SiteQuote

Privacy Policy

Last updated: October 13, 2026

SiteQuote is made by Sketchpad Solutions Inc., a company in Toronto, Ontario, Canada ("we", "us"). This policy explains what we collect, why, where it's kept and the choices you have. If anything is unclear, email support@sitequote.org.

The short version

  • We collect what you put into SiteQuote so it can make your quotes and invoices. We don't use it for advertising.
  • Your account data is stored in Canada.
  • To draft a quote, your job notes and photos are sent securely to our AI drafting provider. It doesn't train on them and, under its policy, deletes them within 30 days. Your customers' details and your prices aren't sent, unless you type them into your notes.
  • We don't sell your data, show ads or use tracking cookies.
  • You can ask for a copy of your data, a correction or deletion at any time.

What we collect when you have an account

  • Your sign-in: your email address and your password. Our sign-in provider stores the password scrambled (hashed), so no one can read it. It also keeps a record of sign-ins (when, and from which IP address) for security.
  • If you arrive by a tagged link (for example from a post), we save that tag with your account when you sign up, so we know which posts work.
  • Your business details: your company name, your name, phone, email, website, business address, tax registration number, licence number, country, province or state, currency, tax rates, warranty and terms text, and the payment details you choose to print on invoices.
  • Your trades, price book and rates. Your price book is yours: we use it only to fill in your own quotes. We don't share it with other contractors or sell it.
  • Your quotes and invoices: what you enter for your customers (names, phone numbers, emails, site addresses, PO numbers), your walkthrough notes, line items, scope, assumptions, exclusions, payment schedules, statuses and dates.
  • Your year-end tax summary is made on your phone from the invoices already in your account. We don't keep a copy of the file, and it goes only where you send it.
  • Your photos: the job photos you add and their notes. Your phone resizes each photo before it's uploaded, which also removes the location data (GPS) stored in the photo file. Photos are kept in private storage that only your account can open.
  • Usage counts: how many of your free quotes you've used, and a record of each AI draft (the day, and how much text it used). These records don't hold your notes, photos or quotes.
  • Problem reports: if you send one from the app, your message, the screen you were on, the quote it was about, and your browser and device type as your browser reports them.
  • If you start a paid plan (when paid plans open): Stripe's customer and subscription IDs and your plan's status. Your card details go to Stripe. We never see or store them.

How drafting works

When you ask for a draft, our server sends only what's needed to write it: your trade, your province or state and country, the item names and units in your price book (never your prices), your notes, and your photos with their notes. Our AI drafting provider doesn't train its models on them and, under its current policy, deletes them within 30 days, unless they're flagged for misuse or the law requires it to keep them longer. SiteQuote never sends anything to your customer. You review every line and send it yourself.

Your customers' details

You enter your customers' names and contact details to make quotes and invoices. We store them only for that and show them only to you. SiteQuote never contacts your customers: you send every quote and invoice yourself, from your phone. Please make sure you're allowed to use your customers' details this way.

The free trial (no account)

  • Your trade, your rate, your trial quote and its one photo stay in your browser's storage on your phone. We don't keep them.
  • When you ask for a draft, your trade, the unit of your rate (not the rate itself), your province or state and country, your notes and your photo with its note go to our AI drafting provider, as described above. We don't keep them.
  • To keep the free drafts fair, your phone keeps a random ID. Each draft is recorded in our database with a scrambled (hashed) version of that ID and of your network address. The scrambled values change every day, so they can't be linked from one day to the next, and your IP address itself is never stored in our database.
  • On the trial page, a bot check from Vercel (BotID) runs in your browser to stop automated use of the free drafts.
  • "Delete quote" in the trial, or clearing your browser's data for sitequote.org, removes the trial from your phone.

Your location

When you start the trial or a new account, we read the country and the province or state your internet connection appears to be in, from our host, Vercel. We use it only to start you in the right currency and tax. We don't store it, unless you keep it in your business details.

