Privacy Policy
This policy explains how QuotedBy (the Chrome extension and the quotedby.io website) handles personal data. In short: your projects and AI answers stay in your browser, and we process only the little data needed to run Pro features, payments and support. A plain-language summary is on Your data.
1. Controller
The controller is Alessandro Aldieri, Naples, Italy, VAT number IT09915691217. For any privacy question or request, write to info@quotedby.io.
2. Data that stays on your device
Projects, brands, competitors, prompts, AI answers, links, screenshots, notes, reports and settings are stored in your browser by the extension. We do not receive this data and cannot access it. You can delete it at any time by removing the extension or its data.
The extension reads the pages of the AI platforms you choose to monitor, only to insert your prompts and save the answers in your browser.
3. Data we process
- Pro AI analysis. When you ask for a Pro summary, analysis or prompt suggestion, the extension sends the text needed for that request to our server, which forwards it to our AI provider (Groq) and returns the result. We do not store this text. Legal basis: performance of the contract.
- Installation ID and usage counters. A random installation ID, the date of its first Pro request (for the 14-day trial), its plan status and a daily request count. They contain no name or email. Legal basis: performance of the contract and our legitimate interest in preventing abuse. Retention: daily counters 2 days; first-request date 24 months; plan status for as long as the subscription is active.
- Purchases. When you buy Pro, Paddle collects your name, email, billing address and payment details as Merchant of Record and independent controller, under Paddle's privacy policy. We receive the order details needed to activate Pro and support you. Legal basis: performance of the contract and legal obligations (tax and accounting). Retention: as required by tax law, normally 10 years.
- Contact form. When you use the form on the Contact page, we collect your name, email address and message and, if you choose to answer, how you heard about QuotedBy. We use them only to reply to you. Cloudflare provides the anti-spam check (Turnstile) and delivers the message to our mailbox, where it is kept like any other email (see below). Legal basis: our legitimate interest in replying, or steps before a contract.
- Emails. When you write to us, we process your email address and message to answer you. Legal basis: our legitimate interest in replying, or steps before a contract. Retention: 24 months after the last exchange.
- Website. quotedby.io uses no analytics and no advertising or tracking cookies. The Contact page loads Cloudflare Turnstile to check that the form is used by a person. Our hosting provider processes technical data such as IP addresses to deliver and protect the site. Legal basis: our legitimate interest in security.
4. Recipients
We share data only with the providers that help us run the Service, under contracts that protect it:
- Cloudflare, Inc.: hosting of the website and of our server, anti-spam check and delivery of contact form messages;
- Groq, Inc.: AI model for Pro analyses;
- Paddle.com: Merchant of Record for payments, subscriptions, invoices and refunds;
- professional advisers, such as our accountant, and authorities where the law requires it.
We do not sell personal data and do not use it for advertising.
5. International transfers
Some providers process data outside the European Economic Area, for example in the United States. In those cases transfers rely on an adequacy decision, such as the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
6. Your rights
Under the GDPR you can ask to access, correct, delete, restrict or port your personal data, and you can object to processing based on legitimate interest. Write to info@quotedby.io: we answer within one month. You can also lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).
7. Security
We use encrypted connections, keep stored data to the minimum described above and limit access to it. The Groq key and other secrets stay on our server and are never included in the extension.
8. Chrome Web Store
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
9. Children
QuotedBy is a professional tool and is not intended for children under 16.
10. Changes
We may update this policy. The new version will be published on this page with its date.