Privacy Notice
Last updated: November 2, 2026
José Antonio López Arteaga, an individual with an address at Tonatiuh 101, Fracc. La Colonia, C.P. 42185, Mineral de la Reforma, Hidalgo, México ("qwoty"), is the controller of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties. You can contact us at hello@qwoty.me.
1. Data we process
If you have an account: name, email, phone, company and address (whatever you enter); the content you create (quotes, clients, taxes, logo and images); subscription data (plan and Stripe customer ID; we never store card numbers); and evidence of your acceptances (date, Terms version, IP address and browser). If you received a quote: the name, email and company the sender entered; whether you opened or answered it and, when answering, your IP address and browser. From any visitor: IP address and technical browser data in server logs, and the cookies described below. We do not process sensitive personal data.
2. Purposes
We use your data to: create and manage your account; generate your PDFs and public pages; email quotes on behalf of users; process payments, renewal notices and receipts; enforce plan limits; record acceptances of quotes and subscriptions; handle abuse reports and prevent fraud; keep the Service secure; and meet legal obligations (tax and consumer protection). All of these are necessary to provide the Service. We do not use your data for advertising, we do not build marketing profiles, and we do not sell or rent personal data. If we ever want to send you promotions, we will ask for your consent and you can withdraw it at any time.
3. Our users' clients
Users who enter their clients' data are responsible for it and must have informed them. qwoty processes it as a processor, only to provide the Service. If you received a quote, you can stop receiving emails from that sender with the link in the email itself, and you can exercise your rights by writing to hello@qwoty.me.
4. Service providers
We use providers that process data on our behalf: Supabase (database, authentication and files), Vercel (hosting), Stripe (payments), Resend (email delivery) and ExchangeRate-API (exchange rates; receives no personal data). If you accept optional cookies, Google (Tag Manager, Analytics and Ads) and Meta are added, receiving browsing data for measurement and advertising; if you decline, they receive nothing. These providers may store data on servers outside Mexico, mainly in the United States. We only share data with authorities when a law or a valid order requires it.
5. Cookies
Necessary cookies. Always on, because the Service does not work without them: session cookies that keep you signed in; the "locale" cookie that stores your language choice; and an entry in your browser's local storage recording the choice you made about optional cookies. Analytics and advertising cookies. These are set only if you accept them. They are loaded by Google Tag Manager and may include Google Analytics, Google Ads and Meta (Facebook and Instagram). They measure how the site is used and how well our advertising works, which means those third parties may recognise your browser on other sites. Your choice. Optional cookies start switched off and stay off if you do nothing: we use Google Consent Mode, which blocks them until you accept. You can accept or decline in the notice shown on arrival, and change your mind at any time through "Cookie preferences" at the bottom of any page. Declining does not limit any feature. If you accepted advertising cookies, your activity is tracked across sites for that purpose; if you did not, it is not. Fonts are served from our own domain either way.
6. Retention
We keep your data while your account is active. When you delete your account we immediately erase your profile, quotes, clients and files from our active systems; they may remain in our providers' backups until those rotate. We keep longer only what the law requires: subscription-consent records (at least 3 years), billing information (as long as tax laws require) and abuse reports. Plan history limits hide older quotes but do not delete them.
7. Your rights
You can access, rectify, delete or object to the processing of your data, and withdraw your consent or limit its use. You can make many of these changes yourself in Settings, including deleting your account. For any request write to hello@qwoty.me with your name, how to reply to you, a copy of your ID and a description of your request. We will reply within the time limits set by law.
8. Security
We protect your data with encryption in transit (TLS), encryption at rest at our providers, access controls and per-user data isolation. No system is infallible: if a breach significantly affects your rights, we will notify you without delay, as the law requires.
9. Minors
The Service is only for people 18 and older. We do not knowingly collect data from minors; if we find we have, we delete it.
10. Changes to this Notice
We will post any change on this page with its update date. For material changes, we will email registered users before they take effect.
11. Authority
If you believe your data protection rights were violated, you can go to Mexico's Secretaría Anticorrupción y Buen Gobierno, the authority for personal data held by private parties.
12. Users outside Mexico
If you live in California or another jurisdiction with its own privacy laws: we never sell your data for money. If you accept advertising cookies, our use of Google Ads and Meta does constitute "sharing for cross-context behavioral advertising" under the CCPA. You can withdraw that consent at any time through "Cookie preferences" at the bottom of any page, which is also how you exercise the right to opt out; if you decline, nothing is shared. For any other request about your data, write to hello@qwoty.me.