Privacy policy
Last updated 6 October 2026. This policy explains what Quotely, operated by Cyber Nest, collects and why.
Who we are
Quotely is a quotation and request-for-quote app for Shopify stores, operated by Cyber Nest. For the quote requests and customer details you handle in Quotely, the merchant (the store owner) decides why the data is collected and we process it on the merchant’s behalf. For merchant accounts and billing we decide the purpose and are responsible for the data.
What we collect
- From the merchant’s Shopify store: the store name, domain, contact email, currency, time zone and plan; the Shopify user IDs of staff who open the app; product and variant details (titles, SKUs, prices, images) for the products used in quotes; and draft orders Quotely creates.
- From the merchant: settings, quote defaults, email templates, company details printed on quotations, an optional logo, pricing rules and team roles.
- From a store’s customers who send a quote request: name, email, company, phone, address, tax or registration number, the products and quantities requested, any message, answers to custom form fields and files they attach. Messages exchanged about a quote and the customer’s accept or decline decision are also stored.
- Technical data: limited operational logs and error reports. We remove request bodies, authorization headers and personal data from them where we can.
How we use it
- To provide Quotely: receive requests, prepare and send quotes, run the negotiation and create Shopify draft orders.
- To send emails on the merchant’s behalf, such as quote links, confirmations and notifications.
- To bill the merchant through Shopify and enforce plan limits.
- To keep the service secure, prevent abuse and fix faults.
- To comply with legal obligations.
We do not sell personal data, do not use customer data for advertising and do not use one store’s data for another store.
Optional AI assistance
On plans that include it, a merchant can ask Quotely for AI-written summaries, drafts and extracted requirements. When the merchant does this, the relevant request text and trusted quote details are sent to the configured AI provider (Anthropic or Google). Account identity, contact details and internal notes are not sent. AI output is only a suggestion for the merchant to review; it never sends a message or changes a price by itself. Nothing is sent to an AI provider unless the merchant uses an AI feature.
Who else handles data
We use these service providers to run Quotely:
- Shopify: store authentication, billing, products and draft orders.
- Our hosting provider: application servers and the database.
- Amazon Web Services (Simple Email Service): sending quote emails.
- Cloudflare (R2 storage): private storage for attachments, PDFs and logos.
- Anthropic or Google: optional AI assistance, as described above.
- Sentry: error reports with personal data removed, if enabled.
We share data with authorities only when the law requires it. If our business changes hands, merchant data may transfer to the successor under this policy.
Security
Data travels over HTTPS. Access tokens and queued emails are encrypted at rest, quote links use long random tokens that are stored only as hashes, uploaded files are kept private and scanned for malware before use, and each store’s data is separated from every other store’s. No system is perfectly secure; if we learn of a breach affecting your data we will notify the affected merchants as the law requires.
How long we keep data
- While a store has Quotely installed, we keep its quotes and history so merchants can rely on them.
- When a merchant uninstalls Quotely, Shopify later sends us a store-erasure request and we then delete the store’s data, including files and PDFs.
- When Shopify sends a customer erasure request, we remove that customer’s contact details, messages, files and queued emails.
- Encrypted backups are kept for a limited period, and deletions are applied again if a backup is restored.
Your rights
Customers of a store should contact that store to access, correct or delete their data; the store can act on it through Quotely and Shopify’s privacy tools. Depending on where you live you may also have the right to object to or restrict processing and to complain to your data protection authority. Contact us at [email protected] and we will help or pass your request to the right store.
International transfers
Our providers may process data outside your country. Where the law requires it, we rely on appropriate safeguards for such transfers.
Changes and contact
We will update this page when our practices change and revise the date above. Questions: [email protected].