Privacy Policy

Last updated: July 20, 2026

QuoFlow is a product of North Peak Labs, Inc. (the “Company,” “we,” “us,” or “our”). We are committed to protecting the privacy of the people who use our website and our service. This Privacy Policy explains how we collect, use, share, and safeguard information, and the choices you have.

For purposes of this Policy, “Site” refers to our website at quoflowhq.com. “Service” refers to the QuoFlow application and related services, through which service professionals (“Pros”) generate quotes, schedule jobs, manage work orders, send invoices, and communicate with their own customers. “You” refers to any user of the Site or Service.

By accessing the Site or Service, you accept this Privacy Policy and our Terms of Service, and you consent to the collection, use, and disclosure of information as described here.

A note on the two kinds of people in QuoFlow

QuoFlow serves two groups, and our role differs for each:

• Pros — the businesses and individuals who hold a QuoFlow account. For their account and usage data, we act as the controller (we decide how it is used).
• A Pro's customers (for example, a homeowner who requests a quote) — when a Pro enters or collects a customer's details through QuoFlow, we process that information on the Pro's behalf as a service provider. The Pro is responsible for that information and for their own privacy practices. If you are a Pro's customer and want to access or delete your information, please contact the Pro you worked with; we will assist them as needed.

1. Information We Collect

Account and profile information (Pros)

To create and use a QuoFlow account, we collect:

• Your name and email address, and a password (authentication is handled by Google Firebase Authentication; we do not store your password ourselves).
• Business profile details you choose to add, such as business name, business contact email, phone number, business tax ID, service pricing, terms, and a logo or other images you upload.

Customer and job information (entered by Pros)

When Pros use the Service, they submit information about their own customers and jobs. This may include a customer's name, email address, phone number, service/property address, property photos, measurements or estimates, and notes or messages related to a job. As described above, we process this information on the Pro's behalf.

Payment information

Subscription and payment processing is handled by Stripe. When you subscribe or transact, you provide payment details directly to Stripe, and Stripe processes them under its own privacy policy. We receive limited billing information (such as the last four digits of a card, card brand, billing contact, and transaction status) but do not collect or store full payment card numbers.

Information collected automatically

When you use the Site or Service, we and our service providers automatically collect certain technical information, such as your IP address, device and browser type, operating system, referring/exit pages, the pages and features you use, and the date and time of access. We collect this using cookies, similar technologies, and logging tools, including:

• Google Analytics — to understand how visitors find and use the Site and Service, on an aggregate basis.
• Datadog — for application monitoring, performance, security, and troubleshooting; this may include IP addresses and diagnostic data contained in our logs.
• Google Firebase — to authenticate accounts and keep you signed in.

Cookies are small files stored on your device. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until they expire or you delete them). See Section 4 for your choices around cookies and analytics.

Children's privacy

The Site and Service are intended for businesses and are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information without parental consent, we will delete it. If you believe a child has provided us information, contact us at support@quoflowhq.com.

2. How We Use Information

We use information to:

• Provide, operate, and maintain the Service and its features;
• Create and manage accounts, authenticate users, and process subscriptions and payments;
• Send transactional and administrative messages (for example, account notices, quote and job notifications, and receipts);
• Respond to questions, provide support, and request feedback;
• Monitor, secure, debug, and improve the Service and develop new features;
• Send promotional communications, where permitted, which you can opt out of (see Section 4); and
• Comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We do not sell your personal information, and we do not share it with third parties for their own marketing. We share information only as described below:

• Service providers (subprocessors). We share information with vendors who perform services for us and process information under our instructions, including Google (Firebase Authentication, Google Maps Platform for address lookup, and Google Cloud for hosting and file storage), Stripe (payments), Datadog (monitoring and logging), Google Analytics, and Twilio SendGrid (email delivery).
• Between a Pro and their customer. The Service exists to facilitate communication between a Pro and their customers, so quotes, messages, and related details are shared between those parties as part of normal use.
• Legal and safety. We may disclose information if we believe in good faith that it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms; to detect or prevent fraud or security issues; or to protect the rights, property, or safety of our users or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

We may use and share aggregated or de-identified information (which cannot reasonably be used to identify you) for any purpose, such as analyzing usage and improving the Service.

4. Cookies, Analytics, and Your Choices

You can set your browser to refuse some or all cookies or to alert you when cookies are being sent; however, parts of the Service may not function properly without them. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

The Service is offered only in the United States, so EU/UK cookie-consent rules do not apply. California residents can exercise the choices described in Section 6.

You can opt out of promotional emails at any time using the unsubscribe link in those emails or in your account settings. We may still send you non-promotional administrative messages about your account or material changes to this Policy.

5. How We Protect Information

We implement technical and organizational measures designed to protect information from unauthorized access, including encryption in transit, access controls, and reputable cloud infrastructure. Your account is protected by your password — please keep it confidential and sign out after use. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Privacy Rights

You may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at support@quoflowhq.com. We will respond within 45 days of receiving your request, or as otherwise required by applicable law. In certain circumstances, we may extend this period by an additional 45 days with notice to you.

If you are a Pro's customer, your information is controlled by the Pro you interacted with. Please direct access or deletion requests to that Pro directly, and we will support them in responding.

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Know: The right to know what personal information we collect, use, disclose, and retain about you.
• Access: The right to request a copy of the personal information we hold about you.
• Deletion: The right to request deletion of your personal information, subject to certain exceptions.
• Correction: The right to request correction of inaccurate personal information.
• Opt Out: The right to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising.

We do not sell your personal information. We may use third-party analytics tools (such as Google Analytics) that constitute “sharing” under California law for cross-context behavioral advertising purposes. You may opt out of this sharing by adjusting your browser or cookie settings or by contacting us at support@quoflowhq.com. We will not discriminate against you for exercising any of these rights.

New Hampshire Residents (NHPA)

If you are a New Hampshire resident, you have the right to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising and the sale of personal data. To exercise these rights, contact us at support@quoflowhq.com.

To submit any privacy rights request, contact us at support@quoflowhq.com.

7. Data Retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it.

We retain different categories of data according to the following schedule:

• Account and contact information (name, email, business details): retained for 12 months after account closure, then deleted or de-identified.
• Job records, quotes, and photos: retained for 6 months after account closure, then deleted or de-identified.
• Payment and transaction records: retained for 7 years from the date of the transaction to comply with applicable tax and financial recordkeeping obligations.
• Support communications and correspondence: retained for 18 months after the last interaction or account closure, whichever is later.
• Usage and activity logs: retained for 90 days, after which they may be aggregated and de-identified for product-improvement purposes.
• Any other personal information not listed above: retained for as long as necessary to fulfill the stated business purpose, but no longer than 2 years after account closure.

8. Availability and Location

QuoFlow is offered only in the United States and is intended for users located in the United States, including California residents. We do not market the Service to, or knowingly collect information from, individuals outside the United States. We are based in and process information in the United States.

9. Links to Other Websites

The Site or Service may link to or integrate with third-party websites and applications. We are not responsible for the privacy practices of those third parties, and this Policy does not apply to them. We encourage you to read the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by email to the address associated with your account or by posting a prominent notice on the Site. Material changes take effect 30 days after notice; non-material changes or clarifications take effect immediately. Please review this page periodically.

11. Contact Us

If you have questions about this Policy or our privacy practices, contact us at support@quoflowhq.com or by mail at:

North Peak Labs, Inc.
2810 North Church Street, Ste 88423
Wilmington, DE 19802
United States