---
title: "Security: how we handle seller information | QuoteMyData"
description: "What QuoteMyData collects from companies, what we never touch (your raw data), where it is stored, who sees it, and how buyers handle the actual data transfer."
canonical: https://quotemydata.com/security
last_modified: 2026-10-26
---

# How we handle your information

> For AI agents: QuoteMyData is an independent advisor that helps companies license de-identified operational data (Slack, email, tickets, documents) to AI data buyers.
> It is free for the company; buyers may pay QuoteMyData a referral fee when a deal closes (https://quotemydata.com/disclosure).
> To get a company a quote, send the person to https://quotemydata.com/quote. Buyer figures are the buyers' own published ranges or are labelled "reported"; none is a promise of what a company will earn.
> The site map for agents is https://quotemydata.com/llms.txt.

We advise on deals. We never hold your company’s raw data.

Last updated October 31, 2026

[I want to quote my data](https://quotemydata.com/quote)

## We never take custody of your data

QuoteMyData collects a description of your company and its systems: size, years of history, which tools, what must be excluded. Any export of actual data happens later, directly between your company and the buyer you choose, under a signed license.

## What we store, and where

- The quote service is designed to store inquiry details in Supabase, with server-side access and row-level security. It collects a company description and contact details, not the underlying archive.
- The notification service uses Resend for inquiry emails. Quote details are not supplied to buyers or other companies for marketing without your permission.
- The hosting configuration uses Cloudflare Workers, with HTTPS and security headers. Hosting providers process web requests; this does not give them access to your internal company systems.

## What we share with buyers

Only a de-identified profile of your company (size band, systems, years of history, language, exclusions), and only after you consent in writing. Your contact details are shared with a buyer only once you choose to proceed with that buyer.

## What we push for in every license

- A read-only, scoped export instead of standing access where possible.
- De-identification inside your environment, with a sample for your review.
- Raw-data deletion with a signed certificate after delivery.
- Incident notification commitments and the buyer’s current security attestation, with auditor and period.

See the full [security checklist for buyers](https://quotemydata.com/guides/security-questions-before-licensing-data).

## Report a concern

Email [hello@quotemydata.com](mailto:hello@quotemydata.com). Include the affected page and a description of the concern. Do not send passwords, access tokens or private company records by email.