Privacy Policy

1. Who we are

GlideQuote ("GlideQuote", "we", "us", or "our") is a quoting and invoicing application for sole traders and small trade businesses. The app and this website are operated by:

Baiyoke Factory Co., Ltd.
Registered in Thailand, company registration / Tax ID no. 0105555150317
Registered office: 80/32 Soi Lat Phrao 23, Chantharakasem Sub-district, Chatuchak District, Bangkok, Thailand
Contact: glidequote.com/contact

For the personal data of the people who hold a GlideQuote account, we act as the data controller. For the customer and contact details that you enter about your own clients, we act as a data processor on your behalf — you are the controller of that data and are responsible for handling it lawfully (see Section 7).

2. Scope of this policy

This policy covers:

• the GlideQuote mobile app (iOS and Android); and
• the glidequote.com marketing and support website, including its contact and sign-up forms.

It does not cover third-party services you reach through links from our app or site (such as the Apple App Store, Google Play, or your bank), which have their own privacy policies.

3. What data we collect

a. Account and profile data

When you create and use a GlideQuote account, we collect:

• Your details: name and email address. Your password is stored only as a secure cryptographic hash by our authentication provider — we never see or store it in plain text.
• Your business details: business or trading name, address, phone number, tax/VAT/registration number, logo, brand colours, and digital signature, where you choose to add them.

b. Content you create in the app

To provide the service, we store the documents and records you create, including:

• your customers' and contacts' details (names, addresses, contact details, and tax numbers where you enter them);
• quotes, invoices, line items, saved items, payment schedules, deposits and milestones, workflow stages, and notes/terms libraries; and
• files you upload, such as logos and signature images.

c. Technical and usage data

We collect limited technical information needed to run the app reliably:

• device type, operating system and version, app version, and language/region settings;
• IP address and similar connection data; and
• crash reports and diagnostic logs that help us find and fix problems.

d. Support communications

If you contact us, we keep your messages and contact details so we can help you and keep a record of the support we have provided.

e. Website form data

If you use a contact or "notify me" form on glidequote.com, we collect the email address and any details you submit. These submissions are handled by our form provider over an encrypted connection and used only to respond to you or to send launch updates you have asked for.

4. How and why we use your data

We use your data to…	Why
Create and manage your account; let you sign in	To provide the service you signed up for
Generate, store, and let you share your quotes and invoices	Core functionality of the app
Apply the correct tax fields and document formats for your country	To make documents useful for your business
Provide support and respond to your messages	To help you and resolve issues
Keep the service secure and prevent abuse and fraud	To protect you, us, and other users
Diagnose crashes and improve performance and features	To maintain and improve the app
Send service messages (e.g. important changes) and, where you have opted in, launch and product news	To keep you informed
Meet our legal, accounting, and tax obligations	To comply with the law

We do not sell your personal data, and we do not use the content of your invoices or your customer lists for advertising.

5. Legal bases for processing (UK/EU GDPR)

Where UK or EU data protection law applies, we rely on the following legal bases:

• Performance of a contract — to provide the app and the features of your plan.
• Legitimate interests — to secure the service, prevent abuse, fix problems, and improve the product, balanced against your rights.
• Consent — for optional marketing or launch emails, which you can withdraw at any time.
• Legal obligation — where we must keep certain records (for example, for tax or accounting).

Where Thailand's Personal Data Protection Act (PDPA) applies, we process personal data on the equivalent lawful bases, including contractual necessity, legitimate interest, legal obligation, and consent.

6. Payments and subscriptions

Paid plans (Pro and Max) are purchased and billed through the Apple App Store or Google Play. Those stores process your payment. We do not receive or store your card or bank details. We receive only the information the store shares with us to activate and manage your subscription (such as your subscription status and an anonymised purchase identifier).

When your own customers pay you, they pay you directly (for example by bank transfer or PromptPay). GlideQuote does not process, route, or take a cut of those payments, and does not collect your customers' payment credentials.

