Legal

Privacy Policy

What we collect, why, who processes it, how long we keep it, and how to make us delete it.

Last updated 14 September 2026

The short version. We collect what we need to produce your supplement drafts and nothing else. Your carrier estimates and photos contain other people's personal information, and we treat them that way: encrypted, never sold, never shared with insurance carriers, deleted when your claim closes or you close your account. We do run one advertising measurement tool, the Meta pixel, so we can tell which ad brought you here; what it collects and how to stop it is below.

1. Whose data this is

There are two kinds of personal information here and it matters which is which.

Yours. Your name, business email, phone number, and billing details. You give us these directly and we are responsible for them.

The homeowner's. The carrier estimates you upload contain someone else's name, property address, policy number, and claim number. You choose to send us that information, and you remain responsible for having the right to. We process it strictly on your instructions, only to produce your draft. We are not the owner of that relationship and we never contact those people.

If you want to reduce what you send us, black out the homeowner's name before uploading. We only need the property's city to be readable, because that determines which building code edition applies.

2. What we collect

CategoryExamplesWhere it comes from
AccountName, business email, phone numberYou, at signup
BillingPlan, invoices, card brand and last four digitsStripe. We never see or store your full card number
Claim documentsCarrier estimates, measurement reports, photos, and the drafts we generate. These contain homeowner name, property address, policy and claim numbers, adjuster contact detailsYou, when you upload
Claim activityClaim status, dates you marked, follow ups sent, what the carrier approved or deniedYou, and the tracker
TechnicalIP address, browser type, timestamps, error logsAutomatically, when you use the site
SupportEmails and messages you send usYou

3. What we use it for

4. What we never do

5. Who processes data for us

We use a small number of service providers, each contractually bound to protect your data and use it only for the service they provide us:

ProviderWhat they doWhat they see
Cloud hosting and storageRuns the application, stores documentsEncrypted documents and account records
OpenRouter, and the AI model providers it routes our requests toThe AI models that read estimates, recognize text in scanned PDFs, and draft proseDocument contents, at the moment of processing. We only allow providers that do not train on it
StripePaymentsYour billing details. Card numbers go to Stripe, never to us
Email and SMS providerSends account and claim notificationsYour name, email, phone, message content
Customer relationship toolKeeps our record of who signed up, so we can answer you and follow upYour name, email, phone, business name, and when you gave consent to be texted. Never a claim document or a homeowner's details

We may also disclose information if the law compels us, to protect someone's safety, or as part of a merger or acquisition, in which case we would tell you before your data moved.

6. How long we keep it

7. Deleting your data

There are three different things people mean by stopping, and they do different things:

ActionWhat happens to your data
Pause your subscriptionNothing is deleted. Your open claims keep their documents, clocks, and follow ups.
Cancel your subscriptionYou get thirty days to download everything. After that we purge documents, photos, generated packages, and the personal details on them. Your account shell stays so you can come back.
Delete your accountSeven day window in case you change your mind, then permanent removal of everything that identifies you or the properties in your documents.

What survives deletion, and nothing else does: anonymous outcome statistics with no route back to you or any property (for example, that a drip edge item cited under a particular code section was approved by a particular carrier in a particular state and month), and the billing records tax law requires us to keep. We do not retain your attestations after deletion.

To delete your account, use the setting in your account or email info@tryquicksupp.com. Deletion completes within thirty days, limited by the backup window described above.

8. Your privacy rights

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy in a portable format. Email us and we will respond within thirty days. We will not charge you or treat you differently for asking.

If you are in California, the CCPA as amended by the CPRA gives you rights to know, delete, correct, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we never have. We do not process sensitive personal information for inferring characteristics. You may use an authorised agent, and you can appeal a decision by replying to it.

If you are in Canada, PIPEDA rights of access and correction apply and the same email address handles them.

If a homeowner contacts us about information in a document you uploaded, we will refer them to you, because you are the party with the relationship and the contract. We will help you respond.

9. Text messages and email

When you sign up you give us a phone number and agree that we may text and email you about your supplements. Here is exactly what that means:

10. Security

Documents are encrypted in transit and at rest. Access is limited to the small number of people who need it to run the service and support you, and that access is logged. Files are served through expiring signed links rather than public URLs. We will tell you promptly if a breach affects your data, and where the law requires it we will notify regulators.

No system is perfectly secure. If you find a vulnerability, email us and we will work with you.

Cookies, page analytics, and children

We use the cookies needed to keep you signed in and keep the site working, and on this marketing site one advertising cookie set by the Meta pixel.

The Meta pixel. The marketing pages and the signed-in product are one website, and the pixel script is loaded on the marketing pages only. It is never loaded on a page that shows a claim, so it never sees an estimate, an address or anything about a homeowner. Its cookie is a first-party one on our own domain; being on the same domain does not send it anything, because only the pages that load the script report to Meta at all. What it records is that a browser reached a page and, if you sign up, that a signup happened, so we can tell which ad paid for itself. Meta may match that to a Facebook or Instagram account it already has. You can stop it with any tracker blocker, or with "Off-Facebook activity" in your Meta settings.

We do measure how many people reach each page, using Vercel Web Analytics. It is cookieless: it sets no cookie, stores nothing on your device, assigns no identifier that follows you between sites or between visits, and does not build a profile of you. What it records is the page, the referring site, and coarse device and country information, aggregated. We use it to see whether the site explains the product, and nothing else. It is not an advertising tracker and it is not shared with advertisers.

QuickSupp is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes and contact

If we change this policy materially we will email you before it takes effect. Privacy questions, requests, or complaints: info@tryquicksupp.com.