Privacy notice

Key points of this notice

• QuoteBill does not sell personal data and does not give it to advertisers or analytics companies. Who handles data for us
• Our database, sign-in service and server functions run in this region: United States (Supabase region us-east-2). Where data is processed
• QuoteBill sets no cookies of its own, and no tracking cookies. Browser storage and cookies
• You can ask us to show you the data we hold about you, to correct it, to delete it, to limit how we use it, to give you a copy you can reuse, and to stop uses that rely on our legitimate interests. Your rights and how to use them
• We answer within 30 days; where the law of your country sets a shorter time, we follow it. Your rights and how to use them
• Questions and requests about your data (access, correction, deletion, a copy): auto0104@gmail.com. Who is responsible

Who is responsible

This notice explains which personal data QuoteBill handles, why, for how long and what you can do about it. It took effect on 2026-10-19; the changes are listed at the end.

The controller of the personal data described in this notice is Minho Choi (South Korea), the operator of QuoteBill.

QuoteBill is a free web service for business documents. For E-Contracts, the sender decides what a contract contains and who receives it; QuoteBill stores and serves it on the sender’s behalf and keeps its own records for abuse, deletion and verification, as the details below describe.

Privacy contact: Minho Choi, auto0104@gmail.com.

Questions and requests about your data (access, correction, deletion, a copy): auto0104@gmail.com.

• Contact
• Security

Why we use data, and on what basis

Each row names a purpose, the data it uses and the legal basis under the EU General Data Protection Regulation (GDPR). Where the law of your country names its own grounds, the same purposes are served under them.

A document you make while signed in is saved to your account as soon as it has content (a customer’s or supplier’s name, or a line); the Save button only confirms it. Until then, and while you are offline or your account’s document storage is full, it is kept only in this browser (the browser storage table below).

Who handles data for us

QuoteBill does not sell personal data and does not give it to advertisers or analytics companies. These providers handle data on our behalf or because you use their service:

• Supabase provides our database, sign-in service and server functions (it also signs you in with Google when you choose that).
• Hostinger serves the website and keeps ordinary request logs, such as network addresses, for a limited time.
• Google: when you choose Google sign-in, Google tells us who you are. Only if analytics or advertising is switched on and you consent, Google Analytics and Google AdSense run. A tutorial video loads from youtube-nocookie.com only after you press play.
• AI apps you connect (ChatGPT, Claude, Gemini): what you type there is handled under that app’s own privacy policy.
• Other people see only what you publish or send: community posts, an accepted template offer with the name you chose, and, for a contract, what each signing page shows its signer.
• A translator or reviewer who checks a page may receive the text of a suggestion without your name or email address.
• Whoever receives a share link sees the copy of the document it opens and can pass the link on; the apps and pages a member sends it through (email, text message, WhatsApp, LINE, Telegram) handle it under their own terms.
• Anthropic: our automatic fixer uses Claude, Anthropic’s AI model, which receives the text of a problem report, never your name or email address, to reproduce and fix the problem.

Where data is processed

Our database, sign-in service and server functions run in this region: United States (Supabase region us-east-2). If you use QuoteBill from another country, your data is therefore sent to and processed there.

The website itself is served by Hostinger from servers that may be in other countries, so reading public pages and signing in can also involve processing outside your country. We do not run a separate region for users in the EU, Korea or Japan.

Where the law of your country asks for a safeguard for such a transfer, we rely on the terms our providers offer. Ask us at the address above if you want to know more.

How long we keep data

Where nothing deletes a record automatically today, the table says so.

Browser storage and cookies

QuoteBill sets no cookies of its own, and no tracking cookies. It uses your browser’s local storage (kept until removed) and session storage (kept until the tab closes) for the entries below. They are not shared with other sites. The three entries that serve our own statistics, qb-first-touch, qb-visit-started and qb-funnel-events, are not written when your browser sends Do Not Track or Global Privacy Control.

