Privacy Policy
QuotesBridge is a service that creates draft invoices in your Xero organisation from deals in your HubSpot account. It never approves, finalises or sends an invoice — that always happens in Xero, by you. QuotesBridge is currently in early access: this website takes waitlist sign-ups, and a small first group of teams uses the service itself.
This policy explains exactly what data we handle in each case, why, and how to have it deleted. We've tried to write it so you can actually read it.
1. What this website collects
Through this website, the only personal data we collect is:
| Data | Source | Why |
|---|---|---|
| Your email address (plus the optional "which tools do you use" field) | The waitlist form, when you submit it | To email you about early access to QuotesBridge. Nothing else — no newsletters you didn't ask for, and we don't share the list with anyone. |
| Usage analytics via Microsoft Clarity | Your browser, while you visit this site | To understand how visitors use the site (pages viewed, clicks, scrolling, session replays, device and browser information, and approximate location derived from your IP address) so we can improve it. |
Waitlist form submissions are processed and stored by our website host (Netlify). Microsoft Clarity is an analytics service provided by Microsoft; it uses cookies and similar technologies and processes data under Microsoft's privacy statement. If you'd rather not be included in analytics, most browsers and content blockers can block Clarity's script; the site works fine without it.
2. If you use the QuotesBridge service (early access)
When you're invited off the waitlist and connect your accounts, the service additionally handles:
- Your email address — to identify your account and reach you about the service.
- HubSpot and Xero OAuth tokens — issued by each platform when you connect through their official OAuth flows. We never receive or store your HubSpot or Xero login credentials; we store only the tokens the platforms issue, encrypted at rest.
- Deal data read from your HubSpot account — deal names, pipeline stages, line items (descriptions, quantities, prices) and client/company names attached to deals — used solely to build each draft invoice.
- Your sync configuration — the trigger stage and your product→revenue-account mapping.
- A sync log — deal, invoice reference, timestamp, status and any error, so the dashboard and re-sync work.
This business data belongs to you and your clients. We process it only to perform the sync you configured — creating draft invoices in your Xero organisation for your review.
3. What we do NOT do
- We do not sell or rent your data, or your clients' data, to anyone.
- We do not use your business data (deals, invoices, client names) for advertising, profiling or training machine-learning models.
- We do not read more than the sync needs. We do not access your Xero contacts' financial history, your bank feeds, or your HubSpot emails.
- We do not run advertising trackers. The only third-party analytics on this website is Microsoft Clarity, described above.
4. How long we keep data
- Waitlist email: kept until we invite you or you ask us to remove you — email jairosales@me.com and we'll delete it.
- OAuth tokens: deleted when you revoke QuotesBridge's access or your account is deleted.
- Deal/invoice sync data and logs: kept while your account is active so the dashboard and re-sync work; deleted with the account. Draft invoices already created in Xero are yours and remain in Xero.
- Analytics data: retained by Microsoft Clarity according to Microsoft's own retention periods.
5. Revoking access and deleting your data
To revoke QuotesBridge's access to your accounts: use the connected-apps settings in HubSpot or Xero themselves — each platform lets you revoke any connected app's access at any time. Revoking access stops the sync immediately.
To delete your QuotesBridge account or come off the waitlist: email jairosales@me.com from the address you signed up with. We'll confirm and delete your data per the retention list above.
6. Your rights
Depending on where you live, data protection law (such as the GDPR or UK GDPR) may give you rights to access, correct, export, restrict or delete your personal data, to object to certain processing, and to complain to your local supervisory authority. Write to jairosales@me.com and we'll respond within the legally required time.
If your clients exercise these rights about data contained in your deals or draft invoices, that request belongs with you as the controller of that data — but we'll help you fulfil it.
7. Security
OAuth tokens are encrypted at rest, connections to HubSpot and Xero use TLS, and access to production data is restricted to what operating the service requires. No method of storage or transmission is 100% secure, and we don't claim any certification we don't hold — but if we learn of a breach affecting your data, we will notify you without undue delay.
8. Children
QuotesBridge is a business tool and is not directed at anyone under 18.
9. Changes
If we change this policy in a way that matters, we'll email waitlist members and account holders before the change takes effect and update the date at the top.