Privacy Policy

Last updated: 16 October 2026

This policy explains what personal data QuoteToFit handles, why, and what rights you have. QuoteToFit is a web app for window and door installers. It is for business users only.

1. Who we are and our roles

QuoteToFit is run by J-2 Solutions Group sp. z o.o., ul. Diamentowa 14, 55-095 Kamień, Poland (KRS 0001176514). Contact: [email protected].

• For data about you, the installer who holds an account, we are the controller.
• For data about your customers that you put into QuoteToFit, you are the controller and we are the processor, acting on your instructions. See section 13.

2. Data we hold about installers

• Email, name, company, phone, website and address.
• Logo, brand colour and settings.
• Price lists, projects and quotes.
• Billing status. We do not hold card numbers. Our payment provider does.
• Product usage events (see section 6).

3. Sign-in

• There are no passwords.
• Email sign-in uses a one-time link and code. It is valid for 15 minutes and works once.
• With Google sign-in, we receive your name, email and Google account id only.

4. Data about your customers

Installers put in their customers’ names, email, phone, address, project notes and photos of windows and doors.

A customer reaches QuoteToFit through a link from their installer. The page shows the installer’s name and logo. The customer ticks a box to agree to share their photos and details with that installer.

If you are an installer’s customer, the installer decides how your data is used. Please contact them first. You can also write to [email protected].

5. How we use data

• To let you sign in and keep you signed in.
• To run your projects, price lists and quotes.
• To know your billing status.
• To send sign-in and notification emails.
• To count how the product is used.

6. Analytics

• We use no advertising or tracking cookies. Page-view statistics come from Cloudflare Web Analytics, which sets no cookies.
• Product usage events, for example “project created”, are counted on our server. When you are signed in, they are linked to your account.
• If we ever add session recordings, we will use them only with your consent.

7. Cookies

• We set one essential cookie, qtf_s. It keeps you signed in. It is HttpOnly and lasts 60 days.
• Your browser may store unsent work on your device (local storage), so nothing is lost when the connection drops.
• We use no advertising or tracking cookies.

8. Who we share data with

These providers process data for us:

• Cloudflare, Inc.: hosting, database, photo storage, sending sign-in and notification emails, and anonymous page-view statistics (Cloudflare Web Analytics, no cookies). Servers worldwide.
• Google LLC: only if you choose Google sign-in.
• Stripe group (Stripe Managed Payments, sold through Link): payments, tax and receipts, as merchant of record. Stripe receives your email address and handles your payment details under its own privacy policy.

9. International transfers

Our providers run servers worldwide, so data may be processed outside your country. Transfers rely on the providers’ standard contractual clauses or data privacy frameworks.

10. How long we keep data

• Projects and their photos are deleted after 12 months without any change.
• Sign-in links and codes are deleted within 24 hours.
• Sessions expire after 60 days of no use.
• You can delete a project, and its photos, at any time.
• If you delete your account, we delete its projects and photos within 30 days. For now, ask us by email.

11. Security

• HTTPS everywhere.
• Keys are kept only on the server.
• Photos are not public. Only the signed-in installer can open them.

12. Your rights

You can ask us for access, correction, deletion or portability of your data, and you can object to how it is used. Write to [email protected]. We reply within one month.

You can complain to a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO). You may also contact your local authority.

For your customers’ data, the installer is the controller. Customers should contact the installer first.

13. Data processing for installers

• You are the controller of the customer data you put into QuoteToFit. J-2 Solutions Group sp. z o.o. is the processor.
• That data is your customers’ names, email, phone, address, project notes and photos of windows and doors.
• We process it on your instructions, to provide QuoteToFit to you.
• You must have the right to upload it. Customers agree to share their photos and details with you by ticking the box on the customer link.
• Our sub-processors are listed in section 8. Retention is in section 10. You can delete a project and its photos at any time.
• A Data Processing Agreement is available to installers in the EU/EEA, the UK and elsewhere, on request at [email protected].

14. Changes to this policy

If we make a material change, we will email you 30 days before, as we do for the Terms of Service.

15. Contact

Questions about privacy: [email protected].