If analytics or advertising is switched on and you consent through a consent tool, Google sets its own cookies; that is described under Usage measurement and Advertising. A tutorial video loads nothing from YouTube until you press play.

Your rights and how to use them

You can ask us to show you the data we hold about you, to correct it, to delete it, to limit how we use it, to give you a copy you can reuse, and to stop uses that rely on our legitimate interests. Where a use relies on your consent, you can withdraw it at any time. You can also delete your account yourself in settings.

To use a right, write to auto0104@gmail.com from the address on your account (as a signer without an account, say which contract you mean). We may ask you to confirm that you control the account.

We answer within 30 days; where the law of your country sets a shorter time, we follow it.

On request we send a copy of your data as a JSON file: your account details and the documents, likes, template requests and template offers saved with your account. A signed contract is yours to keep as an evidence file, which each party can download once everyone has signed.

A signed contract and its audit trail are evidence for every party, so a signer’s record generally cannot be erased from a contract while the contract is kept; see Electronic contracts: requests from signers.

If you are not satisfied

Please write to us first, so that we can put it right. You may also complain to a data protection authority: in the EU or EEA, the authority of the country where you live or work; in Korea, the Personal Information Protection Commission, which also takes reports of infringements and applications for dispute mediation; in Japan, the Personal Information Protection Commission.

• Data protection authorities in the EU and EEA (European Data Protection Board)
• Personal Information Protection Commission, Korea
• Personal Information Protection Commission, Japan

Details by feature

The sections below describe each feature in full: what is stored, who sees it and how long it is kept.

Account and document information

QuoteBill uses account information to provide sign-in and account features. Documents and company settings you save to the cloud are processed using Supabase. These may include business names, contact details, customer information and uploaded images. Only enter information you are authorized to use.

Administrator access to saved documents

QuoteBill administrators can open the documents a member has saved to the cloud, including the company and customer details written in them and the logo and signature images they contain. This happens only to give support, to look into abuse or misuse, or to meet a legal duty. Each time an administrator opens a document, QuoteBill records which administrator opened it and when. The view shows the document as the member sees it. It is read-only: it cannot change or delete a document or sign in as the member. It does not open electronic contracts; how those are handled is described under Electronic contracts: who sees what, below.

Email address

Your email address is used to sign you in, to reset your password and to send service notices about major updates, improvements and changes to QuoteBill. It is not given to advertisers or used for advertising email.

How you found us

When you visit QuoteBill, your browser may keep a small note for up to 30 days about how the visit began: the kind of source (search, social, an AI assistant, a directory, another website, a campaign tag or direct), the website that sent you, any utm_ campaign tags in the address, the public page you landed on (its address without any query) and its language. The note holds nothing that identifies you, and it is not kept if your browser asks not to be tracked (Do Not Track or Global Privacy Control). If you create an account within a week, QuoteBill saves the note with your account once, so we can see which channels bring members. It is deleted from your browser when it is sent, and from our records when you delete your account. Administrators see only totals.

Visit counter

QuoteBill counts visits to its pages with its own counter, without cookies. For each page you open, your browser sends the page’s address (of the part after a question mark, only a page number), the page’s language, your time zone and whether your screen is phone, tablet or computer size. On the first page of a visit it also sends the name of the website that sent you, never the address of the page you came from, and any utm_source, utm_medium or utm_campaign tag in the address. We store all of this except the time zone, together with the time, whether the page began a visit, the kind of source (search, social, an AI assistant, a directory, another website or direct) and a country worked out from the time zone (or, without one, from the data centre that answered). Your network address and browser details are not stored: they are turned into a code made with a secret key that changes every day, so that a visitor is counted once a day, and codes of different days are unrelated. The records stay in QuoteBill’s own database at our hosting provider, Supabase, and are not given to any analytics or advertising company. Visitors and members cannot read them; administrators see them as counts, such as visits per page or per country. A marker in the tab’s session storage tells the first page of a visit from the rest. If your browser sends Do Not Track or Global Privacy Control (a setting in many browsers and privacy extensions), nothing is sent; turning analytics off in the consent settings does not stop this counter. Sign-in, editor, workspace, settings, admin, contract, signing and verification pages are not counted. A few moments, such as opening the sign-in page, only add one to a day’s total, without a visit record (see Counts of a few moments). Our hosting providers may keep ordinary request logs, such as network addresses, for a limited time. Each record is deleted automatically once it is more than 35 days old; what stays are daily totals, such as views and visitors per page, country or language, which contain no visitor code.

