RealTech Quotes Privacy Policy
This page is under review by an adviser. It isn't legal advice.
Last updated: 15 November 2026
Who we are
RealTech Quotes is run by Timothy Anders, sole trader, ABN 91 664 479 392, trading as RealTech Studios. In this policy, "we", "us" and "our" mean that business. The product is called "RealTech Quotes".
Contact: [email protected]
We handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We have chosen to do this whether or not the small business exemption applies to us.
What RealTech Quotes does
RealTech Quotes lets tradespeople write job quotes on their phone. You type notes about a job. An AI writes the quote: the scope of works, labour and materials. You check it, change it and save it. Then you copy it into your company's quote or save it as a PDF, and your company adds the prices and sends it.
What we collect
Account details
- Your email address.
- Your sign-in method (currently email link or code). Google and Apple sign-in require configuration before launch. If you later use Google or Apple, we receive the name and email they pass on. If you use Apple's private email option, we get Apple's relay address.
Your profile and settings
- Your name (the tech name on your quotes), country, languages, trades, and your opening and closing lines.
- Whether you agreed to AI processing, and when.
Your quotes
- Quotes you save: job notes, equipment details, materials, the quote text, quote numbers, and your edits.
- Client name, job number and site address, if you type them into a quote. These stay in your account. Those separate fields are kept out of AI requests. Identifying details in free-text notes may still reach the AI.
- Supplier import and nameplate photo scanning are planned; they are not available in the app yet. We will update this policy before they are.
Using the AI
- A record of each AI action: the type (writing a quote, refine, tidy, and so on), the time, and whether it counted toward your monthly limit. We use this to apply fair-use limits.
- If you report a quote to us from the app, the quote, the reason and your note.
Payments
- On the website, Stripe takes your card details. We never see or store your full card number. We keep your subscription status, plan, billing dates and payment records.
- App Store and Google Play apps and store billing are not yet available. If we add them, we may use RevenueCat to track store subscriptions, and we will update this policy first. There are no store purchases today.
Free trial records
- To give one free trial per person, we keep a record that a trial was used. We store it as a one-way scrambled value (a hash) of your sign-in identity, not the plain identity. See "How long we keep it" below.
Technical data
- Security and operational data: request times, errors, AI action metadata, rate-limit records and admin audit records. Hosting providers may also process IP addresses and device information. We use them for security and to fix faults. We do not put your job notes in logs.
- This website has no interactive demo and no Turnstile check, so it stores no demo data. We will update this policy before adding a demo.
- This website uses no analytics. We do not use Google Analytics or advertising trackers.
Why we collect it (APP 3, 6)
- To run your account and sign you in.
- To write, save and sync your quotes.
- To take payment and manage your subscription.
- To apply the trial and fair-use limits.
- To keep the service secure and fix faults.
- To answer your support requests and reports.
- To meet tax, accounting and legal duties.
We do not sell your information. We do not use it for advertising. We do not use your job notes or quotes to train AI models. For how our AI providers handle requests, see the next section.
How the AI uses your information
When you ask the app to write or refine a quote or tidy your opening and closing lines, it sends the relevant text to an AI service. This is what the app tells you before it writes your first quote.
What is sent
- The job notes you type: fault found, proposed work, scope notes, equipment details and material names.
- The AI service supports refinement, though it is not yet offered in the app. A refinement sends the original notes, current quote text and your change request.
- For tidying your opening and closing lines, those lines.
- The trade, country and quote language.
What is kept out of AI requests
The separate fields below are kept out. The app tries to remove identifying details copied into job notes, but cannot catch everything.
- Your name or tech name.
- The client's name.
- The job number.
- The site address.
- Your company's prices, ABN or licence details. The app never asks for them.
Who processes it: OpenRouter passes requests to Anthropic, the company behind Claude. We use Claude Haiku. Requests through OpenRouter set data_collection: deny. We do not use China-based AI models.
Their handling: The data_collection: deny setting applies OpenRouter's provider data-policy filter. It does not guarantee that no request data is retained. OpenRouter and Anthropic handle requests under their own terms. For how long they keep data, whether they use it for training and where they process it, see their privacy policies at openrouter.ai/privacy and anthropic.com/legal/privacy.
Your choice: You must agree before the AI writes your first quote. You can turn AI processing off in Settings. The app asks again before the AI writes your next quote.
Do not put sensitive information in job notes. Don't type things like a client's health details. The AI only needs the job facts.
