1. Scope and operator
This policy explains how Quoinvo handles information when people use its contractor-business application, public website, secure customer document links and related support. Quoinvo is operated by Michael Dawson, a sole proprietor based in Greater Sudbury, Ontario, Canada. Privacy questions can be sent to support@quoinvo.com.
2. Information Quoinvo processes
Quoinvo processes the information needed to provide the features a user chooses to use, including:
- Account information, such as email address, display name, sign-in provider identifiers and sign-in state.
- Business workspace and Company Profile information, including the business name, contact details, address, logo, membership role and business plan.
- Customer contact, billing and shipping information entered by a business user.
- Business records and settings, including quotes, invoices, payments, saved items, expenses, jobs, activity history, document preferences and business settings.
- Uploaded logos, receipts, and supported work, document or item photos.
- Secure document-sharing information, including the document snapshot shared by a contractor, link status, customer-view activity, Quote acceptance or decline responses, and private PDF artifacts associated with a secure shared document version.
- Notification-device tokens and notification preferences when a user enables notifications.
- Subscription entitlement and verification information needed to provide Google Play Premium access. Quoinvo stores a one-way hash for purchase-token verification rather than the raw purchase token.
- Technical information needed to operate, secure and troubleshoot the service.
3. How Quoinvo uses information
Quoinvo uses information to authenticate users; establish and enforce business membership; save, display and synchronize business records; generate Quote and Invoice documents; provide secure customer links; record payments and business activity; verify subscriptions; send enabled service notifications; protect the service; and respond to support requests.
4. Secure document sharing
When a contractor creates a secure Quote or Invoice link, Quoinvo makes the selected document available through that link to the recipient. The link can show the document, supported photos and payment information, and can allow a customer to accept or decline a Quote where that feature is available. Quoinvo records the first confirmed human view and customer responses to support the contractor's document workflow. Secure links can expire or be revoked. Private PDF artifacts associated with a secure share are retrieved through Quoinvo's protected share flow; Quoinvo does not publish the underlying private storage location in the customer page.
5. Where information is processed and stored
Quoinvo uses Firebase Authentication for sign-in, Cloud Firestore for business-scoped application records, Cloud Functions for server-side operations, Cloud Storage for private uploaded media and private document artifacts, and App Check to help protect supported app and backend access. Google Play handles Android subscription purchase and billing flows. IONOS hosts Quoinvo's public website. These services process information only as needed to provide their respective roles in the implemented product.
6. Access and safeguards
Operational records are organized by business workspace. Quoinvo uses authenticated access, active membership and role checks, business-scoped paths, server-side validation and private-storage protections. Subscription access is verified against the business entitlement rather than a browser-only or client-only setting. No system can guarantee absolute security.
7. Retention and account deletion
Quoinvo provides a secure external account-deletion page and an in-app deletion flow. Deletion removes the account identity, user-specific account records and business access. A business workspace owned by the deleting account is closed. Historical business records, such as quotes, invoices, payments, expenses and related records or media needed to keep the closed workspace internally consistent, may remain retained.
Retained information is kept for as long as reasonably necessary for legitimate business-record preservation, accounting or bookkeeping, security, fraud prevention, dispute resolution, or applicable legal and regulatory obligations. Quoinvo does not publish an unverified fixed retention period. Deleting a Quoinvo account does not automatically cancel a Google Play subscription; manage Google Play billing separately where applicable.
8. Your choices
Business users can update information through supported Quoinvo screens. A user can start account deletion in the app through Navigation drawer → Account → Danger zone → Delete Quoinvo account, or use the secure external page above. Users may contact support@quoinvo.com to request access, correction or deletion. Quoinvo may need to verify identity and authority to act for a business before responding.
9. Children and younger users
Quoinvo is business software and is not directed toward children. A person below the applicable age of majority where they live may use Quoinvo only with appropriate parent or legal-guardian involvement or permission where required.
10. Changes and contact
Quoinvo may update this policy when its practices or the product change. The current policy is published at this address. Questions can be sent to support@quoinvo.com.