How we use your information

  • To run SiteQuote: sign you in, save your work, make your PDFs and your year-end tax summary, draft your quotes, fill in your rates from your price book, and count your free quotes and drafts.
  • To keep it safe and working: prevent abuse, fix problems and keep our costs in check.
  • To answer you when you write to us.

We don't sell your information, we don't use it for advertising, and we don't use your quotes to train AI models. Neither does our AI drafting provider.

We email you only about your account and SiteQuote itself: sign-up, password resets and important changes to the service or these policies. We don't send marketing email.

Who processes your information, and where

We use these companies to run SiteQuote. Each one handles your information only to provide its service to us.

  • Supabase: our database, sign-in and photo storage. Canada (Canada Central region).
  • Vercel: hosts the website and runs our server code. United States (our server code runs in Washington, D.C.; pages are served from the location nearest you).
  • Anthropic: our AI drafting provider. United States.
  • Resend: sends our sign-up and password emails. United States.
  • Stripe: will handle payments when paid plans open. United States.
  • Squarespace: our domain, and it forwards the email you send to support@sitequote.org to our email provider. United States.

Because some of them are in the United States, your information may be processed there and may be subject to US law, including lawful access by US authorities.

If you talk instead of typing, your phone's keyboard (for example Gboard or Apple's keyboard) turns your speech into text before it reaches SiteQuote. That happens between you and your keyboard's maker. We never receive audio.

Cookies and storage on your device

  • We don't use tracking or advertising cookies, and we don't run analytics.
  • When you sign in, your browser keeps a sign-in token in its storage so you stay signed in. Logging out removes it.
  • During a password reset, a small marker in your browser remembers that the reset is in progress.
  • The trial keeps your trial quote, its photo and its random ID in your browser's storage on your phone.
  • If you arrive by a tagged link, your browser keeps the tag until you sign up.

How long we keep your information

  • Your account data: until you delete it, or until you close your account.
  • A quote you delete is removed with its photos. Invoices can be voided but not deleted in the app, because they're records you may need to keep.
  • Closing your account: email us from your account's email address and we'll delete your account and its data within 30 days. Our backups roll over within 7 days after that.
  • Usage counts (no notes, photos or quotes): kept to run the daily limits and track our costs.
  • Problem reports and emails to us: kept while we need them to help you.
  • Technical logs: our hosting and database providers keep short-lived logs, which can include IP addresses, for security and troubleshooting.
  • Our providers keep some records under their own policies, for example Stripe's payment records, which the law requires.

Tax rules may require you to keep copies of your invoices. Download the PDFs and year-end tax summaries you need before you close your account.

Your choices and rights

  • See and fix it: most of your information is in the app, where you can see and change it at any time.
  • Ask us: for a copy of your personal information, to correct it or to delete it, email support@sitequote.org. We'll answer within 30 days.
  • Change your mind: you can stop using SiteQuote and ask us to delete your information at any time.
  • Complaints: tell us first at support@sitequote.org. If we can't sort it out, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Keeping it safe

  • Everything travels over an encrypted connection (HTTPS).
  • Each account can see only its own information. Our database enforces this on every table, and photos are in private storage.
  • Our providers encrypt the information they store.
  • No system is perfectly secure. If a breach puts you at real risk of significant harm, we'll tell you and the Office of the Privacy Commissioner of Canada, as the law requires.

Canadian privacy law, and visitors from the United States

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you're in the United States: SiteQuote is run from Canada, your account data is stored in Canada, and some processing happens in the United States (see above). We don't sell or share your personal information for advertising. You can ask for access, correction or deletion the same way.

Who can use SiteQuote

SiteQuote is for businesses and people 18 or older. It isn't meant for children.

Changes to this policy

If we change this policy in a way that matters, we'll update this page and the date at the top, and tell account holders by email before the change takes effect.

Contact

Questions or requests about your privacy: our Privacy Officer, support@sitequote.org.

Sketchpad Solutions Inc., Toronto, Ontario, Canada.