1. Data Controller

Alexandre RENDA – (Pro)pulse, 7 Avenue des Papalins, Le Michelangelo, 98000 Monaco. Contact: support@quickote.app

2. Data Collected

Identification data: last name, first name, email address, password (hashed). Professional data: company name, address, VAT number, phone, IBAN. Billing data: quotes, invoices, customer information, amounts. Usage data: gamification scores, activity statistics. Technical data: IP address, browser type, connection timestamps.

3. Purposes of Processing

Creation and management of your user account. Generation and management of quotes and invoices. Gamification features and statistics. Subscription and payment management via Lemon Squeezy. Artificial intelligence assistance for document creation. Continuous service improvement. AI-powered assistance features are provided exclusively as a tool to aid drafting and productivity. The user remains solely responsible for verifying, validating, and using generated content before any dissemination, transmission, or decision-making. No legal, tax, accounting, or commercial decision should be made exclusively based on automatically generated content.

4. Legal Basis

Processing is based on the performance of the contract (service use), your consent (non-essential cookies), and our legitimate interest (service improvement and security).

5. Subprocessors and Third-Party Services

Service	Purpose	Location
Supabase	Database hosting, authentication, storage	European Union
Cloudflare	Frontend hosting, CDN & anti-bot protection (Turnstile)	Worldwide (GDPR)
Lemon Squeezy	Official Merchant of Record — payments, taxes and subscription management	EU / US
OpenAI	AI quote generation	US
Browser speech recognition service	Voice transcription when provided by the browser	Browser dependent
Groq	Backup voice transcription (Whisper)	US
Company Search API (annuaire-entreprises, French public service)	Autocompletion of legal company information	France
Resend	Sending transactional emails	EU / US
Sentry	Error monitoring and performance measurement	EU / US

Some providers mentioned above may be located outside the European Union or transfer certain data to third countries, particularly the United States. When such transfers occur, (Pro)pulse ensures that they are based on an appropriate legal mechanism in accordance with applicable regulations, including the European Commission's Standard Contractual Clauses or any other recognized adequate safeguard.

6. Retention Period

Account data: upon account closure, drafts and non-issuing personal data are deleted or anonymized immediately. Unconverted quotes are anonymized. The authentication account is anonymized then sealed: no reconnection possible. Closure is irreversible. Issued invoices and credit notes: retained for the applicable contractual retention period, which can be up to 12 years (accounting and tax obligations — Commercial Code L.123-22), even after account closure. Technical logs: 12 months maximum.

7. Your Rights

In accordance with the GDPR and Monegasque legislation (Law No. 1.565 of December 3, 2024, on the protection of personal data; authority: APDP), you have the following rights: right of access (obtain a copy of your personal data); right to rectification (correct your inaccurate data); right to erasure (request deletion of your data via settings or email); right to portability (receive your data in a structured format); right to object and restrict (object to or restrict the processing of your data). To exercise these rights, contact us at support@quickote.app.

8. Security

All communications are encrypted via HTTPS/TLS. Passwords are hashed with bcrypt. Strict data isolation per user (Row Level Security). No sensitive data is exposed to other users. Despite the implementation of reasonable technical and organizational measures designed to protect personal data, no computer system or internet transmission can guarantee absolute security. (Pro)pulse cannot guarantee the complete absence of security incidents, unauthorized access, alteration, loss, or destruction of data resulting from events beyond its reasonable control.

9. Cookies

Essential cookies: necessary for the service to function — authentication, preferences (theme, currency, display) and session security. Always active, no consent required. Security and anti-fraud: Cloudflare Turnstile anti-bot protection on login and registration pages, essential for account security. Audience measurement (optional): performance monitoring via Sentry is only activated with your explicit consent. Error monitoring (Sentry) remains active under our legitimate security interest, with personal data filtering (anonymization of identifiers and emails). You can accept, refuse, or withdraw your consent at any time from the Cookies page.

10. Hosting

The application is hosted via Cloudflare Pages (global CDN). Data is hosted on secure servers in the European Union via Supabase Cloud. The publisher's and host's identification information is detailed in our legal notices.

11. Contact

For any questions regarding this policy: Alexandre RENDA – (Pro)pulse, 7 Avenue des Papalins, Le Michelangelo, 98000 Monaco — support@quickote.app

Privacy Policy