Privacy Policy
Last updated 18 August 2026
Unreviewed draft. This document has not been checked by a lawyer and is not yet in force. It describes how the product actually works, as a starting point for legal review — it is not legal advice and should not be relied on.
This policy explains what REPLACE_ME Pty Ltd collects when you use PaintQuoteKing, why we collect it, and who else processes it.
What we collect
Account details. Your name, email address, business name, and the pricing defaults you set at signup.
Content you create. Customers, job addresses, walkthrough notes, photographs, audio and video you upload, estimates, rates and quotes.
Billing details. If you subscribe, Stripe collects and holds your payment details. We never see or store your card number. We keep only your subscription status, plan and billing period.
Usage records. A log of successful AI analyses, used to enforce plan limits, plus basic product events (an estimate created, a PDF downloaded) recorded in our own database rather than sent to a third-party analytics service.
Photographs and recordings of customers' properties
Walkthrough media often shows the inside of someone’s home. We treat it accordingly:
- it is stored in private buckets and is never publicly accessible;
- access is through short-lived signed links, issued only to your organisation;
- photographs are used to judge surface condition and preparation — no measurement is ever derived from an image;
- you can delete any file from an estimate at any time.
You are responsible for having the property owner’s permission before photographing or recording their home.
How the AI uses your information
When you press “Analyse walkthrough”, we send your notes, any transcript, and the photographs you have marked for analysis to Anthropic, which returns a structured draft scope. It is never asked for, and never returns, a price.
Images are downscaled before being sent, and no more than six are included in a single analysis. Your content is not used to train AI models. Nothing is sent to the AI unless you explicitly start an analysis — you can use the whole product without it.
Who else processes your data
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication and file storage | Account details, customers, estimates, uploaded photos, audio and video |
| Anthropic | Walkthrough analysis (the AI that drafts your scope) | Walkthrough notes, transcripts and photos you choose to analyse |
| Stripe | Subscription payments | Billing contact and payment details — we never see or store card numbers |
| Vercel | Application hosting | Request logs and technical metadata |
These providers process data on our instructions to run the service. We do not sell your data, and we do not share it for advertising.
Where your data is held
Our providers operate internationally, so your data may be stored or processed outside your country. Where that happens we rely on the contractual protections those providers offer. Contact us if you need the specific regions for your account.
How long we keep it
We keep your content while your account is open, because your estimate history is the point of the product. If you delete an estimate, it and its scope, materials and uploaded files are removed. If you close your account we delete your content within 90 days, except where we must keep records longer — for example transaction records required by tax law.
Your rights
You can access, correct, export or delete your data. Most of this you can do yourself in the app; for anything else, email privacy@REPLACE_ME and we will respond within 30 days. You can also complain to your local privacy regulator — in Australia, the Office of the Australian Information Commissioner.
Note that the customer records you store are your customers’ personal information. You are responsible for handling it lawfully; we process it on your behalf.
Security
Access is protected by database-level row security keyed on organisation membership, so one account cannot read another’s data. Uploads are private and served through expiring signed links. Passwords are hashed by our authentication provider and are never visible to us.
No system is perfectly secure. If a breach affects your data we will notify you and the relevant regulator as required by law.
Cookies
We use only the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or third-party tracking cookies.
Contact
REPLACE_ME Pty Ltd, REPLACE_ME
REPLACE_ME
privacy@REPLACE_ME