Legal
Privacy Policy
Last updated: May 3, 2026
Quotd (“we”, “us”, “our”) operates quotd.sh and the Quotd platform. This policy explains what data we collect, why, and what rights you have.
1. What we collect and why
| Data | Source | Purpose |
|---|---|---|
| Name, email, profile photo | Google OAuth, HubSpot | Identify your account |
| Calendar events (title, time, attendees) | Google Calendar API | Determine upcoming calls and build pre-call briefs |
| CRM records (deals, contacts, companies, notes, activities) | HubSpot, Salesforce | Populate briefs with deal context |
| Call recordings and transcripts | Gong, Fathom, Granola, Fireflies, Avoma, Chorus, or webhook | Generate post-call debriefs and build deal memory |
| Email metadata and content | Connected email integrations | Include relevant email context in briefs |
| Slack messages in deal-related channels | Slack integration | Include relevant Slack context in briefs |
| Usage data (pages visited, features used) | Our platform | Improve the product |
| Billing information | Payment processor | Process payments |
We only collect data necessary to deliver deal briefs. We do not collect data for advertising.
2. Google API Services User Data Policy
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only access Google Calendar data needed to identify upcoming meetings and their attendees.
- We do not use Google data for advertising or sell it to third parties.
- We do not allow humans to read your Google data except where necessary to provide support you requested, for security purposes, or to comply with law.
- We store Google data with the same protections as all customer data (see Section 7).
3. How we use your data
- Generate pre-call briefs and post-call debriefs
- Deliver briefs via Slack, HubSpot, and the Quotd dashboard
- Build and maintain deal memory across calls
- Write summaries back to your CRM
- Improve our product and fix bugs
- Communicate with you about your account
- Comply with legal obligations
We do not sell your personal data. We do not use your data to train AI models.
4. Who we share data with
We share data only with:
- Infrastructure providers (hosting, database, processing) that are contractually bound to protect your data
- AI model providers to generate briefs, under data processing agreements that prohibit training on your data
- Your connected tools (Slack, HubSpot, Salesforce) to deliver briefs back to where your team works
- Legal authorities if required by law
We do not share data with advertisers, data brokers, or any unrelated third parties.
5. Lawful basis for processing (GDPR)
If you are in the European Economic Area, United Kingdom, or Switzerland:
- Contract: Processing necessary to deliver the Quotd service you signed up for
- Legitimate interest: Product improvement, security, and fraud prevention
- Consent: Where required, such as optional marketing communications
- Legal obligation: Compliance with applicable law
6. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (“right to be forgotten” under GDPR, “right to delete” under CCPA)
- Export your data in a portable format
- Restrict or object to certain processing
- Opt out of sale of personal data (we do not sell data, but you may exercise this right under CCPA)
- Withdraw consent at any time for consent-based processing
- Non-discrimination for exercising your rights (CCPA)
To exercise any of these rights, email privacy@quotd.sh. We respond within 30 days.
CCPA disclosure: In the preceding 12 months, we have collected the categories of personal information listed in Section 1. We have not sold personal information. We have disclosed personal information to service providers as described in Section 4.
7. Data security
- Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Access controls and audit logging
- Regular security reviews
- SOC 2 compliance in progress
8. Data retention
We retain your data for as long as your account is active. When you delete your account, we delete your data within 30 days, except where retention is required by law.
9. International transfers
We process data in the United States. For transfers from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission. You can request a copy by emailing privacy@quotd.sh.
10. Cookies
We use essential cookies to keep you logged in and functional cookies to remember your preferences. We do not use advertising or tracking cookies.
11. Children
Quotd is a business product. We do not knowingly collect data from anyone under 16. If you believe we have, contact privacy@quotd.sh and we will delete it.
12. Changes
We may update this policy. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.
13. Contact
For privacy questions or to exercise your rights:
- Email: privacy@quotd.sh
- Quotd, 44 Montgomery St, San Francisco, CA 94104, United States
For EEA/UK residents, you also have the right to lodge a complaint with your local data protection authority.