Privacy policy
Last updated 21 October 2026
Sorted Quote is a quote tool for tradies in New Zealand and Australia. This page says what we collect, why, and who else sees it. We follow the New Zealand Privacy Act 2020 and, for Australian users, the Australian Privacy Principles. Questions or requests: hello@sortedquote.com.
The short version
- You can draft quotes without an account. We don't keep the drafts.
- Your business details stay in your own browser unless you send a quote.
- No advertising, no tracking cookies, and we never sell your data.
- Email us and we'll delete your account and quotes.
What we collect
- The job you describe. When you draft a quote, the text you type is sent to OpenAI to write the quote. We don't save drafts on our servers.
- Your business details (name, contact details, rates, GST number). These are saved in your browser's local storage so you don't have to retype them. They reach our server only as part of a quote you choose to send.
- Quotes you send by link. When you share a quote, we store it so your customer can open it: the quote itself, an optional email address for "your customer opened it" notices, how many times it was viewed, and the customer's response (the name they accept with, or their reason for declining).
- Your account, if you make one: email address, name if you give it, and your password stored as a one-way hash. We never see the password itself.
- Payments. Card payments are handled by Stripe. We never see or store your card number. We keep the Stripe customer ID, your plan and your remaining uses.
- Usage events, such as "quote drafted" or "pricing page seen", with a short description. They help us see what works. If you're signed in they're linked to your account; otherwise they're anonymous.
- Server logs: IP address, browser type and the pages requested. These are kept briefly, for security and to fix faults.
Cookies and local storage
One cookie, session, keeps you signed in for up to 30 days. It's only set when you log in. Local storage holds your business details and a list of quotes you've sent, on your device only. There are no analytics or advertising cookies.
Who else processes it
- OpenAI: drafts the quote from your job description. Under OpenAI's API terms this isn't used to train their models, and it may be kept up to 30 days for abuse monitoring.
- Stripe: payments.
- Resend: sends our emails (password resets, quote notifications).
- Hetzner: hosts our servers, in Germany.
- Cloudflare: runs our domain's DNS and email forwarding.
Some of these are overseas, so your information may be stored or processed outside New Zealand and Australia. We use only providers with comparable privacy protections. We don't sell or rent your information, and we don't share it with anyone else unless the law requires us to.
How long we keep it
Account data is kept until you delete your account. Shared quotes are kept so the link keeps working for you and your customer, until you or they ask us to remove them. Payment records are kept as long as tax law requires (7 years in New Zealand).
Your rights
You can ask to see the information we hold about you, have it corrected, or have it deleted. Email hello@sortedquote.com and we'll respond within 20 working days. If you're not happy with our answer, you can complain to the NZ Privacy Commissioner or, in Australia, the OAIC.
Security
Connections use HTTPS, passwords are hashed, and quote links use long random IDs that can't be guessed. No system is perfectly secure, so if we ever have a breach that could seriously harm you, we'll tell you and the regulator.
Your Google account
Sorted Quote never asks for access to your Google account. We use Google's Gmail API only on our own mailbox (sortedquote@gmail.com), to send and read our own email.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll email account holders.