Privacy policy

Quickie is a customer-relationship tool for UK window, gutter and pressure-washing businesses. In this policy “we” means Quickie, and “you” means the account holder using the service.

• Account details — your name, your email address and how you sign in: a password if you set one (we keep only a hash of it, never the password itself), passkeys, a linked sign-in account, and whether two-factor authentication is on.
• Business data you enter — contacts, leads, jobs, quotes, invoices, payments, expenses, notes and photos you add to run your round.
• Bank data — if you connect a bank account or upload a statement: account names and numbers, balances, each transaction's date, amount and description, and any receipts you attach.
• Usage data — analytics about how the app is used, so we can improve it.
• Technical data — your browser type, device and IP address, collected automatically to keep the service secure and working.

• To provide the service — store and display your CRM data, send sign-in and account emails, and deliver the reminders and reports you switch on.
• To take card payments on your invoices — your customers pay on Stripe's own page; we never see or store card details.
• To improve and secure the product — diagnose problems, prevent abuse and understand which features help most.
• To contact you about your account — important service messages and, only if you opt in, product updates.

You control the contact details and records you add about your own customers. You are the data controller for that information and are responsible for having a lawful basis to store it; we process it on your behalf to provide the service.

A bank feed is read-only: Quickie can read the accounts you connect through TrueLayer but cannot move money. Disconnecting a bank stops the feed and asks TrueLayer to end its access.

Quickie can suggest categories for your bank lines and write a summary of a month's figures using AI from OpenAI. It is off until the business owner ticks “Use AI to suggest categories and write monthly summaries” in Settings → Finance, and even then nothing is sent until you ask.

• “Suggest categories with AI” sends OpenAI your business name, whether you are VAT registered, your list of categories, and up to 100 unexplained lines from your business accounts — each line's date, amount, currency and description as your bank wrote it, which often names the person or company paid. Lines in accounts marked personal are never sent.
• “Write this month's summary” sends OpenAI that month's figures: income, costs and profit, the five largest cost categories, last month's income and profit, money in and out, your budget's name and any categories over budget, up to ten bills due with each supplier's name, amount and due date, the total your customers owe, and how many lines are still to explain. It sends no bank lines and no customer names.
• Receipts, attachments and photos are never sent to OpenAI. Its suggestions wait for your approval.

The Quickie marketplace (in beta) lets people find and book local professionals. If you use it as a customer, we keep your name, email address, the postcode and details of each job you ask about, any photos you add, your messages, and — if you give them — your address and phone number.

• A professional sees your name, the job's details and its postcode when you ask. Your address, phone number and email address are shared with them only once you agree the work (accept a quote or book a time) — and they become a customer record in that business's Quickie account, which that business controls.
• Messages are checked automatically as they're sent, to keep the marketplace safe: contact details are hidden from the other side until the work is agreed, and a message with the hallmarks of a scam or abuse may be held for a moderator. Reports and moderators' decisions are kept as a record.
• Reviews you write are public on the professional's profile, with your name.
• If AI help is switched on and you use it, the conversation (with contact details removed) is sent to OpenAI to draft or polish a message or summarise the thread. A flagged or reported message may be read by OpenAI as a first check before a person decides.
• Card payments for marketplace work are taken by Stripe; Quickie never sees card details.

To help customers find professionals who aren't on Quickie yet, Quickie searches the web for local trades and reads businesses' own public websites with a crawler that identifies itself as QuickieBot. It respects robots.txt — add User-agent: QuickieBot with Disallow: / to keep it away.

From a business's website we keep what it says publicly about the business — its name, trades, area, services and prices, and up to four of its pictures — to draft a listing for our team to check, and the business's published contact email and phone number, which are used only to invite the business to claim the listing and are never shown on it. Our basis is legitimate interest: helping customers find local services, and businesses be found.

A business we invite gets one email, and at most one reminder. Every email has a link to stop: it takes the listing down, and we never email that address or domain again. A business can also ask us to remove everything we hold about it.

We don't sell your data. We share it only with the providers needed to run the service, each receiving only what its job needs. This list follows how Quickie is set up: a provider appears here when Quickie is configured to use it.

• Vercel — hosts Quickie and runs its scheduled jobs. Everything you and your customers send to Quickie passes through it, with the IP address and browser details every web request carries.
• Neon — stores Quickie's database: everything this policy describes, including the photos, receipts and attachments you add.
• Brevo — sends Quickie's emails. It receives each recipient's email address and the email: sign-in links, password resets, security notices (such as a passkey being added) and team invitations; and, for your customers, the booking messages, quotes and invoices (with their PDFs), receipts, reminders and Direct Debit invitations you send. On the marketplace, when a customer or a professional sends a message, the other side is emailed the message as they may read it in Quickie, with the sender's name and what the request is.
• Stripe — takes card payments on your invoices and bills Quickie's own plans. For an invoice it receives your business name, the invoice's title and amount, and a reference to the invoice; your customer enters their card details on Stripe's own page, and Quickie never sees them. For your plan it receives your business's name. On the marketplace, a professional who sets up payouts gives Stripe their own business and bank details on Stripe's pages; a customer's card payment goes to that professional's Stripe account, and Stripe receives the request's reference and the customer's email address.
• TrueLayer — connects your bank accounts to Quickie, read-only, when you choose to. You sign in to your bank on its own pages, so Quickie never sees your bank login. It sends Quickie, for the accounts you pick, their names, sort codes and account numbers, card names and partial card numbers, balances, and each transaction's date, amount, description, merchant and category. Quickie sends it only the permission you gave and the dates it wants.
• OpenAI — the AI provider, only if you switch on AI assist and only when you ask. What it receives is set out under “Your books: bank feeds and AI assist” above and under “The marketplace” below.
• Serper — runs web searches for the marketplace. It receives what a customer typed when they choose to search the web, with the trade and postcode area — never who they are — and the trades and towns Quickie searches to find businesses to invite.
• PostHog — product analytics. From the browser it receives the address of each page opened in Quickie and the page before it, what is clicked and the words on it, errors, and browser and device details. The private part of your customers' links is removed first, so it can see that a quote, invoice, statement or account page was opened but not which one, and cannot open it; sign-in, password-reset and verification codes, email addresses and search terms are removed from addresses too. It does not record sessions. From our servers it receives events such as a contact or job being added, tagged with an internal account id and your organisation's id; job events also carry the price and service, and none carry names or email addresses.
• postcodes.io — turns your customers' postcodes into map positions for route planning. It receives the postcode only.
• Google Maps Platform — suggests addresses as you type one into a contact. It receives what you type in the address box.

Access to your data is scoped to your organisation, transmitted over encrypted connections, and protected by industry-standard safeguards. No system is perfectly secure, but we take protecting your data seriously.

Under UK data-protection law you can request access to, correction of, or deletion of your personal data, and object to certain processing. You can export your contacts at any time from the app, and deleting your account removes your data. To make a request, contact us using the details below.

We keep your data for as long as your account is active. When you close your account we delete or anonymise your personal data, except where we must keep records to meet legal obligations.

Questions about this policy or your data? Email us at info@quickie.cx.