Template likes

A like on a template is stored with your account, one per template, and is deleted when you take it back or delete your account; it is shown to other visitors only as a total, never with your name.

API keys

An API key you make in company settings is stored as a one-way hash, with its first eight characters (so you can tell your keys apart), its name, its permissions and its dates, and anything done with your key is your own use of your account.

Browser storage

Authentication sessions, document drafts and how you last signed in (Google or email, and the address) may be stored in your browser, so you stay signed in and the next sign-in is quicker. Shared computers may retain this information after you close a tab. Sign out and review browser site data when you finish using a shared device.

Public content and images

Content you post to public community areas can be visible to other visitors. Uploaded branding images can be accessible to anyone with their public URL. Do not upload confidential information as a logo or signature image.

Advertising

QuoteBill can show ads from Google AdSense, only on some public pages: the guides, the articles, the VAT and GST calculators, the currency converter and the template pages. Ads are off until an administrator turns them on. Where the law requires your consent for them (in the European Economic Area, the UK and Switzerland, as Google’s consent message determines), no ad is requested until you agree, and by default QuoteBill asks every visitor first. Google and its partners may use cookies and device identifiers to show and measure ads and, where you allow it, to personalise them (Google’s explanation is linked below). While ads are on, you can change or withdraw your choice at any time through the “Privacy and cookie settings” link at the foot of public pages. Signed-in members see the same ads on public pages as other visitors; a member’s own pages (the editor, the workspace and settings) and every contract, signing and verification page never show ads. QuoteBill sends nothing from your documents to Google or any advertiser, and no ad appears next to a draft an AI assistant prepared for you.

AI assistant connection (MCP)

To use QuoteBill from an AI app such as ChatGPT, Claude or Gemini, you sign in to QuoteBill from that app and allow it. The app then keeps a sign-in token for your account, issued by Supabase, and sends it with each request to QuoteBill’s MCP server. The server uses the token only to confirm that you are a member, and your request only to look up public information (templates, sample contracts, tax rules, exchange rates and like counts) and work out figures; it does not save the request. With the token, the app can read your account’s email address, name and photo as Supabase Auth returns them; it cannot open your saved documents, contracts, files or admin tools, and the AI app never receives your password. The server’s log records which tool was called, whether it answered and the app’s name, never the request’s contents or your account. To prevent abuse it counts calls per account as a salted one-way hash that changes every minute, and deletes those counts within two hours. To end the connection, choose Disconnect under Connected AI apps in QuoteBill’s company settings, or remove QuoteBill in the AI app. A drafted document travels inside the link the server returns, after the # sign, which is not sent to our servers; when you open the link, the draft is kept in your browser for up to 24 hours. Our hosting providers may keep ordinary request logs, such as network addresses, for a limited time. What you type into the AI app is handled under that app’s own privacy policy.

Electronic contracts: what is stored

When you use e-contracts, QuoteBill stores the contract content, the details of the parties, each signer’s name and role, a signer’s email address if the sender entered one, the signatures (a drawn image, an uploaded seal or signature image kept inside the contract rather than as a file, or a typed name), the consent text each signer agreed to, and, for each action, its time, the IP address as reported to our database by our hosting provider, and the browser. Reminders the sender prepares and changes of the signing deadline are recorded with their time only, without the sender’s IP address or browser. Signing links and access codes are stored only as one-way hashes. Contracts are stored using Supabase. The sender decides what goes into a contract and whom to send it to; QuoteBill stores and serves the contract on the sender’s behalf, and keeps its own abuse, rate-limit, deletion and verification records for its own purposes, as described below.

