The short version
You're sending us your customers' drawings. That's a real thing to be careful about, and "trust us" isn't an answer. Here is what actually happens.
Your shop's data stays yours
Your quotes and drawings are locked to your account. Another shop cannot see your files — not through the app, and not by accident.
We test this on every release: an automated suite checks that every table in the database enforces shop isolation, then tries to read and write across shops to confirm each attempt is refused. A new table without proper isolation fails the build.
Encryption
- In transit — Every connection is encrypted, including to our database and file storage.
- At rest — Your data is encrypted at rest by our infrastructure providers.
Attachments
Drawings and documents live in private storage. There is no public link anyone can forward. You open files through your signed-in account.
AI and your drawings
We use AI to read quote request emails and drawings. Under our configuration:
- Not kept — your files are not stored after reading.
- Not shared — they are not passed to other customers or third parties.
- Not training data — your drawings are not used to train models.
If AI reading is unavailable, extraction can still run using a simpler method with no model involved.
Subprocessors
These are the companies that help us run QuoteSooner:
| Provider | Purpose |
|---|---|
| Vercel | Application hosting |
| Supabase | Database, authentication, file storage |
| Postmark | Inbound and outbound email |
| Stripe | Payments — we never see card details |
| Anthropic | Email and drawing extraction |
Defense-controlled and export-restricted work
QuoteSooner is not built for defense-controlled or export-restricted drawings, and every shop confirms that at signup. We flag quote requests that look controlled so you can catch them before anything is uploaded. If your work is controlled, handle it outside QuoteSooner.
Retention and deletion
You can export everything — all records, quote requests, quotes, outcomes, and an attachment list — at any time, from settings.
Deleting your shop disables intake immediately and signs you out. Data is held for 30 days so an accidental deletion can be undone, then permanently removed from both the database and file storage.
Reaching us
Security issues: security@quotesooner.com. We'll acknowledge within one business day.