Privacy
Last updated: 20 September 2026. Plain English on purpose. If anything is unclear, a contact email will be added here.
Who this covers
Quote & Chase (ABN ) is an Australian small business. This page covers three separate things, and the first is the one that matters most:
- The phone app, the free web app you open in your browser and add to your home screen.
- This website, including the photo demo and any email you give us.
- The optional laptop pack, files that run in Claude Code on your own computer.
The phone app
What is stored on the phone
Everything the app knows lives in your browser's storage on your phone. We do not run a server that holds it, so we cannot see it, recover it or delete it for you. That includes:
- Your business details: trading name, your name, ABN, licence and insurance numbers, phone, email, address, logo, and your bank account details as printed on invoices.
- Your prices, labour and paint settings, quote wording and terms.
- Your clients: names, phone numbers, email addresses, site and billing addresses, and client type.
- Jobs, rooms and measurements, photos you attach to a job, quotes (including earlier versions), invoices, payments, credit notes and variations.
- A log of the messages the app has sent or scheduled: when, to whom, which channel, the first part of the text, and whether it worked.
- If you set them up: your Stripe restricted key, your Twilio and Resend keys, the relay address and relay token, and a hashed copy of your app PIN. Keys are stored as you typed them; the PIN is stored only as a hash.
The measuring feature processes photos on the phone. Nothing is uploaded to measure a wall.
Lost or reset phone means lost data unless you have a back-up. Clearing the browser's site data also wipes it. Save a back-up after every invoice and keep it in your own Drive or iCloud.
What leaves the phone, and when
Nothing leaves the phone until you send something or set up sending. When you do, this is exactly what goes where:
| When | What is sent | Who receives it and what they keep |
|---|---|---|
| You tap Text, Email or Share without the relay set up | The PDF or the message text, handed to your own SMS, email or messaging app. | Whatever app you choose. It leaves our software at that point and their privacy terms apply. |
| You send or schedule through the relay (SMS or email you have set up) | The recipient's phone number or email address, the subject and body of the message, any PDF attachment, the send time, and an idempotency key made from the job and message reference. If your relay is set to accept keys from the phone, your Twilio and Resend keys travel with each request over HTTPS. | The relay, a small function on Vercel (a US company): either one you deploy yourself, or ours if your sending runs through our system after the set-up hour. The relay code stores and logs nothing itself; it passes the request on and returns the result. When it is ours, the Twilio and Resend accounts the message goes through are ours too, and their logs (below) sit on our accounts for up to 90 days. Vercel keeps its own request logs (IP address, path, status, time) for a period set by Vercel. If you use a relay run by someone else, your credentials and every message pass through their server. |
| An SMS is sent or scheduled | Phone number, message text, send time. | Twilio (US). Twilio keeps message logs including the text and delivery status, and holds scheduled messages until they send or you cancel them, up to 35 days ahead. |
| An email is sent or scheduled | Email address, subject, body, and the PDF attached. | Resend (US). Resend keeps email logs including the content and attachments, and holds scheduled emails until they send or you cancel them, up to 30 days ahead. |
| You add a card payment link to an invoice | Your invoice number and the amount, using your own Stripe restricted key. The client's card details are entered on Stripe's page and never touch the app. | Stripe (US). Stripe holds the payment link, the payment and the payer's details in your Stripe account. The app reads back whether the link has been paid. |
| You tap Add to Google Calendar | The booking title, dates, times, site address and notes, in a link that opens Google Calendar. The .ics file option goes through your share sheet instead. | Google (US), in your own Google account, under Google's terms. |
| You save a back-up | A file containing everything under "What is stored on the phone" above, including every client's details and your bank details. Your Stripe, Twilio, Resend and relay keys are left out unless you tick "Include keys". | Wherever you send it: your Drive, iCloud, email or AirDrop. Treat it like a file from your bank. |
Hosted sending. If your sending runs through our system (the hour includes this for a period), your texts and emails pass through our relay and are logged by Twilio and Resend on our accounts, as any sending service logs them, for up to 90 days. We do not see your quotes, prices or jobs. We read a message only to fix one that failed, and we delete your sending token and its log when you switch to your own accounts or leave. Texts go out from our number; a customer who replies to it gets an automatic text sending them back to the contact details in the message, and that reply passes through Twilio and may be copied to us so we can pass it on to you. Nobody else sees it, and it is not kept beyond the provider's log. If you claim under our guarantee we may ask for screenshots from the app; cover client names before sending, and we delete the screenshots once the claim is settled.
Cross-border. Vercel, Twilio, Resend, Stripe and Google are United States companies and may store data outside Australia. Using the sending, card payment or Google Calendar features means the client information listed above is disclosed to them (Australian Privacy Principle 8). If you would rather it did not leave Australia, do not set those features up: the app still works, and you send from your own phone.
Your keys
Your Stripe, Twilio and Resend keys stay on the phone. They leave it only in two cases: with each relay request, if you pasted them into the app and your relay allows keys from the phone; or never, if you set them as environment variables on your own relay instead, in which case the phone holds only the relay address and token. Use a restricted Stripe key and, where the provider offers it, an API key rather than an account's master token. If a phone is lost, revoke the keys in the Stripe, Twilio and Resend dashboards and change the relay token.
Your clients' information
You are the one collecting your clients' names, numbers and addresses, so their privacy is your responsibility, not ours. Most sole traders are below the Privacy Act's $3 million turnover threshold, but telling clients where their details go is still the right thing to do. A line like "We keep your details on our phone and use a texting and email service to send quotes and reminders" on your quote terms covers it.
What we can see from the app
Nothing. The app does not report usage, does not phone home, and has no analytics. When you open it, your browser fetches the app files from the address it is hosted at (GitHub Pages or Vercel), and those hosts see ordinary web-server logs such as your IP address and the time.
This website
The photo demo. When you use "point your phone at a wall" on this site, the photo and any notes you type are sent once, over an encrypted connection, to Anthropic's API to produce a sample quote. We do not save the photo, the notes or the result. Anthropic handles that request under its own privacy policy and API terms. Do not upload photos of people or documents; the demo is for rooms and walls. This is different from the app, which measures on the phone and uploads nothing.
Email address. If you give us your email for the sample quote, the app link or the hosted waiting list, we use it to send you those and, if you asked, occasional updates. One-click unsubscribe. We do not sell or rent email addresses. The form is handled by a form provider we name in the form itself.
Purchases of the laptop pack. Payments are processed by our checkout provider, which collects your card details under its own privacy policy. We receive your name, email and what you bought, so we can deliver the files and provide support. We do not see or store card numbers.
Advertising and analytics. This site may use the Meta pixel to measure whether our ads work. It sets cookies and shares visit data with Meta under their policies. You can limit this through your browser settings or your ad preferences on Meta. The app itself carries no pixel and no analytics.
The laptop pack
The pack is a set of files that runs inside a folder on your own computer. Your quotes, invoices, client details and price list stay on your machine. When you use Claude Code with it, the content you ask it to work on is processed by Anthropic under the terms of your own Claude subscription, which you hold directly with Anthropic. We never see your business data. The pack drafts messages; it does not send them.
Your rights
You can ask what personal information we hold about you (for most people that is at most an email address and a purchase record), ask us to correct it, or ask us to delete it. We handle personal information in line with the Australian Privacy Principles. For anything held in the app on your phone, you already hold it: delete the app's data from the app's Set-up screen or your browser settings.
Changes
When this page changes, the date at the top changes with it. We do not change it silently.
Contact
Quote & Chase, ABN . Contact email to be added.