Electronic contracts: who sees what

The sender sees everything about their own contract. A signer sees the contract, the other signers’ names, roles and signing status and the sender’s account email, and once everyone has signed, the certificate with every signer’s IP address and browser. Signers never see each other’s email addresses. Once everyone has signed, the sender and each signer can download an evidence file: it holds what the certificate holds, including every signer’s IP address, browser and signature image, and it is made in their own browser, not stored by QuoteBill. Checking a file on the verification page reads it in the browser and sends QuoteBill only its reference and fingerprint. Every party’s certificate lists the reminders the sender prepared and the changes of the signing deadline, with their times. It shows that a signer reported the contract but never the reason; for a report made before evidence files were introduced, it carries a one-way hash of the report’s text, from which a short reason could be guessed. Anyone holding a copy can check its reference and fingerprint on the verification page, which shows only the completion time, the number of signatures and the certificate hash. QuoteBill sends no email to signers: the sender delivers each link.

Electronic contracts: how long it is kept

Drafts stay until the sender deletes them, and a contract that is not signed in time expires. Sessions and access-code hashes are deleted when a contract is declined, voided or expires, and within 30 days after a contract is completed; a link that has stopped working opens nothing but the closed status, and its hash is deleted within 30 days. Signatures and the audit trail stay with the contract until the sender deletes it or their account. After a completed contract is deleted, only its reference, fingerprint, completion time, number of signatures and certificate hash remain, without names or content; this verification record is kept indefinitely so that copies stay verifiable. When a contract that was sent is deleted, by the sender or together with their account, QuoteBill also keeps a minimal record for 180 days to investigate misuse: the reference, fingerprint, status and dates, the sender’s account email, the number of abuse reports, the numbers of signers and events and the final audit hash, and the contract’s content only if it was reported for abuse. That record is deleted when the 180 days end. Rate limits use salted one-way hashes of network addresses, deleted within hours. Contract pages carry no ads, analytics or visit counting.

Electronic contracts: requests from signers

A signer does not need an account to ask about the data recorded about them: use the contact page or the support address below. A signed contract and its audit trail are evidence for every party, so a signer’s record generally cannot be erased from a contract while the contract is kept, but we will tell you what is recorded. Reports of abusive contracts are reviewed by QuoteBill, which may suspend a contract. The operator can technically access stored records, so each party should keep its own signed PDF.

Contact

For questions about access, correction or removal of account information, contact the support address below. Avoid including sensitive documents in your initial message.

Usage measurement

When analytics is enabled and you separately consent, Google Analytics measures visits to public pages. This application does not include document contents, account IDs or URL query parameters in its page-view events. Google services may process ordinary network information when connecting. You can change your analytics choice through the consent settings.

Product use counts

For signed-in members only, QuoteBill counts a few actions by day and kind, so that we can see where people stop: opening a document in the editor, saving a document for the first time, downloading it as Excel, Word or a backup file, printing it or saving it as PDF, copying or sharing your invite link, and making a link to share a document. Each record holds your account, the day, the kind of action and how many times it happened that day, never the document, its content or a page address. Your browser sends nothing for this when it asks not to be tracked (Do Not Track or Global Privacy Control). The records are kept for 400 days and deleted with your account, and administrators see only totals, never one member’s actions. How contracts are used is read from the contracts themselves: the contract, signing and verification pages run no counting code.

Suggestions

When a signed-in member uses “Suggest an improvement” on a public page, QuoteBill stores the suggestion with the member’s account: the page’s address and language, the kind of suggestion, the part of the page, the text you selected (up to 300 characters), your suggestion (up to 600 characters) and the time. An e-mail address for a reply is stored only if you type one, and is used only to reply to that suggestion. Administrators read suggestions to correct the site, and may pass the text of a suggestion, without your name or e-mail address, to a translator or reviewer who checks the page. Suggestions are kept for 400 days and deleted with your account. If you are not signed in, the link only opens your own e-mail app with the page address and your text filled in: nothing is sent until you send that e-mail yourself, and it reaches our support address like any other message.

