This policy explains what personal data DuneQuote (dunequote.com) collects, why, and what choices you have. DuneQuote is run by an individual based in Dubai, United Arab Emirates, who is responsible for your data (“we”). We aim to handle personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other privacy laws that apply.
1. What we collect
- Account details: your email address, and the name, business name, WhatsApp number, TRN, address, logo and settings you add.
- Documents: the quotes, invoices and credit notes you create, including your clients' names, phone numbers, email addresses, addresses and TRNs that you enter.
- Acceptance records: when a client accepts and signs a quote, we store their typed name, the signature image, the time, their IP address and a summary of their device and browser. This is kept as evidence of acceptance.
- Payment status: your plan and subscription status. Card details are handled by Dodo Payments and never reach us.
- Technical data: basic logs (such as IP address, browser type and errors) needed to run and protect the service. We use one sign-in cookie and no advertising or tracking cookies.
2. Why we use it
We use this data to provide the service you asked for: creating and showing your documents, sending sign-in links and notifications, sending the follow-up and payment reminders you set up, processing upgrades, keeping the service secure and answering your messages. The legal basis is performing our agreement with you and our legitimate interest in running a secure service. You are responsible for having a valid reason to add your clients' details.
3. We do not sell your data
We do not sell or rent personal data, and we do not use it for advertising.
4. Service providers
We use a small number of trusted providers to run DuneQuote:
- Cloudflare hosts the website and app and stores the database.
- Resend sends emails (sign-in links, notifications and reminders).
- Dodo Payments processes payments as merchant of record and has its own privacy policy for payment data.
These providers may process data on servers outside the UAE. We use them only for the purposes above and rely on their security and data-protection commitments.
5. What your clients see
Anyone who has the link to a document can view it, so share links only with the people they are meant for. Links are long and random, and documents are not listed on search engines.
6. How long we keep data
We keep your account and documents while your account is open, so you can see past quotes and invoices. If you ask us to delete your account, we delete your data within 30 days, except where we have to keep something by law (for example, payment records held by Dodo Payments). Remember that you may have your own legal duty to keep tax records, so download any documents you need before deletion.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, or stop or limit certain uses of it. Most details can be changed directly in Settings. For anything else, email [email protected]. We will reply within 30 days. If your client wants their data removed, they can contact you or us.
8. Security
We use encrypted connections (HTTPS), sign-in links that expire, and access controls with our providers. No online service is 100% secure, so please tell us straight away if you notice anything suspicious.
9. Changes
If we make important changes to this policy, we will tell you by email or in the app.
10. Contact
Privacy questions or requests: [email protected].