Privacy Notice
Last updated: 7 October 2026. CoreOffice Support Global LLC, trading as Quote-to-Cash, explains what we collect, why, who receives it and what rights you have.
1Who we are
CoreOffice Support Global LLC ("we", "us", "our"), trading as Quote-to-Cash, is the data controller for the personal data described here. Contact us at kjdowdell61@gmail.com for any privacy question, request or complaint.
2What we collect and why
| Personal data | Why we use it | Legal basis |
|---|---|---|
| Account data — name, email address, password (stored only as a hash), and any sign-in provider details | Creating and securing your account, signing you in, recovering your password | Contract performance; legal obligation for security |
| Business data — business name, contact details, logo, address, settings, team members, roles and invitations | Setting up your workspace, isolating each business's data, showing the right permissions | Contract performance; legitimate interests (a working, secure multi-tenant product) |
| Records you add — your customers' names, emails, phone numbers and addresses, plus quotes, jobs, invoices, payments, files, photos and messages | Providing the service: storing records, showing customers the quote, invoice or portal you send them, and delivering messages you ask us to prepare | Contract performance with the business; where the business relies on consent, that consent is the business's to obtain |
| AI request data — the prompts, records and outputs involved in AI features you choose to use | Generating the drafts and summaries you ask for, and logging that they happened | Contract performance; legitimate interests (usage accounting and abuse prevention) |
| Usage and technical data — pages viewed, features used, actions taken, device and browser type, IP address | Security and fraud prevention, troubleshooting, capacity planning and product improvement | Legitimate interests (keeping the service secure and reliable) |
| Support correspondence — emails and messages you send us | Answering, resolving and following up on your request | Legitimate interests; consent where you contact us voluntarily |
Payment card details for your Quote-to-Cash subscription are collected and processed by our Merchant of Record, Paddle, not by us. We store only the subscription reference, plan, status and period dates needed to give you access.
3Who receives personal data
- Our service providers and sub-processors — hosting and cloud infrastructure, database and storage, transactional email delivery, and support tooling. They act on our instructions and only for the service.
- Our Merchant of Record, Paddle — for the sale of your subscription, subscription management, payments, tax compliance and invoicing, including the business and contact details needed to invoice you.
- Payment providers you connect yourself — if you give your customers a pay-now link, that provider handles the transaction; we do not see card details.
- Your own team and customers — within the permissions you set, so the right people and the right customers can see the right records.
- Professional advisers — lawyers and accountants, under duties of confidentiality.
- Authorities or courts — where we are required by law, or to protect rights, safety or property.
We do not sell personal data and do not share it for third-party advertising.
4How long we keep it
We keep account, business and record data for as long as your workspace is active. Deleted records are hidden from the product and then removed permanently. When a business closes, we give a 30-day export window, then delete its data from live systems and remove it from backups on our ordinary backup schedule. We keep billing and tax records for as long as law requires, typically several years. Where data is no longer needed, we delete or anonymise it.
5Your rights
You can ask to access, correct, delete or restrict use of your personal data, object to processing based on legitimate interests, receive your data in a portable format, and withdraw consent where consent is the basis. If you are in the UK or the EEA you also have the right to complain to your supervisory authority. We respond within one month; complex requests may take longer, and we will tell you. Email kjdowdell61@gmail.com to make a request, or use the export and account controls in the app. If you hold customer data, handle your customers' own requests through the controls in your workspace.
6Where data is processed
Data is hosted in the United States. Where personal data leaves the UK or the EEA, we rely on safeguards such as the European Commission's adequacy decisions for the United States where they apply to the recipient, or Standard Contractual Clauses with our providers.
7How we protect it
We use encryption in transit and at rest, per-business row-level access controls enforced in the database, role-based permissions, least-privilege access for staff, session controls, rate limits on public links, and audit logs of sensitive changes. No method of transmission or storage is completely secure, so we also review security regularly and keep operator actions logged with a reason.
8Cookies and similar technologies
The app uses strictly necessary cookies and local storage to keep you signed in, remember your workspace and protect against misuse — these cannot be switched off while using the product. If we add analytics or marketing cookies, this notice will name them and we will ask for your consent before setting them, with a way to change your mind at any time through your browser settings or a preference control. You can clear or block cookies in your browser, but parts of the app will stop working.
9Changes and how to reach us
We may update this notice and will change the date above when we do; material changes will be announced in the product or by email. Questions, requests and complaints about privacy: kjdowdell61@gmail.com. See also our Terms of Service and Refund Policy.