Trust and Security
How QuoteCore+ protects your data and respects your business.
Straightforward facts about security, plan terms, cancellation, and data ownership. No vague promises - just what we actually do.
Security
Passwords are hashed
Your password is never seen in plain text. Supabase Auth hashes passwords using industry-standard algorithms.
Encrypted at rest
Database and file storage are encrypted at rest at our infrastructure providers (Supabase, Vercel).
Row-level security
Row-level security (RLS) policies on the database ensure users only see their own workspace data.
Two-factor authentication
TOTP-based 2FA is available. Recovery codes are hashed with bcrypt. Managed by Supabase Auth.
TLS in transit
All web traffic is served over HTTPS. Data in transit between your browser and our servers is encrypted.
Plans, evaluation and cancellation
Try the workflow before subscribing
Use the interactive app demo or standalone free tools to evaluate QuoteCore+ before starting a paid subscription.
Manage your subscription
Subscription changes are handled through your account settings or by contacting us.
Auto-renewal is clear
Paid subscriptions renew automatically for the same billing interval. You are informed of automatic renewal during checkout.
Refunds considered case-by-case
We consider refund requests on a case-by-case basis, including if you were charged after cancelling correctly.
Your data
Export your data
You can export your customer data using the export features available in your plan. We recommend regular exports of commercially critical records.
30-day grace period
After cancellation or termination, your data remains available for export for up to 30 days before deletion.
You own your customer data
You are the controller of your customers' data. We process it on your behalf as the data processor. A Data Processing Addendum is available on request.
GDPR compliant
We process data under GDPR lawful bases. Our privacy policy details your rights including access, rectification, erasure, and portability.
Where data is stored
Supabase (database, auth, storage)
Project hosted in Sydney, Australia (ap-southeast-2). Encrypted at rest. SOC 2 Type II certified infrastructure.
Vercel (web hosting)
Global edge network. Server logs retained per their policies. Data may transit through global edge regions.
Data location
Primary database and file storage in Supabase Sydney. Email delivery transits through global provider networks.
What we do not claim
No system is perfectly secure, and we do not pretend otherwise. If a security issue is found, we investigate and fix it. We do not claim certifications we do not hold. We do not claim integrations we have not built. We do not store payment card details - billing is handled by our payment provider.
Related
Get started
Free tools with no signup. Current paid configurations start at US$29/month; explore the interactive demo before subscribing. Cancel anytime.
Explore the interactive demo