Template requests

When you use the Template requests page, QuoteBill stores what you send with your account: the title and note you write, the kind of document, the language, the country if you choose one, the date, and each vote you give, one per request. Other visitors see a request only after an administrator approves it, and then only its text, kind, language, country and number of votes, never your name or account; a request that is waiting for review or was not accepted is seen only by you and by administrators, who see your other requests only as counts. Votes are shown only as totals; if an administrator merges two requests, the votes move to the one that stays. Your requests are kept until you delete them or your account, and are deleted automatically once they are more than 3 years old; a vote is deleted when you take it back or when its request is deleted. To prevent abuse we also record when you send a request or add a vote, and delete those records once they are more than 2 days old. Please do not put personal details in a request.

Templates you offer

When you offer one of your saved documents as a template, QuoteBill stores only its structure: the kind of document and its design, the names of its lines and the text of its notes and terms, with any e-mail address, web address or long number in them replaced by a blank. Amounts, dates, the names and addresses of you or your clients, logos and signatures are not sent. We also store the template name, the one-sentence description, the language and category you choose, the name you chose to show (left empty, it reads “a QuoteBill member”) and your account, so that you can see and withdraw your offers. Nothing is published before an administrator reviews it. You can withdraw an offer at any time until it is reviewed; once a template is published, ask us at the address below to take it down. Declined and withdrawn offers are deleted 180 days after the decision. Deleting your account deletes all your offers at once, and the page of an accepted one is removed with the next site build. An accepted template is shown on a public page with the name you chose; your account is never shown.

Trying the editor without an account

When try mode is offered, you can fill in a template in the editor without an account. While you do, the document is kept only in your browser’s storage on this device, beside any other drafts kept there: nothing you type is sent to QuoteBill, and printing it or saving it as a PDF happens in your browser. The visit counter counts the try page like any other page, by its address without the part after the question mark. If you then sign in or create an account in this browser, the document is moved into your account: it is saved to the cloud like a document you save yourself (if that does not work, it stays among your account’s drafts on this device until you save it) and removed from the browser’s storage. To delete it without an account, choose Start over on the try page or clear this site’s data in your browser; on a shared computer, do so when you finish.

Counts of a few moments

A few moments are counted as daily totals, without a visitor code. When you open the sign-in page (a contract page and a template’s Excel or Word button are counted apart as the page you came from), press the button that opens the editor without an account (on the home page, a template page, a guide or the sign-in page), open the editor without an account (try mode), open the print dialog there, or sign up after trying, or, once you have an account, when the welcome card of your first visit to the workspace is shown, when you press its button, or when you press a “next document” button, QuoteBill adds one to that day’s total for that moment and for the language of the page. Nothing else is sent: no address, no referrer, no time zone, no device, no account, no document. A moment is counted at most once per browser tab session. A browser that sends Do Not Track or Global Privacy Control, a browser a program is driving, and a browser its owner switched out of the counts send nothing. These totals are kept for 400 days.

You can switch your own browser out of the visit counter, these counts and the note about how you found us with a link ending in #qb-exclude-visits. The choice is a single flag kept in that browser (qb-visit-self); a link ending in #qb-count-visits switches it back.

Who is on the site now

While a page is open and visible, your browser sends a short signal to QuoteBill about once a minute, so the operator can see how many people are on the site now. A visitor’s signal carries the page’s address (without anything after a question mark), your time zone and your screen size class, and is turned into the same kind of daily code as the visit counter’s. No cookie is used. We keep that code, the screen size class and a country worked out from the time zone for at most two hours and then delete them automatically; no network address and no browser details are kept. The first signal comes about 25 seconds after the page loads, and none is sent while the tab is hidden or the browser is offline. Signals that look automated are left out of the count. Nothing is sent when your browser sends Do Not Track or Global Privacy Control, from the pages the visit counter does not count (sign-in, editor, workspace, settings, admin, contract, signing and verification pages), or from a browser switched out of the counts with #qb-exclude-visits.

