Privacy Policy
Effective date: April 5, 2026
ZunoQuote, Inc. ("ZunoQuote", "we", "us") operates the ZunoQuote mobile application and website (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.
By using the Service you agree to this Policy. If you do not agree, do not use the Service.
1. Information We Collect
1.1 Information you provide directly
- Account registration: email address, full name, and password (stored as a salted hash). You may alternatively register using Google Sign-In or Apple Sign-In, in which case we receive your name and email from that provider.
- Quote uploads: the document or image you upload (PDF, photo, or screenshot of a contractor quote), together with any supplemental details you enter — trade type, job description, ZIP code, property type, and urgency level.
- Feedback and outcomes: star ratings, free-text feedback, self-reported savings amounts, and cancellation reasons you submit after reviewing a report.
- Profile updates: changes to your display name.
- Support contacts: messages you send to our support team.
1.2 Information collected automatically
- Device push token: collected via Firebase Cloud Messaging (FCM) to deliver in-app status notifications about your quote analysis.
- Authentication tokens: short-lived access tokens and hashed refresh tokens stored securely on your device (iOS Keychain / Android EncryptedSharedPreferences) and our servers.
- Standard server logs: IP address, request timestamps, HTTP method, and response codes when you call our API. Logs are retained for 30 days.
1.3 Information we do NOT collect
- We do not use advertising SDKs, marketing analytics SDKs (e.g. Amplitude, Mixpanel, Google Analytics), or crash-reporting SDKs (e.g. Crashlytics, Sentry).
- We do not collect precise geolocation. ZIP code is entered by you and is used solely for benchmark price matching.
- We do not access your camera roll except when you explicitly choose a file to upload.
2. How We Use Your Information
- To provide the Service: process uploaded quote documents, run OCR and AI price-benchmark analysis, and return a written report.
- Account management: authenticate you, process payments, manage your credit balance and purchase history.
- Notifications: send push notifications about your analysis status and important account events (no promotional push without explicit consent).
- Transactional email: one-time passcodes (OTPs), account verification, password resets, and receipts delivered via AWS Simple Email Service (SES).
- Service improvement: aggregated and de-identified usage signals (e.g. which job categories are submitted most) to improve benchmark accuracy. No individual user data is used for model training without explicit consent.
- Safety and fraud prevention: detecting duplicate or fraudulent submissions, enforcing rate limits, and protecting the integrity of the platform.
- Legal compliance: responding to lawful orders, court processes, or as otherwise required by applicable law.
3. How We Share Your Information
We do not sell your personal information. We share it only as described below:
| Third Party | Purpose | Data Shared |
|---|---|---|
| AWS S3 (Amazon Web Services) | Secure storage of uploaded documents | Uploaded file; keyed by a random UUID path that includes your user ID |
| AWS Textract (Amazon Web Services) | Optical character recognition (OCR) — extracts text from uploaded PDFs and images | Binary content of your uploaded document |
| OpenAI | AI-assisted OCR fallback and price-context inference | Binary or text content of uploaded document; no account identifiers are sent |
| AWS SES (Amazon Web Services) | Transactional email delivery (OTPs, receipts) | Your email address and message content |
| Firebase (Google) | Push notification delivery via FCM | FCM device token; notification payload (job status only) |
| Apple (iOS only) | In-App Purchase payment processing | Handled natively by iOS; we receive only a transaction ID and SKU confirmation |
| Google (Android only) | Google Play Billing payment processing | Handled natively by Android; we receive only a transaction ID and SKU confirmation |
| Stripe | Web checkout payment processing | Email, payment card details (processed directly by Stripe; ZunoQuote never receives raw card numbers) |
All sub-processors are bound by appropriate data processing agreements and privacy obligations.
4. Document Content and AI Processing
When you upload a quote document, its content (which may include a contractor's name, address, phone number, license number, and pricing) is transmitted to AWS Textract and/or OpenAI for OCR and analysis. This processing is necessary to provide the Service. The extracted text is stored alongside your quote record and associated only with your account.
We do not share extracted text with other users. We do not use the content of your uploaded documents to train third-party AI models.
5. Data Retention
- Account data: retained for the life of your account plus 30 days after deletion.
- Uploaded documents (S3): retained under our standard policy (approximately 12 months) or deleted immediately upon your explicit deletion request.
- Extracted text and analysis results: retained for the life of your account to power your history view.
- Payment records: retained for 7 years as required by US tax and accounting rules.
- Server logs: 30 days.
- Authentication OTPs and reset tokens: expire automatically (typically 10–15 minutes) and their hashes are cleared on use.
6. Your Rights and Choices
- Access: you may view all quotes and reports associated with your account through the app's History screen.
- Correction: you may update your name at any time from the Profile screen.
- Deletion: you may delete your account from the Profile screen at any time. This removes your account record, queues deletion of stored documents from S3, and anonymises analysis records. Payment records required for legal/tax purposes are excluded.
- Push notifications: you can withdraw consent for push notifications at any time through your device's notification settings.
- Data portability and additional requests: contact us at privacy@zunoquote.com.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale (we do not sell data). Contact us at the address below to exercise these rights.
7. Security
We use industry-standard safeguards including TLS encryption in transit, AES-256 encryption at rest for stored documents, bcrypt-hashed passwords, and short-lived JWT access tokens combined with hashed refresh tokens. Access to production systems is restricted to authorised personnel. However, no method of transmission over the internet is 100% secure.
8. Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it promptly.
9. Links to Third-Party Sites
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
10. Changes to This Policy
We may update this Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where required by law, by sending an in-app or email notification. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.
11. Contact Us
For privacy-related questions, requests, or concerns:
ZunoQuote, Inc.Email: privacy@zunoquote.com
Website: zunoquote.com