QuoteLoopPrivacy policy
Last updated: 14 October 2026
QuoteLoop is a Shopify app that lets a store's customers turn their cart into a PDF quote, and helps the merchant follow up and turn quotes into orders. This policy explains what information the app collects, why, where it's kept, how long, and your rights. It applies to merchants who install QuoteLoop, and to shoppers who request a quote from a store that uses it.
Who we are
QuoteLoop is made by TechnoCity, a business based in Sri Lanka ("we", "us"). For any privacy question or request, email shane@technocity.lk.
Our role. For information about merchants (your account and settings), we decide how it is used. For information about a merchant's customers (the details in quotes), the merchant decides how it is used and we process it on the merchant's behalf, under our data processing agreement.
Information about merchants
| Information | Why we need it |
|---|---|
| Your store's domain, an access token and the permissions you granted. For some sign-ins, the Shopify user ID, name and email of the staff member who opened the app. | To sign you in and work with your store through Shopify's APIs. |
| Your QuoteLoop settings: business name, address, contact details and tax numbers, quote PDF design and wording, email settings (alert and reply-to addresses, sender name), your store's currency and timezone. | To make your quotes and send your emails as you set them up. |
| Your logo. | To print it on quotes. It is stored in your store's Files on Shopify. |
| Your plan and trial status. | To know whether your subscription is active. Shopify handles billing; we never see payment details. |
| An access log: which staff user ID opened a quote, downloaded a PDF or exported quotes, and when. | To protect your customers' data and let you see who accessed it. |
Information about shoppers (in quotes)
When a shopper requests a quote, or a merchant creates one, QuoteLoop stores:
- Contact details the merchant asks for in the quote popup: name, company, email, phone, tax ID, billing address and a note. The merchant chooses which fields are shown; fields that are turned off are never saved.
- If the shopper is logged in: their Shopify customer ID, and their saved name, email, phone and address to fill in the popup.
- The quote: the products, quantities, options (such as engravings), prices, discounts, taxes and totals, as calculated by Shopify.
- Quote activity: when the quote was created, downloaded, emailed, opened or viewed, edited, or ordered, and the related order's number and total. Opens are detected with a small image in the email.
- Emails sent about the quote (recipient address, subject and content).
- Follow-up notes the merchant's staff write about the quote.
We use this information only to provide QuoteLoop to the merchant: to make and send the quote, show it to the merchant, track its progress and match it to orders. We don't use it for advertising, we don't sell it, and we don't combine it across stores. A shopper's IP address is used briefly in memory to prevent abuse (rate limiting) and is not stored.
To read store data, QuoteLoop uses these Shopify permissions: products (to price quotes and show product details), draft orders (to price quotes and create draft orders), orders (to match orders to quotes), customers (to link and fill in logged-in customers), themes (to check the quote button's settings) and files (to store your logo).
Where information is kept, and who helps us
We use these service providers (sub-processors) to run QuoteLoop:
| Provider | What they do | Location |
|---|---|---|
| Shopify | Platform the app runs on; billing; logo storage | Global |
| Fly.io | Runs the app server | Singapore |
| Neon (on Amazon Web Services) | Database | Singapore |
| Resend | Delivers emails | Japan (sending); United States (company) |
| Cloudflare | Hosts this website and our email domain's DNS | Global |
Where information moves between countries, we rely on our providers' standard data protection terms, such as the EU Standard Contractual Clauses. We'll update this list before adding a provider that handles personal data.
How long we keep information
- Shopper details in quotes are erased automatically two years after the quote expires. Totals, items and dates are kept, without personal details, so the merchant's statistics stay correct.
- Emails we've sent are deleted 90 days after they're sent.
- Access log entries are deleted after two years.
- When a shopper asks a store to delete their data, Shopify tells us and we delete that customer's quotes and emails.
- When you uninstall, we stop accessing your store immediately. 48 hours later Shopify asks us to delete your store's data, and we delete everything: quotes, settings, emails, logs and sign-in data.
- Database backups used for recovery are overwritten within 30 days.
Merchants can ask us to delete their data, or a particular customer's quotes, at any time.
Security
Information travels over encrypted connections (HTTPS) and is stored encrypted at rest by our database provider. Access is limited to the people who run QuoteLoop, with two-factor authentication on our accounts. Our logs don't contain shoppers' personal details. Read more on our security page. If a breach affects your data, we'll tell you and Shopify without undue delay, and within 72 hours of finding it.
Your rights
Merchants can ask to see, correct, export or delete the information we hold about their store by emailing shane@technocity.lk. Shoppers should contact the store they requested a quote from; the store controls their information, and Shopify passes data requests on to us. We'll help the store answer them. You can also write to us directly and we'll pass your request to the store.
Depending on where you live, laws such as the EU and UK GDPR, the California Consumer Privacy Act and Sri Lanka's Personal Data Protection Act give you further rights, including complaining to your data protection authority. We answer requests within 30 days.
This website
This website doesn't use cookies, analytics or advertising trackers. Its fonts are loaded from Google Fonts, which receives your IP address to deliver them. The demo on the home page runs in your browser and sends nothing to us.
Children
QuoteLoop is a business tool and isn't meant for children.
Changes
We may update this policy when QuoteLoop changes. We'll change the date at the top, and tell merchants in the app or by email before a significant change takes effect.