Privacy policy

Last updated: [date of publication]

This policy explains how Jenblat Inc ("we", "us") handles personal information in QuoteToYes, a free proposal and electronic signature service. It covers two groups of people: users, who create and send proposals, and recipients, who view, ask about or sign them.

What we collect

From users: name, email address and profile picture from Google sign in; the account, team and brand settings you enter; the proposals you create; images you upload; billing details handled by Stripe if you buy footer removal (we never see full card numbers).

From recipients: what the sender types about you (such as your name, company and email); what you do on a proposal page (when it was opened, how long each section was on screen, which pricing options you looked at, questions you ask); and, if you sign, your name, email, signature, IP address, browser details, time zone and the time of each step. We store a salted hash of your IP address for tracking, never the raw address. The raw IP address is kept only in the signature record, because e-signature law relies on it.

Automatically: basic server logs and page speed measurements. We do not use advertising trackers or third party cookies on proposal pages.

How we use it

To run the service: show proposals, send codes and reminders, record signatures, email signed copies.
To tell senders how their proposals are doing.
To keep the service safe: detect spam, phishing and abuse, and check links against Google Web Risk.
To improve the product for everyone. We combine anonymized, aggregate patterns across all accounts (for example, how often proposals with a sign by date close) and turn them into features and tips. One account's proposals, clients or numbers are never shown to another account. Tips are shown only when a pattern rests on many accounts and proposals.

We do not sell personal information and we do not share it for cross context behavioral advertising.

Service providers that run parts of the product for us, listed on our subprocessors page. The sender of a proposal sees what recipients do on it. We disclose information when the law requires it or to protect people from harm.

How long we keep it

Signed agreements, signature records and their audit trails: permanently, so every party can prove what was signed.
Unsigned proposals: until the user deletes them or the account.
Tracking events: up to 3 years, then deleted or aggregated.
Server logs: up to 90 days.

Your rights

You can export your data and delete your account from the "Your data" page. Recipients and anyone else can email us to access, correct or delete their information. We will respond within 45 days.

California residents have the right to know, access, correct and delete personal information, and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, but you may still contact us. We will not treat you differently for using these rights.

People in the EU, UK, Canada and Australia have similar rights under their local laws, including the right to complain to a data protection authority. For business users, our data processing addendum applies.

Security

Data is encrypted in transit. Databases and backups are encrypted at rest. Access is limited to people who need it.

Children

The service is not for people under 16.

Contact

Jenblat Inc, [postal address], privacy@[product domain].