Privacy policy

Effective Date: October 24, 2026

Website: https://quotup.com

Legal Operator: Aghapy Tech Services, LLC

1. Introduction

Welcome to QuotUp.

QuotUp ("QuotUp," "Company," "we," "us," or "our") respects your privacy and is committed to protecting personal information in accordance with applicable privacy and data protection laws.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal information when you visit https://quotup.com, create an account, use our software or online services, communicate with us, or otherwise interact with our business (collectively, the "Services").

Please review this Policy carefully to understand our privacy practices.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed by QuotUp in connection with its website, software applications, customer accounts, support services, and related business operations.

It does not govern independent third-party websites or services that maintain separate privacy policies.

Where QuotUp processes personal information on behalf of a business customer, that customer may determine the purposes and means of processing. In those circumstances, the customer's privacy policy may also apply, and QuotUp may act as a service provider or processor.

3. Information We Collect

Depending on how you interact with the Services, we may collect the following categories of information.

A. Account and Identity Information

• Full name
• Email address
• Telephone number
• Username and account identifiers
• Business or organization name
• Job title or business role
• Account authentication information

B. Business and User-Submitted Information

Where relevant to the Services, we may process information you choose to provide, including:

• Business contact details
• Customer or client information
• Documents, files, and attachments
• Records, notes, and communications
• Information entered into forms or software features
• Other content submitted through your account

You should only submit personal information that you are authorized to provide.

C. Payment and Transaction Information

If paid services are offered, QuotUp or its authorized payment processors may process:

• Billing name and address
• Payment method information
• Transaction amounts and dates
• Subscription status
• Invoices and payment history

Payments are processed by Stripe. Card details are entered directly with Stripe and QuotUp does not store full payment card numbers; we keep only the references, amounts, dates and status Stripe returns.

D. Technical and Usage Information

Depending on the technology deployed, we may automatically collect:

• Internet Protocol (IP) address
• Browser type and version
• Device type and operating system
• Pages visited and features used
• Access dates and timestamps
• Referring URLs
• Error logs and performance diagnostics
• Cookie identifiers and similar technical information

E. Communications

When you contact QuotUp, we may collect your contact information, message contents, support requests, feedback, and correspondence history.

F. Text Message (SMS) Information

If you choose to receive text messages from QuotUp (for example, sign-in and security codes), we collect your mobile phone number and a record of your consent: the date and time, where you opted in, the disclosure you agreed to, and your IP address and browser. We also record any opt-out (for example, when you reply STOP). We use this information only to send the text messages you asked for, to honor your opt-in and opt-out choices, and to keep proof of your consent.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

4. How We Use Personal Information

We may use personal information for the following purposes:

• Providing Services: Creating accounts, authenticating users, delivering software functionality, and fulfilling requests.
• Customer Support: Responding to inquiries, troubleshooting issues, and providing assistance.
• Account Administration: Managing user permissions, account settings, and subscription relationships.
• Payment Processing: Processing authorized transactions, maintaining billing records, and preventing payment fraud.
• Security: Detecting unauthorized activity, preventing abuse, and protecting our infrastructure and users.
• Service Improvement: Evaluating performance, diagnosing technical problems, and improving functionality.
• Communications: Sending account notices, service updates, and other operational messages.
• Marketing: Sending promotional communications where permitted by law and consistent with applicable consent or opt-out requirements.
• Legal Compliance: Complying with legal obligations, responding to lawful requests, and enforcing agreements.

We will not use personal information for materially incompatible purposes without providing any notice or obtaining any consent required by applicable law.

5. Legal Bases for Processing

Where laws such as the European Union or United Kingdom General Data Protection Regulation apply, QuotUp will identify an appropriate legal basis for each processing activity.

Depending on the circumstances, these bases may include:

• Contractual necessity: Processing required to provide the Services or fulfill a contract.
• Legitimate interests: Processing necessary for proportionate business purposes such as security, fraud prevention, and service improvement.
• Legal obligations: Processing required to comply with applicable law.
• Consent: Processing based on freely given, specific, informed, and unambiguous consent where required.

