Privacy Policy

This Privacy Policy applies to quotiv.io, the Quotiv application, the Quotiv app for Shopify, public quote and enquiry experiences, and related services (together, the Services).

When a merchant or other business uses Quotiv to process information about its customers and prospects, that business decides why and how the information is used. Quotiv processes it on the business's behalf to provide the Services. For information used to operate our own website and business—such as account, security, support, sales, and website analytics information—Quotiv determines the purposes described in this policy.

Information you provide directly

• Website and sales enquiries: your name, work email, phone number, company, website, and the information you include in a contact form or message.
• Quotiv Assistant: chat messages, any contact details you choose to provide, and a conversation transcript or summary used to answer your questions, remember relevant context, and follow up on a requested sales conversation.
• Accounts and workspaces: identity and contact details, login credentials, business profile, users, roles, product catalogue, pricing and approval rules, templates, tax and billing settings, and integration choices.
• Service content: enquiries, customer records, products, pricing, quotes, line items, terms, messages, notes, imported files, and other content entered, uploaded, generated, or sent through Quotiv.
• Quote acceptance:the signer's name or signature, acceptance time, IP address, browser information, purchase-order details, and other information needed to record the acceptance.

Information collected automatically

We receive standard technical and usage information such as IP address, browser and device type, operating system, referring page, timestamps, feature interactions, diagnostic logs, and security events. We also use cookies and similar storage as described below.

When a merchant installs or connects the Quotiv Shopify app, we receive only the information permitted by the merchant and Shopify. Depending on the features enabled, this can include:

• store name, shop domain, contact email, country, currency, time zone, plan, installation status, and granted permissions;
• Shopify staff identity details used for authentication and authorization, including Shopify user ID, name, email, account-owner status, and last access;
• product and variant identifiers, titles, descriptions, SKUs, prices, images, status, locations, shipping information, and related catalogue details; and
• customer identifiers, names, email addresses, phone numbers, and billing or shipping address details needed for quoting and draft-order workflows, where the merchant and Shopify have authorized access to those fields.

The Shopify permissions currently requested are customer read and write, product read, location read, shipping read, and draft-order write access. We use them to synchronize the merchant's catalogue and customers, support quote and enquiry workflows, and create or update authorized Shopify customers and draft orders. We do not use Shopify's Asset API to modify theme code.

Shopify manages app-subscription billing. Quotiv receives subscription and billing-status information but does not receive a merchant's payment-card details from Shopify.

We use information to:

• provide, operate, maintain, personalize, and improve the Services;
• authenticate users, connect Shopify stores and other integrations, and enforce workspace roles and permissions;
• manage enquiries, synchronize catalogues and customers, generate and deliver quotes, record acceptance, and create authorized Shopify records;
• respond to contact requests, provide support, and send transactional or service communications;
• provide AI-assisted search, product matching, catalogue mapping, quote generation, recommendations, analytics, and website assistance;
• understand website and product usage when analytics consent has been given;
• protect the Services, detect abuse, enforce usage limits, investigate incidents, and prevent fraud; and
• comply with law, enforce agreements, and protect legal rights.

Where applicable law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating and securing the Services, consent, or compliance with legal obligations, depending on the activity.

Quotiv uses artificial-intelligence service providers for features including quote drafting, catalogue interpretation, product matching, analytics, and the website assistant. When someone invokes an AI feature, relevant instructions, recent conversation, and the minimum content reasonably needed to return the requested result may be sent to an AI provider.

Users should avoid submitting personal information that is not needed for the task and must review generated output before relying on or sending it.

We may share information:

• with the merchant or organization whose workspace collected or controls the information and its authorized users;
• with Shopify to operate the integration, manage subscriptions, respond to platform events, and write records authorized by the merchant;
• with service providers supporting cloud hosting, databases, security, monitoring, analytics, email delivery, customer support, and AI functionality, subject to contractual and access restrictions;
• when required by law or reasonably necessary to protect Quotiv, our users, Shopify, or others; and
• as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell merchant or customer personal information, and we do not use it for cross-context behavioural advertising.

Quotiv uses essential cookies and browser storage for security, sign-in, consent choices, and service operation. The website assistant may use a pseudonymous visitor identifier to recognize a returning conversation and a short-lived browser setting to remember abuse-prevention blocks.

We use Google Analytics on the marketing site to understand aggregate website usage. Analytics storage is denied by default and enabled only after a visitor accepts analytics cookies through our cookie notice. You can decline analytics without losing access to the public website and can clear your choice through your browser's site-data controls. Google Analytics is not loaded on public signed-quote token URLs.

Learn more about how Google handles information in its services in the Google Privacy Policy.

We keep information only for as long as reasonably necessary to provide the Services, maintain security and business records, resolve disputes, and meet legal obligations. Retention depends on the information, the merchant's instructions and settings, account status, and applicable law.

Quotiv handles Shopify's mandatory customer-data request, customer-redaction, and shop-redaction webhooks. We use them to provide customer-data exports to the merchant and to redact or delete linked customer and store information. Generated customer-data request records expire after 30 days. Following uninstall, Shopify-linked store data is deleted in response to Shopify's shop-redaction request, with a scheduled 30-day purge as an additional cleanup control.

Some non-identifying records may be retained where removal would compromise legitimate accounting, security, or transaction records. In those cases, we remove or replace identifying content and restrict further use. Residual copies are removed through normal backup-expiration cycles.

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network connections, access controls, tenant separation, monitoring, and encryption of Shopify access credentials and other sensitive integration secrets. No system can guarantee absolute security.

Quotiv and its service providers may process information in countries other than the country where it was collected. Where required, we use recognized transfer mechanisms and contractual safeguards intended to protect personal information across borders.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information and to withdraw consent where processing relies on consent.

If you submitted information through a merchant's store, enquiry experience, or quote, contact that merchant first. The merchant controls that relationship and can verify your request. Quotiv supports merchants and Shopify in responding to verified requests.

Merchants, account users, and website visitors can contact us directly using the details below. We may request information needed to verify your identity and authority before completing a request. You may also have the right to complain to your local privacy or data-protection authority.

Quotiv is a business service and is not directed to children. We do not knowingly collect personal information from children in violation of applicable law.

We may update this policy to reflect changes to the Services, our practices, or legal requirements. We will post the updated version here, revise the effective date, and provide additional notice where required.

For privacy questions or requests, email sales@quotiv.io with “Privacy request” in the subject, or use our contact form. Include the relevant Shopify store or Quotiv workspace where applicable.