Privacy policy

Who we are

CheckTheQuote (“we”, “us”) provides a quote-checking tool for UK homeowners. This policy explains what personal data we collect, why we collect it, and how we handle it under the UK GDPR and the Data Protection Act 2018.

What we collect

• Account data: email address and a hashed password when you create an account.
• Quote content: the text of any quote you paste, plus the property address or postcode if you choose to provide one.
• Analysis results: the scores, line-item breakdowns and contractor checks we generate for your quotes.
• Payment data: if you purchase a project unlock, Stripe processes the payment and we store the Stripe payment identifier. We do not store card numbers.
• Usage analytics: anonymised page views and performance metrics via Vercel Analytics.

How we use your data

• To run the quote analysis you requested.
• To keep a record of your analyses in your dashboard.
• To process payments and unlock project access.
• To improve the service — including reviewing aggregated, de-identified pricing data to refine our benchmarks.
• To contact you about your account (password resets, receipts).

Third parties we share data with

We use a small number of processors to operate the service. Each one only receives the data it needs:

• Supabase (authentication and database storage; EU region).
• Anthropic (receives your quote text to produce the analysis; processed under their API terms and not used to train their models).
• Stripe (payment processing).
• UK public company register (we query the register using the contractor name or company number; we do not send your personal data).
• Vercel (hosting and analytics).

Legal basis

We process account and analysis data under contract (to provide the service you signed up for), payment data under legal obligation (tax and accounting records), and analytics under legitimate interests (keeping the service reliable).

How long we keep it

Account and analysis data are kept for as long as your account is active. You can delete your account at any time from your dashboard, which immediately removes your account, analyses and project history, except where we are legally required to keep payment records (typically six years for UK tax purposes).

Your rights

Under UK GDPR you have the right to access, correct, export or delete your personal data, and to object to or restrict processing. To exercise any of these rights, email us at the address below.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Security

Data is encrypted in transit and at rest. Access to production systems is restricted and audited. Supabase enforces row-level security so users can only access their own records.

Contact

Questions or data-rights requests: email privacy@checkthequote.co.uk.