Privacy Policy
Effective: .
Who we are
QuoteLlama is a managed-service-provider quoting tool operated by Llama Monkey ("we," "us"). This policy explains what data we collect, how we use it, who we share it with, and how long we keep it.
Data we collect
We collect three categories of data:
- Account data — email, name, organization, sign-in events.
- Customer + quote data — pricing books, client profiles, opportunities, quotes, signed PDFs.
- Recipient data — the email + 6-digit codes for magic-link recipient access (encrypted at rest).
How we use it
To provide the service: render your quotes, route signature flows, sync with your PSA on your authorization, and send you product email.
Data sharing
We share data with the third-party processors strictly required to operate the service: Stripe (billing), Postmark (email), Cloudflare (storage / DNS), Twilio (SMS, when you've opted in), PandaDocs (e-signature, when you've initiated a signature flow), HaloPSA (PSA sync, when you've connected your PSA). We do not sell your data. We do not share with advertisers.
Tenant isolation
Every record in QuoteLlama is scoped to an organization_id. We enforce isolation at the controller layer (every tenant-private query hangs off current_organization) and audit it with multi-tenancy isolation specs in our test suite. Encryption keys are operator-controlled.
Retention
Account data: retained while your account is active and for 30 days after deletion. Quote artifacts: retained per your contract term. Audit logs: retained indefinitely (per operator policy).
Your rights
Email [email protected] to request access, correction, deletion, or export of your data. We respond within 30 days.
Changes
We'll notify you in-app + by email at least 14 days before any material change to this policy. Diff history is tracked in our public source repository.