Security
What is never stored
Quotebook never stores a drawing, an attachment, or the body text of an email or WhatsApp message. It keeps only the facts its rules pull out of a message at arrival, a fingerprint of the message, and a pointer back to it in your own mailbox. A vendor's one-time link found in a forwarded or quoted message is stripped from anything kept.
Encryption
Every page and request is served over HTTPS, in transit. Your data sits in Cloudflare's database and storage platform, which Cloudflare encrypts at rest.
Access
Only the members you add to a project can see it. A vendor's own link shows only its one request; it needs no account, and it has no view of your ledger, your other vendors, or any other project.
Logs
Quotebook's Worker keeps no request logs: Workers Observability is switched off, so a request URL — which can carry a vendor's one-time link — is never written to a log.
Deletion
Closing a project starts its keep-until clock (12 months by default, up to 7 years, or suspended by a legal hold); you can delete a project or your account at any time from the app. See Privacy for exactly what is kept and for how long, and the backup schedule.
Defense and export-controlled work
Quotebook refuses sign-up for anything marked as DoD or ITAR-controlled work: it makes no export-control claims, so it cannot hold that work.
Contact
Report a security concern to hello@pageforplate.com.