not used to train their models.
• Stripe — payment processing. Receives your email and payment method details.
• Vercel — hosting and analytics. Receives IP address and usage data.
• Resend — transactional email delivery. Receives your email address.

We do not sell, rent, or share personal data with advertisers. We do not use third-party ad tracking or marketing pixels.

Your data is stored on Supabase infrastructure (hosted on AWS). Photos are stored in Supabase Storage with row-level security policies that restrict access to the account owner. All data is transmitted over HTTPS/TLS.

We implement reasonable technical and organizational security measures to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

• Account and profile data is retained while your account is active.
• Upon account deletion, personal data and uploaded photos are deleted within 30 days.
• Anonymized, aggregate data (not identifiable to you) may be retained indefinitely to improve the service.
• Stripe retains payment records according to their own retention policy.

We use essential cookies for session management. When you log in via magic link, Supabase Auth sets a session cookie to keep you authenticated. This is required for the service to function.

We do not use advertising or marketing cookies. Vercel may set analytics cookies to measure page performance. You can disable cookies in your browser settings, but this will prevent you from logging in.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent for data processing.

To exercise any of these rights, email support@getquoteshot.com. We will respond within 30 days.

QuoteShot is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.