Privacy Policy

1. Who we are

QuoteReview is an Australian quote-review and provider-matching service available at quotereview.com.au. Privacy questions, access or correction requests and complaints can be sent to privacy@quotereview.com.au.

2. What we collect

We may collect your name, email address, phone number, postcode, project details, consent record, referral source and the structured review produced from your quote. We also receive ordinary technical and security information such as request timestamps and server logs.

Your uploaded PDF or image is processed to create the review, then discarded. QuoteReview does not save the original file in its database or file storage.

3. How we collect and use it

We collect information directly from you when you upload a quote, submit a provider request, contact us or opt out. We use it to provide the review, respond to you, operate and secure the service, prevent unwanted contact, improve service quality, and meet legal obligations.

We do not sell contact lists. We do not use the contents of your quote to send unrelated marketing.

4. AI processing

The uploaded quote is sent securely to OpenAI’s API to produce a structured review. The request is configured not to be stored by the model provider. AI can make mistakes, so reviews are general information and should be checked with an appropriately licensed professional.

5. Provider sharing

We share your name, email, phone, postcode and structured review with no more than three matching providers only after you expressly request competing quotes. We do not give providers the original uploaded file. Providers may use the lead only to respond to that project and must follow our Provider Agreement.

6. Other disclosures and overseas processing

We use service providers including Vercel for hosting, Supabase for database services and OpenAI for AI processing. They may process information in Australia or overseas under their applicable contractual and security arrangements. We may also disclose information where required by law, or to professional advisers who owe confidentiality duties.

7. Retention and deletion

Original quote files are discarded after analysis. Lead records are reviewed regularly and deleted or de-identified when no longer needed, subject to legal, dispute and security requirements. Providers must normally delete lead information within 90 days after their last project contact. Suppression entries are kept as keyed, one-way hashes for as long as reasonably needed to honour an opt-out.

8. Security

We use access controls, server-only credentials, encryption in transit, restricted database permissions and data minimisation. No system is completely secure; please avoid uploading documents containing information that is not needed for the review.

9. Your choices and rights

You can ask to access or correct personal information we hold, withdraw a provider-sharing request, request deletion where applicable, or stop marketing and provider follow-up through our unsubscribe form. We may need to verify your identity before completing a request.

10. Complaints

Email privacy@quotereview.com.au with enough detail for us to investigate. We aim to acknowledge privacy complaints within five business days and provide an outcome within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

11. Changes

We may update this policy when our practices or legal obligations change. The effective date at the top shows the current version.