Privacy
Quotebook is a quote tracker for one buyer's own vendor search. This page says exactly what it stores, where, for how long, and who else ever sees any of it.
What Quotebook stores
Your account: your email address and name, your Google account id if you signed in with Google, and your answers to the one-time setup questions. A sign-in session is kept only as the hash of its cookie, never the cookie itself.
Each project: its name, machine type and forwarding address, and the members you add. Each vendor: the name and contacts you enter, the NDA date and which template was used, the stage it has reached and when, and, once you confirm it, the company that actually makes the part.
The timeline: for an email or a WhatsApp message, the subject, the sender and the channel, and whatever Quotebook's rules pulled out of it at arrival — a price, a volume, an NDA mention — each with a short quoted span (at most 120 characters) as evidence, the version of the rule that found it, a fingerprint of the message so a later copy can be matched, a pointer back to it in your own mailbox, and its Date header and DKIM result. The message text itself, for both email and WhatsApp, is never stored. A call or a note you log is kept in full; it is your own written record. For a file sent to a vendor: its file name, any part number and revision read from that name or later confirmed, and a fingerprint of its bytes — never the file itself.
What you confirm or type in: what you asked each vendor for, and the quote you saved for each vendor. When you use "Read it for me", the fields the model read are kept alongside what you actually saved, so its accuracy can be checked later.
Requests sent to a vendor, their one-time link, and their dates (sent, reminded, acknowledged, stopped); a link stops working after 180 days. If a vendor stops requests, a one-way hash of its address is kept so it is never mailed again, even once the project that stopped it is deleted. Usage counts, and whether you clicked to ask about the paid plan and your answers to the four price questions if you gave them.
Vendors
For a vendor, Quotebook keeps the contacts you entered for it and the state of each request sent to it. The first request email names the buyer who sent it as the sender and as the one responsible for it (the data controller for your reply and contact details), says what it is for, states your rights, and links to this page; a reminder does not repeat that line, and no Quotebook email to a vendor promotes Quotebook. You can ask the buyer, or Quotebook at the address below, what is held about you and have it corrected or deleted; a stop click is honoured at once.
Where
Quotebook runs on Cloudflare. Its database is created in a region Cloudflare picks automatically, near wherever the project was first set up — most likely North America, though this could not be confirmed from Cloudflare's own dashboard. Your data is therefore likely held outside Canada.
How long
A project is kept until you close it, then for 12 months by default; you may extend that to up to 7 years, and a legal hold suspends deletion entirely while it is on. You can close and delete a project, or delete your account, from the app at any time. Deleted data is held beyond use and removed from backups on Cloudflare's own schedule, within 30 days; restoring from a backup would re-apply any deletion made since.
Processors
Cloudflare hosts the app and its database, and receives your project mail through Cloudflare Email Routing, whose own activity log keeps the sender, recipient, subject and message ID of a routed message for about 31 days. Amazon SES, in its us-west-2 region, sends vendor requests. Anthropic reads a quote only when you click "Read it for me": what you give it is kept by Anthropic for up to 30 days and is not used to train its models. Google is asked for only your name and email address when you sign in. Quotebook's own server keeps no request logs.
What it does not do
No tracking pixels, no advertising, no analytics scripts. Your data is never sold or shared outside your workspace, and Quotebook is not for DoD or ITAR-controlled work.
Your rights and how to delete
Export, close, delete a project, or delete your account, from the app at any time. For anything else, or for a vendor asking about its own details, mail hello@pageforplate.com.
See also Security and Data processing agreement.