The AI can be wrong. You must check every quote the AI writes before it is used or sent. See our Terms of Service.
Who else sees your information
We use these providers to run the service. They process information to provide these services, under their own terms.
| Provider | Why | Where |
|---|---|---|
| Supabase | Database, sign-in, server functions | Our current test project is in Supabase's Sydney, Australia region |
| OpenRouter and Anthropic (Claude) | Writes quotes from your job notes | Overseas; see their privacy policies |
| Stripe | Website card payments | Overseas (Stripe is a US company with global processing) |
| Apple / Google | Sign-in, only if you choose Continue with Apple or Google (they share your name and email, or Apple's private relay address). Store subscriptions are planned | Overseas |
| RevenueCat | Planned app-store subscription integration | Not used yet |
| Cloudflare | Website and web app hosting (realtechquotes.com, app.realtechquotes.com); no bot check | Global network |
| Resend | Sends sign-in emails and codes from [email protected] (your email address and the code) | Overseas: Resend is a US company; our sending region is Tokyo, Japan |
We may also disclose information if the law requires it, or to protect our rights, or if the business is sold (we would tell you).
AI requests go through OpenRouter. Our server can also send them to Anthropic directly; we will update this policy before we switch. Sign-in emails are sent through Resend.
Overseas disclosure (APP 8)
Some of these providers are overseas, so your information may go outside Australia. This includes the AI provider, Stripe and Resend, and may include others. The AI providers, Stripe, Resend and Cloudflare may process information in the United States and other countries where they operate. Before sending information overseas, we take reasonable steps to make sure the provider handles it in line with the APPs, such as using providers with published privacy and security commitments and contracts that limit their use of your data.
Security
- Your data is encrypted in transit.
- Each account can only see its own data. The database enforces this.
- Payment status and AI limits are controlled on our servers, not on your phone.
- Our keys and secrets are not in the app.
- Quotes are also stored on your device so you can use them with no signal. Protect your phone with a lock.
No system is perfectly secure. If a breach is likely to cause serious harm, we will tell you and the OAIC, as the Notifiable Data Breaches scheme requires.
How long we keep it
| What | How long |
|---|---|
| Account, profile, quotes, imports | Until you delete your account |
| AI usage records | Settled counted records are removed by daily cleanup once older than 400 days, or on account deletion if sooner. The free first-tidy record and other uncounted records remain until account deletion. |
| Reported quotes | Until you delete your account |
| Server logs | Kept by our hosting providers for the period their service sets. We have not set a shorter period of our own yet. Job notes are not written to logs. |
| Payment and tax records | Stripe customer and transaction records are retained; deleting the app account does not delete the Stripe customer. We keep payment and tax records for at least 5 years after the transaction, as Australian tax law requires. |
| Hashed free-trial identity | There is no automatic deletion yet, so for now it is kept with no end date. We keep it after you delete your account, so a trial can't be repeated by deleting and re-joining. It is a hash, not a stored copy of your email. A matching email can still be checked against it. |
| Website demo records | None. This website has no demo. |
Billing-event records linked to your account are deleted with it. Events received for an account that no longer exists keep event identifiers, type and time, without a personal-data payload. Admin audit records survive account deletion. Daily cleanup removes audit records older than 730 days, alerts acknowledged more than 90 days ago and rate-limit windows older than one day. Temporary AI response records expire after 15 minutes and are removed on a later purge (scheduled every 15 minutes). Trial hashes have no automatic purge.
When we no longer need information, we delete it or de-identify it.
Deleting your account
You can delete your account:
- In the app: Settings, Delete account.
- On the website: the steps are on the Delete your account page.
You confirm with a code we email you. Deleting your account removes your account, quotes, imports, settings and AI usage records. The process cancels any Stripe subscription first. If it cannot confirm cancellation, the account is not deleted. It does not cancel an Apple or Google subscription. You must cancel that with Apple or Google. See the Delete your account page for what we keep and why.
Your rights (APP 12, 13)
You can ask to see the personal information we hold about you, or to correct it. Email us at [email protected]. We will reply within 30 days. Most of your data is also visible in the app.
Children
RealTech Quotes is for working tradespeople. It is not for people under 18.
Complaints
If you think we have broken the APPs, contact us first at [email protected]. We aim to acknowledge your complaint within 2 business days and respond within 30 days.
If you are not happy, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, 1300 363 992.
Changes
If we change this policy in a way that matters, we will tell you in the app or by email at least 30 days before it starts, unless the law or an urgent security issue needs a faster change.