Privacy Policy
Last updated: August 2026
This policy describes how quoteairtight.com (“we”, “us”) collects, uses, and stores personal data. The Service is operated by a sole individual resident in Singapore. We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA).
1. What we collect
We collect the following information when you use the Service:
- Email address — collected when you sign in via magic link. Used to identify your account and send authentication emails.
- Quote text — the text you paste for analysis. Processed by our AI parsing step and then discarded after the validation session is complete. We do not retain raw quote text.
- Validation session data — the parsed scope, answered questions, scores, and report output for each validation. Retained to allow you to reopen past reports.
- Payment reference data — token purchase records (amount, date, product, order reference ID). Payment instrument details such as card numbers are handled entirely by Polar Software Inc. and never reach our systems.
- Analytics events — anonymised usage events (pages viewed, funnel steps, feature interactions) collected via PostHog. No quote content is included in analytics events.
2. Third-party processors
We use the following third-party services to operate the product:
- OpenAI — receives your quote text for AI-based parsing and extraction. OpenAI’s API data usage policy applies. We do not use the “data training” opt-in — quote content is not used to train OpenAI models.
- Polar Software Inc. (Polar) — merchant of record for all payments. Receives your payment details and email address at checkout. Their privacy policy governs data they collect.
- PostHog — product analytics. Receives anonymised usage events (not quote content). Data is processed in the EU (PostHog EU region).
- Railway — cloud hosting provider. Our PostgreSQL database and application are hosted on Railway infrastructure in the United States.
- Resend — transactional email. Receives your email address to deliver authentication (magic link) emails.
3. How we use your information
We use collected information to:
- Authenticate your account and send magic link emails
- Perform quote analysis and produce validation reports
- Track token balances and payment history
- Improve the accuracy of our risk rules over time using aggregated, anonymised session statistics
We do not sell your data to third parties or use your quote content to train AI models.
4. Cross-border data transfers
Your data is processed and stored in countries outside Singapore. Specifically: your account and session data are stored in the United States (Railway); analytics events are processed in the EU (PostHog); quote text is processed in the United States (OpenAI). By using the Service you consent to these transfers. We take reasonable steps to ensure processors maintain appropriate data protection standards.
5. Data retention
Validation records (parsed scope, answers, report output) are retained to allow you to reopen past reports. Your email address and account record are retained for as long as you have an active account. You may request deletion of your account and associated data at any time by contacting support@quoteairtight.com.
6. Your rights
Under the Singapore PDPA you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate personal data
- Withdraw consent to the collection or use of your personal data (note: withdrawal may affect your ability to use the Service)
- Request deletion of your account and associated data
To exercise any of these rights, contact us at support@quoteairtight.com. If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.
7. Cookies
We use a session cookie to maintain your signed-in state. PostHog sets a first-party analytics cookie to distinguish sessions. No advertising cookies or third-party behavioural tracking cookies are used.