Privacy Policy

1. Information We Collect

We may collect the following information:

Information you provide directly

• Name
• Email address
• Company name
• Account credentials
• RFQ content and related project information
• Vendor contact information you upload or enter
• Messages or support requests you send to us

Information collected automatically

• IP address
• Browser type
• Device information
• Usage data
• Log data
• Diagnostic and error information

Information from connected email providers

If you choose to connect a Gmail or Outlook account, we may receive and store information necessary to enable that connection and support sending email from your account, including:

• Your email address
• Provider account identifiers
• Access tokens and refresh tokens
• Connection status information
• Limited technical metadata required to support email sending

2. How We Use Information

We use information to:

• Create and manage your account
• Provide the Services
• Prepare and send RFQs and related communications
• Allow you to send emails from your connected Gmail or Outlook account
• Maintain connected email sessions
• Provide support and respond to inquiries
• Improve, troubleshoot, and secure the Services
• Detect and prevent fraud, abuse, and technical issues
• Comply with legal obligations
• Enforce our terms and policies

3. Connected Gmail and Outlook Accounts

If you connect Gmail or Outlook, MultiQuote uses the permissions you grant solely to provide the email features you request.

For connected email accounts, we use access only to:

• Send outbound RFQ emails and related user-initiated communications from your mailbox
• Maintain the connection so the feature continues to function until you disconnect it or revoke access
• Show connection status and sending results inside your account

MultiQuote does not read inbox or mailbox content except as technically necessary to support the specific sending workflow authorized by the user.

We do not use connected email access to sell data, build advertising profiles, or access broader mailbox data than is needed for the feature you enable.

If we ever introduce a feature that requires broader access than send-related functionality, we will request the appropriate permission and update this Privacy Policy as needed.

4. Google User Data

If you connect a Google account, MultiQuote's use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

Information received from Google APIs is used only to provide or improve user-facing features that are visible and meaningful to you. We do not use Google user data to:

• Sell data to third parties
• Serve advertisements
• Create advertising profiles
• Train generalized artificial intelligence or machine learning models unrelated to providing MultiQuote's user-facing features

5. Microsoft Account Data

If you connect a Microsoft account, we use Microsoft account and mailbox permissions only to provide the sending functionality you request within MultiQuote. We do not sell Microsoft-connected user data or use it for advertising purposes.

6. What We Store

We may store:

• Account profile information
• RFQ drafts and workflow records
• Vendor lists and contact information
• Access tokens and refresh tokens needed to maintain Gmail or Outlook connections
• Logs and diagnostics needed for reliability, security, and troubleshooting

For sent emails, we store metadata only and do not store full inbox or mailbox content as part of the normal sending workflow. The sent email metadata we store may include:

• recipientEmail — the recipient email address
• recipientName — the vendor contact name
• company — the vendor company name
• status — sending status such as PENDING, SENT, or FAILED
• sentAt — timestamp of successful send
• error — error message if sending failed
• deliveryProvider — GMAIL, OUTLOOK, or RESEND
• fromEmail — the from address used
• providerMessageId — the ID returned by the provider
• providerErrorCode — provider-specific error code on failure

7. How We Share Information

We do not sell your personal information or connected email data.

We may share information only:

• With service providers who help us operate the Services, such as hosting, database, infrastructure, authentication, and support vendors
• As needed to complete workflows you initiate, such as sending an RFQ email to a vendor
• When required by law, court order, subpoena, or other legal process
• To protect the rights, safety, and security of our users, our business, or others
• In connection with a merger, acquisition, financing, or sale of assets

Any service providers acting on our behalf may access information only as needed to provide services to us.

8. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the Services
• Maintain your account
• Keep connected-email functionality active
• Comply with legal obligations
• Resolve disputes
• Enforce agreements and policies

Refresh tokens and related credentials are retained only as long as needed to keep an authorized connection active, unless a longer retention period is required for legal, security, or fraud-prevention reasons.

9. Your Choices and Controls

You may:

• Update certain account information
• Disconnect your Gmail or Outlook account
• Revoke access through your Google or Microsoft account settings
• Request deletion of your account, subject to legal and operational retention requirements

If you disconnect a connected mailbox or revoke provider access, MultiQuote will no longer be able to send emails through that account unless you reconnect it.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. These measures may include encryption in transit, secure token storage, access controls, and logging.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Third-Party Services and Links

The Services may contain links to or integrations with third-party services, including Google, Microsoft, vendors, suppliers, and other external platforms. We are not responsible for the privacy practices of third parties, and we encourage you to review their policies separately.

12. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

13. International Users

If you access the Services from outside the United States, you understand that your information may be processed and stored in the United States or other jurisdictions where our service providers operate.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective Date above and may provide additional notice where appropriate. Your continued use of the Services after an update means the revised Privacy Policy applies.

15. Contact Us

If you have questions about this Privacy Policy or want to request account or data-related assistance, contact us at:

MultiQuote HQ
Email: admin@multiquoteHQ.com