When you are signed in, the signal goes with your account instead, so the operator can see how many times and when a member visited. QuoteBill keeps the number of visits, the first and the last time you were seen, and the visits of each day (the daily counts for 90 days). A new visit starts when a signal comes more than 30 minutes after the previous one, or when you sign in. No pages and no content are recorded. These counts are kept while the account exists and are deleted with it; administrators see them next to the member, and as a top list by name without the email address. They are used for running and securing the service only.

Emailing a document

“Email this document” opens your own mail app with a message already written; QuoteBill sends nothing and sees nothing of the message. You attach the PDF yourself before you send it.

Share links

When a signed-in member uses “Share this document”, QuoteBill stores a copy of the document as it is at that moment, with an unguessable link: everything printed on the document (the names, addresses, email addresses, phone and tax numbers, lines and amounts, notes, terms and payment or bank details of the company and the client, and a logo or signature picture, embedded in the copy), but not the document’s id or status or the ids of the quotation or contract it came from. The record of the link keeps the id of the saved document, so that deleting the document deletes its links. It also stores the account that made the link, the document’s kind, language and title, the expiry the member chose (7, 30 or 90 days), how many times the link was opened and when it was last opened. Anyone who has the link can open the copy, read it, print it and save it as a PDF, without an account. The page shows nothing about the member’s account, is not offered to search engines, and runs no advertising, pop-ups or analytics. A member can have at most 50 live links.

To count an opening once for each reader and hour, the page keeps a random code in the browser tab (session storage, until the tab closes; it is not made when your browser sends Do Not Track or Global Privacy Control), and the database keeps only a one-way hash of it, for about two hours (the next visit to any link, or the nightly clean-up, removes older ones), with no network address, device or account. The member sees how many times a link was opened and when, never by whom.

A member can update the copy, renew the expiry or stop sharing at any time. Stopping sharing deletes the link and its copy at once; so does deleting the document or the account. An expired link is kept for 30 days, so that the member can renew it, and is then deleted automatically. QuoteBill sends nothing itself: the buttons (the device’s share sheet, email, text message, WhatsApp, LINE, Telegram, copy link, QR code) open the member’s own app or page with the link in it, and those apps handle it under their own terms. Because everyone who gets the link can pass it on, share it only with people who may see the document. QuoteBill does not check what a shared document says; a reader can report a page by email from the link at its foot.

Spotlight (optional)

If you switch on the Spotlight in Settings, QuoteBill shows a card on its home page with the display name, the website address and its host, the one-line introduction and the logo you chose, together with a picture of your website: when you apply, and about once a week afterwards, QuoteBill fetches your site’s own preview image (og:image, or a large icon), its theme colour and title, and keeps a copy of the picture in its own storage under a random id, so that visitors’ browsers load it from QuoteBill and never from your site. You can upload a picture instead. The card appears only after an administrator has approved it and while your account is among the month’s most active (documents saved, exported, printed or shared, contracts sent and signed, documents made through the API), a ranking recomputed every hour from records QuoteBill already keeps; nothing new about you is recorded for it, and your rank is shown to you alone unless your card is on the page. The card links to your website and says that the listing is free and written by you. Nobody can buy a place: it is not an advertisement.

To show you how many people came to your site through the card, QuoteBill counts a click once per visitor and day: the reader’s tab keeps a random code (session storage, until the tab closes; none when the browser sends Do Not Track or Global Privacy Control), and the database keeps a one-way hash of it with the card’s id for 35 days. No address, device or account is kept. Switching the listing off takes the card down at once and deletes the copied pictures; deleting your account deletes the listing with it. A card is paused automatically when your website stops answering two weekly checks in a row.

