Privacy Policy
TileQuoter OS (“we”, “us”) is business software for tile, stone and flooring showrooms: quotes, invoices, purchase orders, catalog management and related tools. This policy explains what information we handle, why, and who else sees it. It covers our website (tilequoteros.com) and the application (app.tilequoteros.com).
Who is responsible for which data
When a showroom (“you”, the business using TileQuoter OS) puts its customers’, vendors’ or projects’ information into the app, you decide what to enter and why, and we process it on your behalf to run the service. For information about our own account holders, such as your login and billing, we are responsible for it directly.
Information we collect
- Account information: your name, email address, role and password (stored by our authentication provider as a hash, never in readable form).
- Business information you enter: your showroom’s profile and branding; your customers’ names, emails, phone numbers and addresses; projects, rooms, measurements, estimates, quotes, invoices, payments and notes; vendors, purchase orders and shipment tracking; product catalog data, prices and costs.
- Files you upload: vendor catalogs and price lists (PDF, spreadsheets), product images, logos and room photos.
- Payment information: card payments and subscription billing are handled by Stripe. We never see or store full card numbers; we keep Stripe identifiers and the amounts and status of payments.
- Usage and technical data: activity within the app (for example, that an invoice was sent), log data such as IP address and browser type, and the cookies described below.
- Website enquiries: if you request early access, the details you submit.
How we use it
- To provide, secure and support the service you signed up for.
- To send the emails the app is designed to send on your behalf, such as quotes, invoices and reminders to your customers and purchase orders to your vendors.
- To bill for the subscription and process payments you ask us to take.
- To prevent abuse, diagnose problems and improve reliability.
- To comply with legal obligations.
We do not sell personal information, and we do not use your data for advertising.
QuickBooks Online
If you choose to connect QuickBooks Online, you sign in to Intuit and grant TileQuoter OS access using Intuit’s OAuth 2.0 authorization. We request only the accounting permission (com.intuit.quickbooks.accounting).
- What we send to QuickBooks: the customers, invoices, payments, vendors and purchase orders you choose to sync (or that sync automatically if you turn that setting on).
- What we read from QuickBooks: your company name, and the accounts, items, customers and vendors we need to avoid creating duplicates and to post entries to the right accounts, plus records we created, to update or remove them.
- How we protect access: the access and refresh tokens Intuit issues are encrypted at rest (AES-256-GCM) and used only server-side to perform the syncs you requested.
- How it’s used: only to provide the sync features. We do not sell QuickBooks data, use it for advertising, or send it to AI providers.
- Disconnecting: you can disconnect at any time in Settings. We then revoke our access with Intuit and delete the stored tokens. Records already created in your QuickBooks company stay there; they are yours.
Who else handles your information
We use these service providers to run TileQuoter OS, each only for its purpose:
- Supabase — database, file storage and sign-in.
- Vercel — hosting.
- Stripe — card payments, subscription billing and in-person card readers.
- Intuit (QuickBooks Online) — accounting sync, only if you connect it.
- Postmark — delivery of transactional email.
- Anthropic and Google — AI features you choose to use. Catalog and price-list extraction sends the uploaded file’s contents to Anthropic’s Claude; room-visualization sends the images you select to Google’s Gemini to generate the picture. We send only what the feature needs.
We may also disclose information if required by law, or to protect the rights, safety or security of our users or the service. If the business is ever sold or reorganized, information may transfer to the successor under this policy.
Cookies
The app uses essential cookies to keep you signed in and to protect sign-in and connection flows. We do not use advertising or cross-site tracking cookies.
Security
Data is encrypted in transit, each showroom’s data is isolated from every other’s at the database level, and sensitive credentials such as integration tokens are encrypted at rest. No system is perfectly secure, but we work to protect your information and will notify affected customers of a breach as the law requires.
Retention and deletion
We keep your information while your account is active. You can ask us to delete your account and its data at any time; we will do so within 30 days of a verified request, except for records we must keep to meet legal, tax or billing obligations. Backups are overwritten on their normal cycle.
Your choices and rights
You can access and correct most information directly in the app. Depending on where you live, you may have rights to access, correct, delete or export your personal information. If you are a showroom’s customer and want to exercise these rights, please contact that showroom first; we will help them respond. You can also write to us at the address below.
Children
TileQuoter OS is for businesses and is not directed to anyone under 18.
Changes
If we change this policy in a meaningful way we will update the date above and, for material changes, tell account holders in the app or by email.
Contact
Questions or requests: cielostjohns@gmail.com.