Privacy notice
This notice describes how Quotara processes data. The operating organization (your employer or service provider) is the controller and must complete the contact details and legal basis below.
What we process
Account data (name, email, sign-in events), client master data, client requests and supporting documents uploaded by staff, and the offers created from them.
AI processing
To draft offers, text extracted from documents is sent to a large-language-model provider via OpenRouter. Before sending, names, contact details, dates, addresses, bank and insurance identifiers are replaced by placeholders and restored only inside Quotara. Automated masking is not perfect; highly sensitive documents should be summarised instead. Only providers that do not retain or train on data are used.
Security & retention
Data is stored in the EU, encrypted in transit and at rest. Uploaded files are virus-scanned. Source documents can be deleted automatically after a configurable period; clients can be erased on request (Art. 17 GDPR).
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with a supervisory authority. Contact the controller: [to be completed by the operator].