Effective date: 11 September 2026
Last updated: 11 September 2026
1. Who we are
Quote Master Pro ("QMP", "we", "us" or "our") provides software for managing leads, clients, quotations, invoices, approvals, documents, tasks and business communications.
Controller for QMP account and website data
- Legal entity: QuoteMasterPro
- Registered address: Calle Nueve de Mayo 2, 33002, Oviedo, Asturias, Spain
- Privacy contact: privacy@quotemaster.pro
- Data Protection Officer / EU or UK representative, if applicable: Jose Luis Pellicer, dpo@quotemaster.pro
2. Our role
For QMP’s website, prospective customers, account holders, billing, support, security and our own product communications, QMP is the data controller.
For data a QMP customer enters, uploads, connects, sends or receives through the Service ("Customer Data"), the customer normally is the controller and QMP is its processor/service provider. We process that data only on the customer’s documented instructions and under the applicable agreement and data processing addendum (DPA). If your data was entered by a QMP customer, contact that customer first.
3. Personal data we process
| Category | Examples |
|---|---|
| Account and identity data | Name, work email, phone number, job title, credentials, role and team membership. |
| Business data | Company name, business address, tax or invoice information, client and supplier contact details. |
| Service content | Leads, client records, quotes, invoices, products, notes, tasks, approvals, documents and attachments. |
| Connected-mailbox data | Email address, mailbox configuration, OAuth tokens or mail credentials, messages and attachments when a customer connects Gmail or an IMAP/SMTP mailbox. Credentials and tokens are encrypted at rest and are not returned by the QMP API. |
| Usage and security data | IP address, device/browser data, session and login events, audit logs, approximate IP-based location, error logs and security events. |
| Communications and preferences | Messages sent through QMP, support correspondence, language and notification preferences. |
QMP is not intended for special-category or highly sensitive data, including health, biometric, political, religious, precise-location, payment-card or government-ID data, unless we expressly agree in writing to support that use with appropriate safeguards.
4. Sources and purposes
We receive data from you, your organization, users acting for a QMP customer, connected services authorized by a customer (such as Gmail OAuth or an IMAP/SMTP mailbox), and automatically from browsers and devices through essential cookies, logs and security controls.
Where QMP is controller, we use data to:
- provide, authenticate, operate, administer and support the Service;
- secure the Service, prevent abuse, investigate incidents and enforce our terms;
- maintain backups, audit trails, records and compliance documentation;
- send transactional communications and respond to requests;
- send permitted product news or marketing, with an unsubscribe option; and
- improve reliability and usability using aggregated or de-identified information.
Under the GDPR or UK GDPR, we generally rely on contract performance, our legitimate interests in operating a secure business service, consent where required, and legal obligations. We do not sell personal information, use Customer Data for targeted advertising, or make solely automated decisions with legal or similarly significant effects.
5. Cookies
QMP uses strictly necessary cookies and similar technologies to keep users signed in, protect against cross-site request forgery, maintain sessions, remember security settings and operate the Service. We will obtain consent before using non-essential cookies where required.
You can control cookies in browser settings, although disabling essential cookies may prevent the Service from working correctly.
6. How we share data
We share data only as needed to provide and protect QMP, including with authorized users in the relevant customer organization; hosting, infrastructure, backup, email delivery, support, security and professional-service providers bound by confidentiality and data-protection commitments; mailbox providers selected by a customer; and authorities, advisers or other parties where required by law or needed for legal claims. A buyer or successor may receive relevant data in a merger, financing, acquisition or asset sale, subject to appropriate safeguards.
We do not rent, sell or share personal information for cross-context behavioral advertising. Our current Subprocessor List identifies the providers that process Customer Personal Data on QMP’s behalf; material changes are handled as required by the applicable customer agreement or DPA.
7. International transfers
QMP and its providers may process data outside your country. When a transfer from the EEA, UK or Switzerland requires a safeguard, we use an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where applicable, the UK Addendum, with supplementary measures when appropriate. Request information about applicable transfer mechanisms at privacy@quotemaster.pro.
8. Security
We use reasonable technical and organizational measures designed to protect personal data, including access controls, tenant-scoped authorization, encryption in transit, encryption at rest for mailbox credentials and tokens, logging, backups and access restrictions for personnel. No internet service is completely secure. Keep credentials confidential and notify us promptly at security@quotemaster.pro if you believe an account is compromised.
9. Retention
We retain data only as long as necessary for the purposes above, legal/accounting obligations, dispute resolution and agreement enforcement.
- Account and service data: while the account is active, then as specified in the customer agreement and deletion schedule.
- Customer Data: deleted or returned after termination on the customer’s instruction, subject to a limited backup-retention period and legal obligations.
- Security/audit logs: 2 years.
- Billing and tax records: 5 years.
10. Your rights
Rights vary by location and whether QMP or a QMP customer controls the data. Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. You may also complain to the relevant privacy regulator. Email privacy@quotemaster.pro to make a request. We may ask for information reasonably needed to verify your identity and will not discriminate against you for exercising a privacy right.
If you are a client, prospect, employee or other contact of a QMP customer, that customer is generally responsible for your request. We will direct you to that customer where appropriate and assist it under our DPA.
Mexico
Where Mexico’s Federal Law on Protection of Personal Data Held by Private Parties applies, you may exercise ARCO rights: Access, Rectification, Cancellation and Opposition. Send your request to privacy@quotemaster.pro with your name, a response address, the right you wish to exercise and enough information to locate the data. We may request identity or authority evidence. Consent can be revoked where permitted by law, without affecting prior lawful processing or processing we must retain.
EEA and UK
You may complain to your local supervisory authority. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Direct-marketing objections will always be honored.
California
California residents may have rights to know/access, correct and delete personal information, and to opt out of sale or sharing. QMP does not sell or share personal information as those terms are defined by California privacy law. Authorized agents may submit requests where allowed by law, subject to verification.
11. Children
QMP is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 18. Contact us if you believe a child has provided personal data to QMP.
12. Changes and contact
We may update this policy for changes to the Service, our practices or the law. We will post the revised policy with a new effective date and provide additional notice for material changes when required.
QuoteMasterPro
Calle Nueve de Mayo 2, 33002, Oviedo, Asturias, Spain
Privacy: privacy@quotemaster.pro
Security reports: security@quotemaster.pro