QuoteProposal is a quotation and proposal tool operated by VeloCrew. This policy covers the marketing site, the product, and the read-only pages your customers open when you send them a quotation.
We have tried to write this in plain language. Where a section matters legally, it says what we actually do rather than reserving every right we could.
What we collect
Four categories, for four different reasons.
- Account data. Your name, email address, and either a password — stored only as an Argon2id hash, never in a form we can read — or a Google account identifier if you use Google Sign-In. We need this to know who you are and which workspace you belong to.
- Workspace data. Whatever you put into the product: your organisation and team members, and the customers, items, packages, templates, quotations and proposals you create. This is your material. We process it to provide the service and for nothing else — we do not mine it, train on it, or read it except when you ask us to help with a specific problem.
- Billing data. Your plan, subscription state and invoice history. Payments run through Razorpay, so card, UPI and net-banking credentials go directly to them and never touch our servers.
- Technical data. Ordinary server logs — IP address, browser user agent, the page or endpoint requested, and a timestamp. These exist to keep the service running and to investigate abuse, and are not used to build a profile of you.
We run no advertising pixels, no third-party analytics and no session recording. Nothing on this site tracks you across other sites.
Cookies
Three, all strictly necessary to keep you signed in. Two are httpOnly — a short-lived session cookie and a longer-lived refresh cookie, neither readable by page scripts — plus a CSRF token cookie that has to be readable by the browser to do its job. There are no advertising or tracking cookies, so there is no consent banner to dismiss.
Who else processes it
We do not sell personal data and we do not share it for anyone else’s marketing. We use a small number of processors to run the service:
- Razorpay — payment processing and subscription billing. They receive your billing contact details and handle payment credentials directly.
- MongoDB Atlas — the managed database the product runs on.
- Google — only if you choose Google Sign-In, and only to verify that the account is yours.
We also use OpenAI for an internal tool that suggests topics for our own blog. It receives no customer, workspace or account data, and is listed here only so the picture is complete.
Shared quotation links
When you send a quotation, we generate a link that opens without a login so your customer does not need an account. The link carries an unguessable token and the page is excluded from search engines — but anyone holding the link can read that document. Treat it the way you would an email attachment, and see security for detail.
How long we keep it
- While your account is open — account and workspace data are kept for as long as you use the service.
- After you close your account — workspace data is retained for 30 days so an accidental closure can be undone, then deleted. Ask us within that window and we will delete it sooner.
- Server logs — kept for 90 days, then discarded.
- Invoices and payment records — kept for eight years regardless of account closure, because Indian tax and companies law requires it.
Your rights
You can ask us to:
- tell you what personal data we hold about you, and why;
- correct anything inaccurate or incomplete;
- export your workspace data in a machine-readable form;
- delete your account and the data in it, subject to the retention above;
- withdraw consent where we relied on it — this may mean closing your account.
Write to privacy@velocrew.in and we will respond within 30 days. We may need to verify that you control the account before we act on a request.
Grievances
If you are unhappy with how we have handled your data or a request, you can escalate under India’s Digital Personal Data Protection Act, 2023 to our grievance officer at privacy@velocrew.in. If we cannot resolve it between us, you may approach the Data Protection Board of India.
Children
QuoteProposal is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.
International transfers
Our processors may handle data outside India. Where they do, we rely on their contractual commitments to protect it to the standard described here.
Changes
We will update the date at the top of this page when this policy changes, and tell account holders by email before any change that materially reduces your rights takes effect.