Privacy Policy

This policy explains how InstaQuote IQ (“we”, “us”) collects and uses personal data when you use our app and website. We are the data controller for your account and for how the service operates. For the data you enter about your own customers, you are the controller and we act as your processor (see “Your customers’ data”).

Controller: InstaQuote Ltd (Company No. 17224118), 77 Falstaff Road, Coventry, CV4 9RX, United Kingdom. ICO registration: ZC153382. Contact: privacy@getinstaquote.com.

What we collect

• Account & business details — your name, email, company name, trade, logo, VAT number, rate card and settings.
• Content you create — quotes, invoices, jobs, expenses, mileage, photos/recordings captured with the scanner, and the customer details you enter.
• Payment data — card payments are handled by Stripe; we receive payment status and references, not full card numbers.
• Bank transaction data — if you connect a bank via Open Banking, we receive read-only transaction information through TrueLayer.
• Tax data — VAT figures you choose to submit to HMRC through the app.
• Technical data — log, device and usage information needed to run and secure the service.

How we use it

• To provide the service — quoting, invoicing, scheduling, payments, accounting and tax features.
• To automate your back office (reminders, recurring invoices, bank reconciliation) where you’ve enabled it.
• To process payments and your subscription, and to provide support.
• To keep the service secure and meet our legal obligations.

Our legal bases are performance of our contract with you, your consent (e.g. connecting your bank or calendar), our legitimate interests in running and securing the service, and compliance with legal obligations.

Service providers we share data with

• Supabase / Lovable — application hosting and database.
• Stripe — payment processing.
• TrueLayer — FCA-regulated Open Banking provider for the bank feed.
• HMRC — where you submit VAT returns through Making Tax Digital.
• Resend — sending transactional emails.
• Google — calendar integration, if you connect it.
• Anthropic — AI processing of scanner inputs, receipts and bank transaction descriptions. Inputs are processed to return a result and are not used to train models.

Some providers may process data outside the UK/EEA; where they do, appropriate safeguards (such as UK/EU standard contractual clauses) are in place.

Your customers’ data

When you store details about your own customers in InstaQuote IQ, you are the controller of that data and we process it on your behalf to provide the service. You are responsible for having a lawful basis to enter it.

Retention

We keep your data for as long as your account is active and as needed to provide the service and meet legal obligations (financial and tax records are typically retained for at least six years). You can delete your account at any time from Settings — this immediately removes your data from InstaQuote, except records we are legally required to keep (such as financial and tax records) for the retention period above.

Your rights

You have rights to access, correct, delete, restrict, object to, and port your personal data. To exercise them, email privacy@getinstaquote.com. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

Security

We use encryption in transit, access controls and database row-level security so each account only sees its own data. No system is perfectly secure, but we work to protect your information.

Changes

We may update this policy and will change the “last updated” date above. Significant changes will be notified in-app or by email.