Invitations

A member can share a personal invite code. When a new member enters a code, QuoteBill records which member’s code was used, which account used it, the day, and a one-way hash of the entering member’s email address, so that the same person or address cannot use a second code. This record stays after either account is deleted (the deleted inviter is then no longer named in it). It holds no name or email address, but a hash of an address can be compared with an address someone already knows, so it is pseudonymous, not anonymous. Refused code entries are counted per account to limit guessing; those records are deleted when the same account next enters a code more than a week later.

Problem reports

When a signed-in member uses “Report a problem” (on the error screen, in the editor or in the community) or ticks “Also send this as a problem report” under a new post, QuoteBill stores the report with the member’s account: the kind of problem, what you wrote (up to 120 characters, and up to 600 for the steps), the page with document numbers removed, the page language, the app version, the browser family and major version (never the full browser string), whether the screen is a phone, tablet or computer and, from the error screen, the first line of the error with numbers and addresses removed. A community post whose words describe an error is first kept on its own as an unlisted candidate, as its first 120 characters with links, email addresses, phone numbers and @mentions masked, at most three a member a day; no status appears beside the post and no notification is sent until you confirm it with “Also send this as a problem report” or the fixer confirms it is a software defect.

An automatic fixer that runs on our own computer reads reports, including the words of every member who sent the same problem (with @mentions masked), tries to reproduce the problem with a test and to fix our code; it uses Claude, Anthropic’s AI model, and never sees your name or email address, and nothing a report says is ever carried out. Administrators read reports too. Everyone who can read a post sees a short status beside it (received, confirmed, fixed, live or under review), and you get a notification when the status of your report changes. Reports are kept for 180 days. You can delete your own report at any time under “My problem reports” in the community: your report and its notifications are deleted at once. If other members sent the same problem, their report stays, with their words and not yours; the same happens when you delete your account or the post. A report you delete still counts toward your daily limit for 24 hours; that counter holds your account and the page, no words, and is deleted after two days. If you are not signed in, the button only opens your own email app.

Effective date and changes

Effective: 2026-10-19.

We change this notice when what we do changes, and the date above changes with it. We announce changes that matter to members on the What’s new page and by service email.

• 2026-10-19: Described the signal an open page sends about once a minute so the operator can see how many people are on the site now, and the visit counter of a signed-in member (number of visits, first and last time seen), with how long each is kept.
• 2026-10-18: Said that a document a signed-in member makes is saved to the account as soon as it has content, without pressing Save, and that until then, offline or with a full account it is kept only in the browser; the browser storage table says the same of drafts.
• 2026-10-14: Said that two more kinds of moment are counted the same way: pressing the button that opens the editor without an account, and which kind of page (a contract page, a template’s Excel or Word button) led to the sign-in page.
• 2026-10-11: Described the country of sign-up: a country code saved once with a new account, taken from the country of your connection (or from your browser’s time zone when that is missing), not collected when your browser asks not to be tracked, and deleted with the account. QuoteBill does not save your IP address for it.
• 2026-10-09: Described problem reports: what is stored, the community posts that become reports on their own, the automatic fixer that reads them with Anthropic’s Claude, the status shown beside a post, the deletion after 180 days, your right to delete your own report at any time, and that a post found by its words stays an unlisted candidate until it is confirmed.
• 2026-10-09: Described share links: what is stored when a member shares a document, who can open it, the expiry the member chooses, the view count, stopping and deleting a link and the 30 days an expired link is kept.
• 2026-10-06: Added who is responsible, the purposes and their legal bases, the recipients, where data is processed, retention periods, the browser storage table, your rights and how to complain. Described the counts of a few moments (sign-in page, try mode), the link that switches your browser out of the counts and the email button. Said that an administrator who opens a saved document sees it drawn as the member sees it, with its logo and signature images.
• 2026-10-05: Described the visit counter and its 35-day deletion, how you found us, product use counts, suggestions, template requests and template offers.
• 2026-10-03: Described administrator access to saved documents and the record kept of each opening.
• 2026-09-28: Described E-Contracts: what is stored, who sees what and how long it is kept.