Quote Desk LLC Privacy Policy

Quote Desk LLC operates QuoteDesk, a software service that helps mortgage professionals import lead emails, organize lead records, prepare preliminary quote packages, and export handoffs. This policy applies when you use QuoteDesk with client or borrower data.

We aim to collect only information needed to provide, secure, bill, support, and improve the service. If this policy conflicts with a signed agreement between Quote Desk LLC and a customer, the signed agreement controls for that customer.

Account information includes name, email address, profile details, company name, title, phone number, NMLS IDs when provided, connected account identifiers, authentication session records, and saved user preferences.

Lead and borrower workflow data may include Gmail or Outlook message metadata and content that matches your intake rules, borrower names, contact details, property addresses, loan purpose, purchase or refinance details, quote assumptions, generated quote outputs, PDFs, notes, reviewed message artifacts, export records, and related activity logs.

Billing information is processed primarily by Stripe. QuoteDesk stores Stripe customer IDs, subscription IDs, subscription status, price IDs, seat quantities, billing portal access logs, and checkout metadata. We do not intentionally store full card numbers.

Technical and support information may include device and browser details, IP-derived security metadata, error logs, audit logs, file upload metadata, support messages, and usage or processing counters.

We use information to authenticate users, provide lead intake, generate workflow records, produce preliminary quote materials, render documents, prepare export handoffs, manage subscriptions, provide customer support, enforce usage limits, troubleshoot the service, prevent abuse, comply with law, and protect QuoteDesk and its users.

We may also use aggregated or de-identified information to understand product performance and improve the service. We do not use borrower lead data to sell advertising.

QuoteDesk uses Google OAuth for Gmail and Microsoft Entra ID with Microsoft Graph for Outlook. The app requests mailbox access so it can read messages that match your lead intake configuration, synchronize eligible messages, create lead records, send/reply to tracked conversations, and update read state in QuoteDesk.

You control the intake rules used to determine which messages are imported. OAuth tokens are stored server-side and encrypted at rest. You can disconnect access through your Google or Microsoft account controls or contact Quote Desk LLC for help.

QuoteDesk includes deterministic parsing by default. Optional AI lead parsing is enabled by default when the runtime feature is available, unless the user turns it off from account privacy settings. For company leads, the company AI privacy setting must also allow AI parsing.

When optional AI parsing is enabled, relevant lead text and structured context may be sent to OpenAI to help extract mortgage fields when deterministic parsing has missing or low-confidence data. Users can turn off optional AI parsing in settings.

QuoteDesk uses third-party providers to operate the service, including Google and Microsoft for identity and mailbox access, Stripe for billing and subscriptions, Vercel for hosting, queues, Blob storage, and deployment infrastructure, Resend for email delivery, OpenAI only for optional AI parsing, and database or observability providers used to run and secure the service.

These providers process information on our behalf or under their own applicable terms, depending on the service. We use them for product operations and do not authorize them to use customer lead data for their own advertising.

We may share information with service providers, with a customer or company administrator that manages the relevant account, at your direction, as part of support, to comply with law or legal process, to protect rights and safety, or in connection with a merger, financing, acquisition, or sale of assets.

Enterprise customers may manage company seats, billing permissions, vendor intake, shared lead assignment, company documents, audit events, and company-level settings. Users in a managed company can expect authorized company administrators to access company-controlled records.

Lead data is retained for 24 months by default unless a different retention setting, legal obligation, or customer instruction applies. Users can export or delete their own leads where the product provides those controls. Privacy-sensitive actions are audited with redacted metadata where practical.

We may retain billing, audit, security, backup, and legal records for longer when needed for accounting, dispute resolution, compliance, fraud prevention, or service integrity.

QuoteDesk uses administrative, technical, and organizational safeguards designed to protect information, including encrypted OAuth token storage, private storage for generated documents and uploaded assets, role-based company permissions, audit logging, subscription access checks, and production configuration checks.

No system can be guaranteed completely secure. Customers remain responsible for using strong account controls, limiting access to authorized users, and configuring Google, Microsoft, Stripe, and other connected accounts responsibly.

You may contact Quote Desk LLC to request access, correction, deletion, export, or restriction of personal information, subject to identity verification, legal exceptions, customer administration rights, and technical feasibility.

If you are a borrower or lead whose information was entered into QuoteDesk by a mortgage professional, we may refer your request to the QuoteDesk customer that controls the lead record.

Some U.S. state privacy laws provide rights to access, delete, correct, or opt out of certain uses of personal information. Quote Desk LLC does not sell borrower lead data or share it for cross-context behavioral advertising as those terms are commonly used in state privacy laws.

QuoteDesk supports privacy request workflows for applicable state privacy requests. We do not knowingly collect information from children under 13, and the service is not intended for children.

Contact: Quote Desk LLC, a Michigan domestic limited liability company, Entity ID 900209967, admin@quotedesk.app, https://quotedesk.app, 313-717-2424. Registered agent contact: Jeff Valentic. Privacy requests and legal notices may be sent to admin@quotedesk.app. Support is available Monday through Friday, 9:00 a.m. to 5:00 p.m. Eastern Time. Quote Desk LLC may take up to 5 business days to respond to emails and return calls.

We may update this Privacy Policy from time to time. The version, effective date, and last updated date at the top of the policy show the current version. Material updates may require renewed acceptance before checkout or continued use.