7. Who we share data with

We share data only with the service providers and parties needed to run GlideQuote:

• Supabase, Inc. (data processor) — provides our database (PostgreSQL), user authentication, and file storage. Your account data and the content you create are stored on Supabase's infrastructure, which runs on Amazon Web Services. Access to your records is restricted on a per-user basis using row-level security so that one account cannot read another account's data.
• Apple and Google — distribute the app and process subscription billing under their own terms and privacy policies.
• Our website form provider — processes contact and sign-up form submissions on glidequote.com.
• Our website host — hosts the marketing website.
• Professional advisers and authorities — where we are legally required to disclose data, or to establish, exercise, or defend legal claims.

Because you enter your customers' details into the app, you act as the controller of that data and we process it for you. You are responsible for having a lawful basis to hold your customers' details and for responding to any requests they make about their data; we will help you do so on request.

8. International data transfers

We operate in the UK and Thailand and serve users worldwide, so your data may be processed in countries other than your own — including Mumbai, India (Amazon Web Services Asia Pacific – South region). Where data is transferred out of the UK or the EEA, we rely on appropriate safeguards such as the relevant Standard Contractual Clauses or an adequacy decision. Where Thailand's PDPA applies, we use the safeguards it requires for cross-border transfers.

9. How long we keep data

• We keep your account data and content for as long as your account is active.
• When you delete your account, we delete your personal data and content, except where we must keep certain records to meet legal, tax, or accounting obligations (for example, retention of financial records required by law). Such records are kept only for as long as required and then deleted.
• Backups containing your data are overwritten on a rolling basis and are not retained indefinitely.

10. Your rights

Depending on where you live, you have some or all of the following rights:

Under UK/EU GDPR:

• access a copy of your data;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to certain processing;
• data portability (receive your data in a portable format);
• withdraw consent at any time; and
• complain to a supervisory authority (see Section 16).

Under Thailand's PDPA: you have comparable rights, including access and a copy of your data, correction, erasure or destruction, restriction of use, objection, data portability, and withdrawal of consent, as well as the right to lodge a complaint with the Personal Data Protection Committee.

To exercise any of these rights, email our contact form. We respond within the timeframes required by law.

11. Deleting your account and data

You can delete your account and associated data in two ways:

• In the app — from your account settings, choose to delete your account.
• On the web — visit glidequote.com/delete-account for step-by-step instructions, or email our contact form from the address on your account.

Deleting your account permanently removes your personal data and the content you created, subject only to the limited legal-retention exceptions described in Section 9.

12. How we protect your data

• All traffic to the app and website is encrypted in transit using HTTPS/TLS.
• Access to your records is enforced per user with row-level security, so accounts are isolated from one another.
• Privileged database keys are never embedded in the app or website; the front end uses only restricted public keys governed by these access rules.
• We keep our systems and dependencies updated and limit who can access production data.

No method of transmission or storage is completely secure, but we work to protect your data using measures appropriate to its sensitivity.

13. Children

GlideQuote is a business tool intended for use by adults (18 or older). It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Cookies and the website

The glidequote.com website uses only essential cookies and similar technologies needed for the site to function. If we add privacy-respecting analytics in future, we will update this policy and, where required, ask for your consent first. The app itself does not use advertising cookies or third-party ad trackers.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Continued use of GlideQuote after a change means you accept the updated policy.

16. Contact and complaints

For any privacy question or request, contact:

Baiyoke Factory Co., Ltd.
80/32 Soi Lat Phrao 23, Chantharakasem Sub-district, Chatuchak District, Bangkok, Thailand
Contact: glidequote.com/contact

You also have the right to complain to a data protection authority:

• UK: the Information Commissioner's Office (ICO) — ico.org.uk.
• EU: your local supervisory authority.
• Thailand: the Office of the Personal Data Protection Committee (PDPC).