No Quote Left

Privacy Policy

Last updated October 21, 2026

This Privacy Policy describes how No Quote Left (“Company,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information in connection with the No Quote Left website and software-as-a-service application (the “Service”). This Privacy Policy is incorporated into and forms part of our Terms of Service. Capitalized terms not defined herein have the meanings given in the Terms of Service. By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Scope

The Service is offered to businesses (“Customers”). This Privacy Policy applies to information we process about Customers and their authorized users, and to information about third parties (“Recipients”) that Customers submit to the Service or that the Service obtains from a Customer's connected email account. With respect to Recipient information, we process data on behalf of and at the direction of the Customer.

2. Information We Collect

2.1 Account Information. When you register, we collect your email address, business name, and password. Passwords are stored in hashed form by our authentication provider and are not accessible to us in plain text.

2.2 Billing Information. Payments are processed by Stripe, Inc. We receive and store your subscription status and a Stripe customer identifier. We do not collect or store full payment card numbers.

2.3 Quote and Settings Information. We collect the quotes you enter or approve, including Recipient names, Recipient email addresses, service descriptions, quoted amounts, and notes; the follow-up emails and replies generated for them; and your settings, including your follow-up schedule, automatic-sending preference, and business mailing address.

2.4 Google User Data. If you connect a Gmail or Google Workspace account, we access the data described in Section 3.

2.5 Unsubscribe Records. If a Recipient opts out of communications, we retain the Recipient's email address to ensure that no further follow-up emails are sent to that address on the Customer's behalf.

2.6 Technical Information. Our hosting provider automatically processes request logs, such as IP addresses, browser type, and pages requested, for the purposes of operating, securing, and troubleshooting the Service.

3. Access to and Use of Google User Data

3.1 Scopes Requested. When you connect a Google account, you authorize the Service, through Google's OAuth consent process, to access your account using the following scopes:

  • https://www.googleapis.com/auth/gmail.readonly (read your email messages and settings). We use this scope to read messages in your sent mail in order to identify quotes you have sent to Recipients, and to read messages in your inbox in order to identify inbound requests for quotes and to detect Recipient replies so that follow-up communications to that Recipient cease.
  • https://www.googleapis.com/auth/gmail.send (send email on your behalf). We use this scope to send, from your account, the follow-up emails and replies shown in your No Quote Left account, either upon your approval or automatically if you enable automatic sending.

3.2 Processing by Artificial Intelligence. To determine whether an email is a quote, a quote request, or a reply, and to generate follow-up emails and replies, we transmit the relevant email content to OpenAI, L.L.C., which processes such content on our behalf through its application programming interface solely to return results to the Service.

3.3 Data Stored. We store only the Google user data necessary to provide the Service: information extracted from relevant emails (such as subject lines, Recipient names and email addresses, service descriptions, quoted amounts, and a short excerpt of an inbound quote request), generated drafts, and identifiers of the Gmail messages and threads concerned. We do not retain a copy of your mailbox.

3.4 Token Security. OAuth access tokens and refresh tokens issued by Google are encrypted before storage and are used solely to provide the Service.

3.5 Revocation. You may revoke the Service's access to your Google account at any time by disconnecting it in the Service's settings, which revokes the authorization with Google and deletes the stored tokens, or through your Google Account permissions page.

4. Google API Services User Data Policy and Limited Use Disclosure

No Quote Left's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Without limiting the foregoing:

  • we use Google user data solely to provide or improve the user-facing features of the Service that are prominent in the Service's user interface and described in this Privacy Policy;
  • we transfer Google user data to third parties only as necessary to provide or improve those features (including to OpenAI for email classification and drafting, and to our hosting and database providers), as necessary to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users;
  • we do not use or transfer Google user data for serving advertisements;
  • we do not sell Google user data;
  • we do not use or transfer Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models, and data transmitted to OpenAI through its API is not used by OpenAI to train its models under OpenAI's applicable API data usage terms; and
  • we do not permit humans to read Google user data unless (a) we have obtained your affirmative consent for specific messages, (b) it is necessary for security purposes, such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized and is used for internal operations in accordance with applicable law.

5. How We Use Information

We use the information described above to:

  • provide, operate, and maintain the Service;
  • process subscription payments and manage your account;
  • communicate with you regarding your account, the Service, and support requests;
  • detect, investigate, and prevent security incidents, fraud, abuse, and violations of our Terms of Service; and
  • comply with legal obligations.

6. Disclosure of Information

We do not sell or rent personal information, and we do not share personal information for cross-context behavioral advertising. We disclose information only as follows:

  • Service Providers. To the following providers, which process information on our behalf under contractual obligations: Supabase, Inc. (authentication and database); Vercel Inc. (hosting); Stripe, Inc. (payment processing); OpenAI, L.L.C. (email classification and drafting); Google LLC (email access and sending through your connected account); and Resend (email delivery for accounts that have not connected Gmail).
  • Legal Requirements. When we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of the Company, our Customers, or others.
  • Business Transfers. In connection with a merger, acquisition, financing, or sale of all or a portion of our assets, subject to notice to affected users.
  • With Your Consent. In any other circumstance with your express consent.

7. Cookies

We use only strictly necessary cookies to authenticate users and maintain sessions. We do not use advertising, analytics, or third-party tracking cookies.

8. Data Retention and Deletion

We retain information for as long as your account remains active or as necessary to provide the Service. You may delete individual quotes within the Service at any time. You may request deletion of your account and associated data by contacting us at rafaelrodriguezscaling@gmail.com; we will complete such deletion within thirty (30) days, except for information we are required to retain to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. Stored Google OAuth tokens are deleted immediately upon disconnection of your Google account.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit using TLS, encryption of Google OAuth tokens at rest, and access controls that restrict each Customer to its own data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal information, or to object to or restrict certain processing. To exercise any such right, contact us at rafaelrodriguezscaling@gmail.com. We will verify and respond to your request within the time required by applicable law. Recipients whose information was submitted by a Customer may direct requests to that Customer or to us, and we will assist the Customer in responding.

11. Children's Privacy

The Service is intended solely for business use by individuals at least eighteen (18) years of age. We do not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected such information, we will delete it promptly.

12. Data Location

The Service is operated in the United States, and information is processed and stored in the United States. If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide notice by email or through the Service before the changes take effect.

14. Contact

Questions or requests regarding this Privacy Policy or our data practices may be directed to No Quote Left at rafaelrodriguezscaling@gmail.com.