How we handle your information

We never take custody of your data

QuoteMyData collects a description of your company and its systems: size, years of history, which tools, what must be excluded. Any export of actual data happens later, directly between your company and the buyer you choose, under a signed license.

What we store, and where

• The quote service is designed to store inquiry details in Supabase, with server-side access and row-level security. It collects a company description and contact details, not the underlying archive.
• The notification service uses Resend for inquiry emails. Quote details are not supplied to buyers or other companies for marketing without your permission.
• The hosting configuration uses Cloudflare Workers, with HTTPS and security headers. Hosting providers process web requests; this does not give them access to your internal company systems.

What we share with buyers

Only a de-identified profile of your company (size band, systems, years of history, language, exclusions), and only after you consent in writing. Your contact details are shared with a buyer only once you choose to proceed with that buyer.

What we push for in every license

• A read-only, scoped export instead of standing access where possible.
• De-identification inside your environment, with a sample for your review.
• Raw-data deletion with a signed certificate after delivery.
• Incident notification commitments and the buyer’s current security attestation, with auditor and period.

See the full security checklist for buyers.

Report a concern

Email hello@quotemydata.com. Include the affected page and a description of the concern. Do not send passwords, access tokens or private company records by email.