Privacy policy

The data controller is Import Menuiserie, a SAS with its registered office at 40 rue Corderie, 22200 Pommerit-le-Vicomte, France. For any question or to exercise your rights: contact@requot.io.

No data protection officer has been appointed: the activity falls under none of the cases in which the regulation requires one.

Your account

Name, email address, password hash, and your profile photo if you sign in with Google.

Your business

Company name, address, company number, telephone, email address, website, insurance, legal notices, logo.

Your customers

What you enter yourself: name, contact person, address, telephone, email address.

Your documents

The supplier quotes you upload, and the result of their reading.

Your quotes

Lines, quantities, purchase and sale prices, margins, taxes, totals, sending status.

Payment

Your customer and subscription identifiers at Stripe. No card number passes through us.

Technical

Your open sessions (device, IP address, last visit) and recent login attempts.

Providing the service

Performance of the contract: without your business, your rules and your documents, no quote can be produced.

Invoicing

Performance of the contract, and a legal obligation for the retention of accounting records.

Securing accounts

Legitimate interest: spotting bulk login attempts, showing you your connected devices.

Writing to you

Performance of the contract: address confirmation, password reset, reply to a message. No newsletter is sent.

Nothing is sold or rented. The providers below act on our behalf, each on one part of the service, and on our instructions only.

Vercel Inc. (United States)

Hosting of the site and of the uploaded files – supplier quotes, logo.

Supabase Inc. (Paris region)

Database: account, business, customers, quotes. It does not leave the European Union.

Anthropic PBC (United States)

Automated reading of the content of uploaded supplier quotes. The document is sent to it for that one operation only.

Stripe Payments Europe (Ireland)

Collection of subscription payments and invoicing.

Mailjet (France)

Sending of the service's emails, including the quotes addressed to your customers.

Google Ireland (Ireland)

Sign-in with Google, if you choose it. And Google Analytics, for audience measurement, only if you accept it in the banner.

Meta Platforms Ireland (Ireland)

The Meta pixel, which measures the effectiveness of our ads on Facebook and Instagram, only if you accept it in the banner.

Transfers to the United States are governed by the European Commission's standard contractual clauses.

Your account and its contents

For as long as the account exists. Closing it erases everything, immediately and with no recycle bin.

An open session

30 days, extended on each visit. You can sign out a device from your profile.

An address confirmation link

24 hours.

A new password link

1 hour.

Login attempts

A quarter of an hour, long enough to spot a brute-force attempt.

Invoices

Ten years, as required by French accounting law. They therefore survive the closure of the account.

The site uses two measurement tools, and only if you accept them in the banner that asks you: Google Analytics, to count visits, and the Meta pixel, to measure our ads. “Accept” authorises both; “Settings” lets you accept only one, or neither. Without an answer, or if you refuse, nothing is stored and nothing is sent, to Google or to Meta. You can change your mind by deleting the site's cookies: you will be asked again. The other cookies are necessary for the site to work.

requot_consent

Your answer to the banner, tool by tool, so you are not asked again. Six months, whatever your choice.

_ga, _ga_…

Google Analytics, only after your consent: a random identifier used to count visits and to know which pages are read. Thirteen months.

_fbp

The Meta pixel, only after your consent: a random identifier used to tell whether your visit comes from one of our ads. Three months.

requot_session

Keeps your session open. 30 days.

requot_market

Remembers the country you are visiting, so that your business is not created as French by default. One year.

requot_oauth_…

Three ten-minute cookies, for the duration of a round trip to Google.

The names, addresses and contact details of your own customers belong to you. You are their data controller; we are only the processor, within the meaning of article 28 of the General Data Protection Regulation (GDPR).

• We process them only to provide the service: drawing up a quote, sending it, keeping it in your account.
• We never use them on our own account, and disclose them to no one other than the providers listed in article 4.
• Our staff access them only when necessary – an outage to understand, a request from you – and access is restricted by the database itself.
• They are erased along with your account, or at your request.
• This document, together with the terms of use, serves as the data processing agreement between you and us.

It is up to you to inform your customers of this processing, and to have a legal basis for sending them a quote.

You have the right of access, rectification, erasure, portability, objection and restriction. Most can be exercised directly from your account: your profile corrects or deletes your account, “My business” corrects what is printed on your quotes, “Your customers” corrects your address book.

For anything else, write to contact@requot.io: we reply within one month. If you disagree with our answer, you can contact the data protection authority of your country, or the French Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

• Passwords are never stored in clear text, and cannot be recovered – only replaced.
• Exchanges with the site are encrypted end to end.
• The database isolates each account: a query cannot reach another account's data, even in the event of an application defect.
• Uploaded files live in private storage; the links that give access to them are signed and expire after five minutes.
• Your open sessions are visible in your profile, and can be revoked one by one.

This policy may change. A significant change will be announced to you by email, at your account's address. The terms of use form part of it.