Trust and Security
How QuoteCore+ protects your data and respects your business.
Straightforward facts about security, trial terms, cancellation, and data ownership. No vague promises - just what we actually do.
Security
Passwords are hashed
Your password is never seen in plain text. Supabase Auth hashes passwords using industry-standard algorithms.
Encrypted at rest
Database and file storage are encrypted at rest at our infrastructure providers (Supabase, Vercel).
Row-level security
Row-level security (RLS) policies on the database ensure users only see their own workspace data.
Two-factor authentication
TOTP-based 2FA is available. Recovery codes are hashed with bcrypt. Managed by Supabase Auth.
TLS in transit
All web traffic is served over HTTPS. Data in transit between your browser and our servers is encrypted.
Trial and cancellation
14-day free trial
All features unlocked. No credit card required to start. The trial does not automatically become a paid subscription.
Cancel anytime
Cancel through your account settings or by contacting us. Cancellation stops future renewals. No lock-in contract.
Auto-renewal is clear
Paid subscriptions renew automatically for the same billing interval. You are informed of automatic renewal during checkout.
Refunds considered case-by-case
We consider refund requests on a case-by-case basis, including if you were charged after cancelling correctly.
Your data
Export your data
You can export your customer data using the export features available in your plan. We recommend regular exports of commercially critical records.
30-day grace period
After cancellation or termination, your data remains available for export for up to 30 days before deletion.
You own your customer data
You are the controller of your customers' data. We process it on your behalf as the data processor. A Data Processing Addendum is available on request.
GDPR compliant
We process data under GDPR lawful bases. Our privacy policy details your rights including access, rectification, erasure, and portability.
Where data is stored
Supabase (database, auth, storage)
Project hosted in Sydney, Australia (ap-southeast-2). Encrypted at rest. SOC 2 Type II certified infrastructure.
Vercel (web hosting)
Global edge network. Server logs retained per their policies. Data may transit through global edge regions.
Data location
Primary database and file storage in Supabase Sydney. Email delivery transits through global provider networks.
What we do not claim
No system is perfectly secure, and we do not pretend otherwise. If a security issue is found, we investigate and fix it. We do not claim certifications we do not hold. We do not claim integrations we have not built. We do not store payment card details - billing is handled by our payment provider.
Related
Start your free trial
14 days, all features, no credit card required. Cancel anytime.
Start free trial