Privacy Policy

This Privacy Policy explains what information Quota collects, how we use it, who we share it with, and the rights you have over your data. Quota is operated by Adrian Hessen as a sole proprietorship based in Maryland.

Information We Collect

We collect three categories of information:

Account Information

• Email address (required to create an account)
• Name and job title (if provided)
• Authentication credentials (passwords are never stored in plaintext)
• Subscription and billing status, plan tier, and credit balance

Prospect and Campaign Data

• Information about the companies and contacts you research, including company names, website domains, employee counts, current vendors, contact names, email addresses, phone numbers, and job titles
• Notes, custom fields, and tags you add to accounts
• AI-generated outreach campaigns, scripts, briefs, and research summaries created for your account
• Your activity within the service, including which tasks you completed, skipped, or refined
• Chat conversations with the Quota AI assistant

Payment Information

Payment processing is handled entirely by Stripe. Quota does not receive or store your credit card number, expiration date, or CVV. We receive limited transaction metadata from Stripe (transaction status, last four digits of card, payment method type) to maintain billing records.

How We Use Your Information

We use the information we collect to:

• Provide and operate the Quota service
• Generate research, outreach campaigns, briefs, and other AI-powered content for your account
• Process payments and manage subscriptions
• Send transactional emails (account verification, billing notices, password resets, security alerts)
• Communicate with you about product updates, new features, and service changes
• Provide customer support
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

AI and Machine Learning

To generate research and campaigns, we transmit relevant prospect data (such as a company name or a contact's role) to Anthropic's Claude API and Google's Gemini API. These providers process the data ephemerally to generate a response and do not retain it for training purposes.

Third Parties We Share Data With

We share limited data with the following service providers, each of whom is contractually bound to use the data only to provide services to us:

We do not sell your personal information to third parties for advertising or marketing purposes. We do not share your data with advertising networks or data brokers.

Data Retention

We retain your data for as long as your account is active. If you cancel your subscription:

• Your account and data remain accessible in a read-only state for 30 days, during which you may reactivate by purchasing a new subscription
• After 30 days of cancellation without reactivation, your account data is permanently deleted
• Limited transaction records may be retained for tax, accounting, or legal compliance purposes

You may request deletion of your account at any time by emailing [email protected] from the email address associated with your account.

Data Security

We take reasonable measures to protect your data, including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Encrypted storage at our infrastructure providers
• Password hashing (we never store plaintext passwords)
• Access controls limiting who can view account data
• Webhook signature verification for all incoming Stripe events

No system is perfectly secure. While we work to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. Notify us immediately at [email protected] if you suspect unauthorized access.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated personal data
• Export a copy of your data in a structured format
• Opt out of marketing communications (transactional emails about your account cannot be opted out of while your account is active)

To exercise any of these rights, email [email protected] from your account email. We typically respond within 30 days.

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

• Know what categories of personal information we collect, the sources, and the purposes for which we use it
• Know whether we sell or share your personal information (we do not sell it; we share it only with the service providers listed above)
• Request deletion of your personal information, subject to legal exceptions
• Request correction of inaccurate personal information
• Opt out of the "sale" or "sharing" of personal information (Quota does not engage in either as defined under California law)
• Limit the use of sensitive personal information (Quota does not collect sensitive personal information as defined under California law)
• Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised your privacy rights

To exercise these rights, email [email protected] with the subject "California Privacy Request."

Children's Privacy

Quota is intended for use by professional adults. We do not knowingly collect personal information from anyone under 18 years of age. If we learn that we have collected personal information from someone under 18, we will delete that information promptly. If you believe a minor has provided us with personal information, contact us at [email protected].

International Users

Quota is operated from the United States. Our data storage and infrastructure providers may store and process your data in the United States or other countries. By using Quota, you consent to the transfer of your information to the United States and other jurisdictions which may have different data protection laws than your home country. If you are accessing the service from outside the United States, you are responsible for compliance with local laws.

Cookies and Tracking

Quota uses minimal browser storage to keep you logged in and to remember your preferences within the application. We do not use third-party advertising cookies, behavioral tracking pixels, or analytics tools that profile individual users for advertising purposes. Stripe may set its own cookies during checkout to process payments securely.

Email Communications

We send the following types of email:

• Transactional — account verification, password resets, billing receipts, and security alerts. These cannot be opted out of while your account is active.
• Product — service updates, new features, and announcements. You may opt out via the unsubscribe link in any product email.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to the address on your account at least 30 days before they take effect. Your continued use of the service after changes take effect constitutes acceptance of the updated Policy.

Contact

For questions about this Privacy Policy or to exercise any privacy rights, contact:

Adrian Hessen, doing business as Quota
21290 Middletown Rd
Freeland, MD 21053
United States
Email: [email protected]