Privacy Policy
Last updated: 25 October 2026
Draft: the details in [brackets] still need to be filled in before launch.
This policy explains what information QuoteBoomerang ("the app", "we") collects, why, and what you can do about it. QuoteBoomerang is run by Emin Cancar, [Your business address]. Questions: ec.namke@gmail.com.
1. What we collect
- Your account: your email address (to log you in) and the name, business name, currency, language and time zone you enter.
- Your quotes: the customer names, job descriptions, amounts, dates, phone numbers or email addresses you add or import, your follow-up plan, your message templates and the history of follow-ups you marked as sent.
- Purchase status: when you buy through Whop, Whop tells us your email address, membership ID and whether your access is active. We never see or store your card details.
- Technical data: our hosting provider keeps short-lived server logs (such as IP address, browser type and time of request) to keep the service running and secure.
We do not use advertising or tracking pixels, and we do not sell your data. We count page views without cookies through Proof of Traction (see section 4). Only if you agree in the cookie banner do we also use Google Analytics (see section 5).
2. Your customers' information
You decide which customer details you put into QuoteBoomerang and what messages you send them. For that information you are responsible (in GDPR terms, the "controller") and we only store and process it on your behalf so the app can work (the "processor"). Only add customers you are allowed to contact, and only send follow-ups they would reasonably expect.
3. Why we use it
- To provide the app: log you in, save your data and show your follow-ups (performing our contract with you).
- To check that you have bought access (performing our contract).
- To keep the service secure and fix problems (our legitimate interest).
- To answer you when you contact us.
4. Who helps us run the service
We use these providers, who process data only on our instructions:
- Supabase (database and login emails), storing your data in the region chosen for our project.
- Netlify (hosting the website).
- Whop (payments and purchase status), under Whop's own privacy policy.
- Our email delivery provider, if used, to send the login emails.
- Proof of Traction (proofoftraction.com), which counts page views without cookies to show our public visitor badge. It receives the page address, the referring page, screen size, browser language and, technically, your IP address. It stores no cookies and nothing that identifies you across visits. Legal basis: our legitimate interest in showing verified usage numbers (Art. 6(1)(f) GDPR).
- Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), only if you accept analytics cookies.
Some providers may process data outside your country, including in the United States. Where required, they use safeguards such as the EU Standard Contractual Clauses.
5. Cookies and local storage
The app needs a login cookie to keep you signed in, and your browser's local storage to remember your language and cookie choice. These are strictly necessary and always on.
Google Analytics (only with your consent). If you click "Accept" in the cookie banner, we load Google Analytics. It sets cookies (such as _ga, kept for up to 2 years) and sends Google information about your visit: pages viewed, time on the site, device and browser type, approximate location derived from your IP address, and where you came from. We use this only to understand how many people visit and which pages they use. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Google may process this data in the United States; Google is certified under the EU-US Data Privacy Framework. If you click "Reject", Google Analytics is not loaded at all. You can withdraw or change your choice at any time with the "Cookie settings" link at the bottom of this page. More information: Google's privacy policy.
6. How long we keep it
We keep your data while your account exists. You can delete quotes at any time in the app. To delete your whole account and all its data, email us and we will do it within 30 days. Purchase records may be kept longer where tax or accounting law requires it.
7. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California law) you can ask to see, correct, export or delete your data, object to or restrict how we use it, and complain to your local data protection authority. You can export your quotes yourself as CSV or PDF in Settings. For anything else, email ec.namke@gmail.com.
8. Security
Data is sent over encrypted connections (HTTPS) and protected in the database so each account can only read its own data. No system is perfectly secure, so please keep access to your email account safe; it is the key to your QuoteBoomerang login.
9. Children
QuoteBoomerang is a business tool and is not meant for anyone under 16.
10. Changes
If we change this policy we will update the date at the top, and tell you by email for important changes.