Official Policy

Privacy Policy

Last Updated: October 13, 2026 • Effective Date: October 1, 2026

1. Introduction & Ownership

Welcome to QuoteFlow (operated by Blend & Bold, available at https://blendandbold.com). We provide a professional quotation, invoicing, and client approval platform for businesses, freelancers, and enterprises.

This Privacy Policy explains what personal information we collect, why we collect it, how it is used, and how we protect your information when you use our website, application, and services.

2. Google User Data Policy & Limited Use Disclosure

When you choose to sign up or sign in to QuoteFlow using your Google Account (via Google OAuth / Google Sign-In), we access only the basic profile data provided by Google:

  • Your Email Address: Used solely to identify your account, send workspace notifications, and link your company organization.
  • Your Name: Used to display your name on quotations, team member lists, and profile settings.
  • Your Profile Photo / Avatar: Displayed within your personal workspace navigation.

Our Commitments to Google User Data:

  • We NEVER sell, rent, or trade your Google user data to any third party.
  • We NEVER use Google user data for advertising, marketing profiling, or retargeting purposes.
  • We NEVER request access to your Google Drive, Gmail messages, contacts, or calendar. We only request basic identification (openid, email, profile).
  • Google user data is used strictly to provide and improve the QuoteFlow quotation service.

3. Information We Collect

In addition to Google OAuth credentials, we collect:

  • Account and Business Information: Your business name, GST/Tax identification number, business address, phone number, and logo that you upload to customize quotations and invoices.
  • Quotation and Financial Data: Customer contact details you save, line items, pricing, payment terms, and generated quotation/invoice PDFs.
  • Usage and System Logs: Device type, browser user agent, IP address, and timestamp logs when clients open, digitally sign, or approve quotation links.

4. Data Storage, Security & Hosting

Your security is our top priority. All database communication, authentication sessions, and file uploads are secured with industry-standard TLS/SSL encryption (HTTPS). Data is hosted securely on high-availability cloud infrastructure with strict Row-Level Security (RLS) policies, preventing unauthorized cross-tenant data access.

5. Your Rights & Data Deletion

You have full ownership and control over your personal data:

  • Access & Export: You can export your quotations, invoices, and customer lists anytime.
  • Correction: You can update your profile, email, company name, and banking details directly in Settings.
  • Account Deletion: You can request permanent deletion of your account and all associated quotation data by contacting us at quotes@blendandbold.com. All associated records will be permanently purged within 30 days.

6. Third-Party Service Providers

We partner with trusted third-party cloud service providers strictly for essential infrastructure purposes:

  • Supabase: For database management and secure authentication.
  • Cloudflare: For global CDN edge delivery and DDoS mitigation.
  • Razorpay: For secure subscription payment processing (we never store credit card or CVV details).

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our privacy team at: