Privacy Policy
CounterQuotes ("we", "us") makes countertop estimating, scheduling, and CRM software for fabrication shops, served at counterquotes.com and each shop's own yourshop.counterquotes.com address. This policy explains what we collect and what we do with it.
What we collect
- Contact & signup requests. If you fill out the form on our contact page (or request a signup link), we keep the email address, shop name, and shop address (subdomain) you gave us — so we can follow up and set you up. That's the only thing the form does.
- Account information. When your shop is onboarded, we store the basics needed to run your account: names, work email addresses, sign-in credentials (passwords are held by our identity service in hashed form; passkeys never leave your device), and your shop's name, logo, and settings.
- Your shop's business data. Quotes, drawings, customers, price lists, schedules, and everything else your team enters. This data is yours — see below.
- Quote recipients. When your customer opens a hosted quote link, we record that it was viewed. If they accept the quote online, we record the typed name, the email on file for the quote, the IP address and browser info, and a copy of the quote exactly as accepted — that record is the signature evidence your shop relies on. Customers a shop invites to its portal also get a sign-in account, handled like any other account above.
- Operational logs. Standard server logs (IP address, browser type, pages requested) kept for security and troubleshooting.
This marketing site uses Google Analytics to understand traffic, plus advertising tags from Google and Meta (Facebook and Instagram). When you visit, these tags let Google and Meta know, and whether you later sign up, so we can tell which ads work and show our ads to people who have visited. We don't sell your information. The CounterQuotes app itself has no advertising tags; it uses cookies only to keep you signed in.
How we use it
- To operate the product and respond to your requests.
- To send transactional email — invitations, notifications you've turned on, and replies. We don't add you to marketing lists you didn't ask for.
- To keep the service secure and diagnose problems.
We do not sell your data, ever, and we don't share it with third parties except the service providers below.
Your business data is yours
Every shop's data is isolated from every other shop's — enforced in the database itself, not just in application code. Our staff access your data only to support you or keep the service running. If you leave, we'll export your data for you and then delete it on request.
Service providers
- Payments — subscription billing is processed by Stripe. Your card details go directly to Stripe and are never seen or stored by us; Stripe's own privacy policy governs their side.
- Email delivery — transactional email is sent through Resend.
- QuickBooks — only if your shop connects it, and only the estimate data you choose to post. Intuit's own privacy policy governs their side.
- Google Places — address autocomplete queries, when you use the address field.
- Google Analytics — aggregate visit measurement on this marketing site only.
- Google Ads and Meta (Facebook and Instagram) — advertising tags on this marketing site, and whether a visitor who came from one of our ads later signs up, as described above. Google's and Meta's own privacy policies govern their side.
Retention & deletion
Contact requests are kept until we've onboarded or heard back from you, then cleaned up. Account and shop data is kept while your account is active. To have anything corrected, exported, or deleted, email us — we'll handle it promptly.
Security
Traffic is encrypted in transit. Sign-in supports passkeys. Tenant isolation is enforced at the database layer, and we keep regular backups.
Contact
Questions or requests: [email protected].
Changes
If we change this policy in a way that matters, we'll say so on this page and, for material changes affecting active shops, tell you directly.