Where processing relies on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing performed before withdrawal.

6. Cookies and Tracking Technologies

QuotUp may use cookies, local storage, and similar technologies to support website functionality and understand how visitors interact with the Services.

Depending on the technologies implemented, these may include:

• Essential Cookies: Necessary for authentication, security, session management, and core website functionality.
• Preference Cookies: Used to remember selected settings and user preferences.
• Analytics Cookies: Used to measure website traffic, feature usage, and performance.
• Advertising Cookies: If implemented, used to measure advertising performance or support personalized advertising.

Where required by applicable law, nonessential cookies will be used only after appropriate consent.

You may manage cookies through your browser settings and any cookie preference controls provided by QuotUp.

QuotUp uses a small number of first-party cookies: sign-in cookies that keep you logged in, a theme cookie (quotup-theme) that remembers light or dark mode, and a consent cookie (quotup_consent, kept for 180 days) that remembers your cookie choice. If analytics is enabled, Google Analytics, Google Tag Manager or the Google Ads conversion tag (used only to count signups that came from our ads, with ad personalization turned off) loads only after you accept cookies in the cookie banner, and you can change that choice at any time with the Cookie settings link in the website footer. Error reports sent to our monitoring provider do not include personal information.

7. How We Disclose Personal Information

QuotUp may disclose personal information to the following categories of recipients where reasonably necessary and legally permitted.

Service Providers

Vendors providing hosting, cloud infrastructure, payment processing, analytics, customer support, email delivery, text message delivery, security, and other operational services.

Text Message (SMS) Opt-In Data

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Your mobile number and SMS consent are disclosed only to our text message delivery provider and wireless carriers, solely to deliver the messages you asked to receive.

Business Customers and Authorized Users

Where the Services facilitate business workflows or collaboration, information may be accessible to the business customer or other authorized users according to account permissions and applicable agreements.

Legal and Regulatory Authorities

We may disclose information where required by applicable law, valid legal process, or lawful government requests, or where reasonably necessary to protect legal rights and safety.

Corporate Transactions

Personal information may be transferred in connection with a merger, acquisition, financing, restructuring, or sale of business assets, subject to applicable legal requirements.

With Your Direction

We may share information with third parties when you request or authorize the disclosure.

QuotUp will not disclose personal information for purposes materially inconsistent with this Policy without complying with applicable notice and consent requirements.

8. Sale, Sharing, and Targeted Advertising

QuotUp does not sell personal information and does not share it for cross-context behavioral or targeted advertising.

If QuotUp engages in activities legally classified as selling or sharing personal information, or processing it for targeted advertising, the Policy will identify the relevant categories, purposes, recipients, and available opt-out mechanisms.

Where applicable, QuotUp will honor legally recognized opt-out preference signals and provide required privacy choices.

9. Data Security

QuotUp will maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, alteration, disclosure, loss, or destruction.

Depending on the nature of the information and systems involved, safeguards may include access controls, authentication measures, encryption, logging, monitoring, software updates, and vendor security assessments.

No method of electronic transmission or storage is completely secure. Accordingly, absolute security cannot be guaranteed.

Where required by law, QuotUp will provide notifications concerning qualifying personal information security incidents.

10. Data Retention

QuotUp will retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Retention decisions may consider:

• The duration of an account or business relationship.
• The purpose for which information was collected.
• Contractual obligations.
• Tax, accounting, and regulatory requirements.
• Security and fraud prevention needs.
• Applicable limitation periods and legal disputes.

When personal information is no longer needed, QuotUp will delete, anonymize, or otherwise securely dispose of it, subject to lawful retention requirements and technical limitations such as backup cycles.

When a business closes its QuotUp account, its account data, customer records, documents and files are permanently deleted 30 days after closure. Billing and transaction records may be kept longer where tax, accounting or other legal requirements apply, and deleted information may remain in backups for a limited period until those backups are overwritten.

