Privacy Policy

1. Introduction

QuoteDay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API service and website.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• OAuth provider information (if signing in with Google or Microsoft)

2.2 API Usage Data

When you use our API, we automatically collect:

• API request timestamps
• Request count and frequency
• IP addresses (for rate limiting purposes)

2.3 Technical Data

We may collect technical information including:

• Browser type and version
• Device information
• Log data and error reports

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Monitor and enforce rate limits
• Provide usage analytics in your dashboard
• Send important service-related notifications
• Improve and optimize the Service
• Detect and prevent fraud or abuse

4. Data Security

We implement appropriate security measures to protect your information:

• API keys are stored using SHA-256 hashing
• Passwords are hashed using bcrypt
• All data transmission is encrypted using HTTPS/TLS
• Access to personal data is restricted to authorized personnel

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party services that help us operate our Service (hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Third-Party Authentication

If you choose to sign in using Google or Microsoft, we receive basic profile information from these providers. We do not have access to your passwords for these services. Please review the privacy policies of these providers for information about their data practices.

7. Cookies and Tracking

We use essential cookies for:

• Session management and authentication
• Security (CSRF protection)

We do not use advertising or tracking cookies.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise these rights, please contact us using the information below.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. International Users

If you are accessing the Service from outside our hosting region, please be aware that your information may be transferred to and processed in a different jurisdiction where data protection laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: team@mechavate.com