Privacy Policy

Last updated: 2026-11-02

This policy explains what personal data Kotizly (kotizly.lat), operated by Raymour Labs ("we", "us"), collects, why, and the choices you have. Contact: support@kotizly.lat.

1. Data we collect

  • Account: name, email, phone, company name, logo, brand color, language and market preferences, and your password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and Google account identifier.
  • Quotes and records: the content you create, including your clients' names, phone numbers, email addresses, project descriptions, line items and totals, and income records.
  • Billing: your plan, subscription status and the identifiers Paddle gives us for your customer record and subscription. Card and payment details are collected by Paddle; we never see or store them.
  • Usage and technical data: quote counts, when a shared quote is viewed, IP address, browser information and server logs, used for security, rate limiting and troubleshooting.
  • Website analytics: we use Google Analytics to see how visitors use our website, such as pages viewed, how you found us, approximate location, device and browser type.

2. How we use it

We use this data to provide and secure the Service, create your quote documents and share links, send account emails (verification, password reset, billing notices), process subscriptions through Paddle, prevent abuse, answer support requests, and understand how our website is used so we can improve it. We do not sell your personal data and we do not use it for advertising.

3. Service providers

We share data only with providers that help us run Kotizly, and only what each one needs:

  • Paddle (payments, Merchant of Record): processes checkout, taxes, invoices and refunds under its own privacy policy.
  • Resend: delivers our emails.
  • OpenRouter and the AI model providers it routes to: receive the project description you submit when you ask Kotizly to draft a scope of work.
  • Google: Google sign-in if you choose it; Google Analytics, which measures how our website is used; and Google Fonts, which our pages load fonts from. Google Analytics and Google Fonts receive your IP address.
  • Hosting: our servers and database are located in Germany (European Union).

We may also disclose data when required by law or to protect the rights and safety of our users or the public.

4. Your clients' data

When you add a client's details to a quote, you decide what is entered and why, and you are responsible for having a valid reason to share them with us. We process that data only to provide the Service to you.

5. Shared quote links

Anyone who has a quote's share link can view that quote. Share a link only with people who should see the quote; deleting a quote disables its link.

6. Cookies

Kotizly uses essential cookies: a session cookie that keeps you signed in and remembers your language and market, and security tokens that protect forms. We also use Google Analytics cookies to measure how our website is used; Google processes that data under its own privacy policy. You can block these cookies in your browser settings or with the Google Analytics opt-out add-on. Paddle sets its own cookies during checkout. We do not use advertising cookies.

7. Retention

We keep your data while your account is open. When you delete your account from your profile, we cancel any active subscription and delete your account, quotes and records. Paddle keeps transaction records as tax law requires, and server logs are kept only for a limited time for security.

8. Your rights

You can view and correct most of your data in your profile and delete your account at any time. You can also email us to request a copy of your data, a correction or deletion, or to object to or restrict a use of it. Depending on where you live (for example under the GDPR in the EU or the CCPA in California) you may have further rights, including the right to complain to a data protection authority.

9. Security

We use HTTPS everywhere, hash passwords, limit access to production systems, and rate-limit sensitive actions. No system is perfectly secure, but we work to protect your data.

10. International transfers

Our servers are in the EU. Some providers above may process data in other countries, including the United States, under safeguards such as standard contractual clauses.

11. Children

Kotizly is a business tool for people aged 18 or over and is not directed at children.

12. Changes

We will post any update here with a new date and notify you of material changes by email or in the app.

Proposal decisions and invoices: when a client submits a decision, we store their typed name, email, decision, time and an exact copy of the proposal with a SHA-256 fingerprint. Invoice records include the issued proposal, due date, optional contractor payment link and contractor-recorded payment or void status. Private share links reveal those documents to anyone holding the link. Decision evidence is a recorded declaration; identity and payment receipt are not independently verified. A contractor payment link opens an external service chosen by the contractor; Kotizly does not process that client payment.