Legal

Privacy Policy

Last updated: 30 May 2026 · Effective: 30 May 2026

Mind Scope Solutions FZC ("QuoteGen", "we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights under applicable data protection laws.

1. Who We Are

Data Controller: Mind Scope Solutions FZC, registered in the United Arab Emirates (Free Zone Company).

Contact: info@mindscopesolutionsfzc.com

When you store your clients' personal data in QuoteGen, you are the data controller for that data and we act as your data processor. This policy covers how we handle your data as our customer.

2. Data We Collect

Category	Examples	Purpose
Account data	Name, email, agency name, password (hashed)	Authentication, account management
Usage data	Pages visited, features used, quote activity, session duration	Product improvement, support
Quote content	Destination data, images, itineraries, pricing, client names entered by you	To provide the service
Payment data	Billing name, card last 4 digits, billing address	Subscription management (processed by Stripe)
Device & technical data	IP address, browser type, OS, timezone	Security, debugging
Communications	Support messages, emails sent to us	Customer support

3. Legal Basis for Processing

Contract performance — processing necessary to provide the QuoteGen service you've subscribed to
Legitimate interests — product analytics, security monitoring, fraud prevention
Legal obligation — retaining financial records as required by law
Consent — marketing emails (you can unsubscribe at any time)

4. How We Use Your Data

Provide, maintain, and improve the QuoteGen platform
Authenticate your account and keep it secure
Process subscription payments
Send service notifications (account activity, renewals, downtime)
Send product updates and marketing emails (with your consent)
Provide customer support
Comply with legal obligations

We do not sell your data to third parties. We do not use your quote content to train AI models without your explicit consent.

5. Data Sharing

We share data only with trusted service providers who process it on our behalf under data processing agreements:

Provider	Purpose	Location
Supabase	Database hosting & authentication	EU / UK
Railway	Backend infrastructure	EU
Stripe	Payment processing	EU / USA (SCCs in place)
Anthropic / OpenAI	AI features (Q AI)	USA (SCCs in place)
Google Fonts	Web fonts	USA (SCCs in place)

6. Cookies

QuoteGen uses the following cookies:

Essential cookies — authentication session tokens. Required for the platform to function. Cannot be disabled.
Analytics cookies — anonymous usage statistics to improve the product. You can opt out in your account settings.

We do not use advertising or tracking cookies.

7. Your Rights (UK GDPR)

👁 Access

Request a copy of all data we hold about you

✏ Correction

Ask us to correct inaccurate or incomplete data

🗑 Erasure

Request deletion of your account and data

🔒 Restriction

Ask us to limit how we process your data

📤 Portability

Receive your data in a machine-readable format

🚫 Objection

Object to processing based on legitimate interests

To exercise any right, email info@mindscopesolutionsfzc.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO.

8. Data Retention

Active accounts: Data retained for the duration of your subscription
Cancelled accounts: Data retained for 30 days then permanently deleted (except where required by law)
Financial records: Retained for 7 years as required by UK law
Support communications: Retained for 2 years

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

Encryption in transit (TLS 1.3) and at rest
Row-level security on all database tables
Access controls — staff access to production data is logged and restricted
Regular security reviews

10. International Transfers

Some of our service providers operate outside the UK/EEA. Where this occurs, we rely on UK adequacy decisions or Standard Contractual Clauses (SCCs) to ensure your data receives equivalent protection.

11. Changes to This Policy

We may update this policy periodically. We will notify you by email or in-app notice of material changes at least 14 days before they take effect. The "Last updated" date at the top of this page shows when changes were last made.

12. Contact & Complaints

For any privacy-related questions or to exercise your rights:

Email: info@mindscopesolutionsfzc.com
Supervisory authority: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, SK9 5AF