Effective July 29, 2026

Privacy Policy

This policy explains how Qotara collects, uses, stores, and shares information when you use our estimate and invoice workspace.

Information we collect

When you sign in with Google, Qotara receives your Google account identifier, name, email address, and profile image. We do not receive your Google password or request access to Gmail, Drive, contacts, or other Google services.

We store the business profile, client details, estimate and invoice content, preferences, and other workspace information that you choose to enter. A browser copy may also be retained as an offline and recovery fallback on the device you use.

When you email a document, Qotara creates a private client-view snapshot and a high-entropy bearer link. Anyone who receives or is forwarded that link can view the snapshot and download its PDF without signing in. Private document links expire after 90 days; expired snapshots are removed through routine retention cleanup.

Stripe processes payment and billing information. Qotara stores limited billing references and subscription status, but does not store complete card numbers. Basic technical information, such as request timestamps and security events, may be processed to operate and protect the service.

How we use information

We use this information to authenticate your account, synchronize your workspace, create and deliver estimates and invoices, manage subscriptions, provide support, prevent abuse, diagnose failures, and improve the reliability of Qotara.

Google user data is used only to provide account access and the user-facing Qotara features described here. We do not sell personal information or use Google user data for advertising.

Advertising analytics

With your permission, Qotara uses the Meta Pixel on public marketing and pricing pages to measure advertising performance. We record limited events such as page views, pricing views, the start of Stripe Checkout, and a completed paid subscription. Meta may receive the page URL, browser and device information, cookie identifiers, the selected Qotara plan, currency, and purchase value.

We do not send Meta your Google account identifier, email address, business profile, client details, estimate or invoice content, or private document links. The Pixel is not loaded on private client-document pages, and completed-subscription events are created only after Qotara verifies the live Stripe Checkout session.

Service providers and sharing

We share information only as needed with providers that help operate Qotara: Google for sign-in, Stripe for payments and subscription management, Resend for email delivery, Meta for consented advertising measurement, and our infrastructure providers for application hosting and database storage. Estimate content and recipient details are sent to Resend only when you ask Qotara to deliver a document.

We may also disclose information when required by law, to protect the rights or safety of users and the service, or as part of a business transaction subject to appropriate safeguards.

Retention, security, and your choices

We retain account and workspace information while your account is active and as reasonably needed for security, legal, and operational purposes. Private document links and their snapshots are retained for up to 90 days. We use access controls, signed sessions, encrypted network connections, private database networking, cryptographically random share links, and payment-provider webhooks to protect the service. No system can guarantee absolute security.

You can decline advertising analytics when Qotara first asks, or change that choice later. Declining does not affect your use of Qotara. You can update workspace data in Qotara and clear the browser fallback through your browser settings. To request access, correction, export, or deletion of your account information, email privacy@qotara.com. We may need to verify your identity before completing a request.

Children and changes

Qotara is a business service and is not directed to children under 13. We may update this policy as the service changes. Material updates will be reflected by a new effective date and, when appropriate, an in-product notice.

Contact

Questions about privacy can be sent to privacy@qotara.com.