11. Your Privacy Rights

Depending on your jurisdiction and the circumstances of processing, you may have rights to:

• Request access to personal information held about you.
• Request correction of inaccurate information.
• Request deletion of eligible personal information.
• Obtain a portable copy of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of certain marketing communications.
• Opt out of sale, sharing, or targeted advertising where applicable.
• Appeal a decision concerning a privacy rights request where required by law.
• Exercise applicable rights without unlawful discrimination or retaliation.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, contact: support@quotup.com

QuotUp may take reasonable steps to verify your identity before fulfilling a request and will respond within the timeframe required by applicable law.

Authorized agents may submit requests where permitted by law and subject to applicable verification requirements.

12. California Privacy Rights

If QuotUp is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), eligible California residents may have additional rights.

These may include rights to know, access, correct, and delete personal information, and to opt out of the sale or sharing of personal information.

California residents may also have the right to limit certain uses and disclosures of sensitive personal information where applicable.

QuotUp will provide required notices and mechanisms for exercising these rights, including any required "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" link.

QuotUp does not sell personal information or share it for cross-context behavioral advertising, and does not use or disclose sensitive personal information for purposes that would give rise to a right to limit. California residents may exercise their rights by contacting us as described in Section 11.

13. International Data Transfers

Depending on QuotUp's operations and service providers, personal information may be processed in countries other than the country where it was collected.

Where international transfers are subject to specific legal requirements, QuotUp will implement appropriate transfer safeguards, which may include legally recognized contractual protections or other authorized transfer mechanisms.

QuotUp's services are hosted in the United States, with application hosting by Vercel and database, authentication and file storage by Supabase. If you access the Services from outside the United States, your information will be transferred to and processed in the United States.

14. Children's Privacy

The Services are intended for adults and are not directed to children under 18.

QuotUp does not knowingly solicit personal information directly from children for independent account registration.

If we become aware that personal information was collected from a child in violation of applicable law, we will take appropriate steps to address the collection, including deletion where required.

Parents or guardians may contact QuotUp regarding concerns about children's information.

15. Automated Decision-Making and Artificial Intelligence

QuotUp does not currently offer artificial intelligence features, does not send user content to AI providers, and does not use your content to train AI models. If we introduce such features, we will update this Policy before they are used.

16. Third-Party Links and Integrations

The Services may contain links to third-party websites or integrations operated by independent organizations.

QuotUp does not control the privacy practices of those independent services.

We encourage users to review the applicable third-party privacy policies before providing personal information.

17. Marketing Communications

Where QuotUp sends promotional communications, recipients may opt out by using the unsubscribe instructions included in the communication or contacting QuotUp.

We may continue sending essential transactional, account, security, or administrative notices where permitted by law.

Marketing preferences will be managed in accordance with applicable legal requirements.

18. Business Customer Data

If QuotUp provides software services to organizations, business customers may upload or otherwise process personal information relating to their employees, customers, vendors, or other individuals.

In such circumstances, the business customer may act as the controller or business responsible for determining the purposes of processing, while QuotUp may act as a processor or service provider.

QuotUp will process such information according to applicable contractual instructions, data protection obligations, and legal requirements.

Where necessary, QuotUp and the business customer will enter into a separate Data Processing Agreement.

Individuals seeking to exercise rights concerning information controlled by a business customer may need to contact that business customer directly.

19. Changes to This Privacy Policy

QuotUp may update this Privacy Policy periodically to reflect changes in our Services, business practices, technologies, or legal obligations.

The revised Policy will display an updated effective or revision date.

Where changes are material, we will provide additional notice or obtain consent when required by applicable law.

20. Contact Us

For privacy questions, personal information requests, or concerns regarding this Policy, contact:

QuotUp — Privacy Office

• Legal Entity: Aghapy Tech Services, LLC
• Privacy Email: support@quotup.com
• Business Address: 246 Terrace Ave, Lodi, NJ 07644, USA
• Website: https://quotup.com

21. Complaints

If you believe your personal information has been processed improperly, you may contact QuotUp using the information above.

We will review privacy complaints and respond in accordance with applicable law.

Where available, you may also have the right to submit a complaint to the relevant data protection authority or regulatory agency.