Privacy Policy
Effective date: September 29, 2026
Policies and page contents
1. Who operates QuoteRecon
LUNE PC FZ LLC operates QuoteRecon at https://quoterecon.com. Our registered address is VUNE2207, Compass Building, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Send privacy and support requests to hello@quoterecon.com.
2. Information we process
Account information includes your email address, display name, account identifiers, authentication information and account dates. The login system manages password authentication and recovery. Support messages contain the contact details and information you choose to provide.
Uploaded reference documents and supplier quotations can contain names, contact details, commercial information and other personal information. We process original files and filenames, document metadata, content fingerprints, extracted spreadsheet cells and PDF text, normalized items, comparison results, source evidence and saved reports.
We also process usage history and allowance events, subscription status, billing cadence and dates, provider customer and subscription identifiers, and billing-event metadata. We do not receive or store complete payment-card numbers through QuoteRecon checkout. Technical logs may contain network, request, account, device or error information needed to operate and protect the service.
If you initiate Review with AI, we process selected structured findings, QuoteRecon-calculated differences and classifications, source references and limited relevant excerpts from your documents. The selected material may contain personal data or confidential commercial information. We also process a versioned first-use acknowledgement, request status, OpenAI request identifier, token usage and estimated cost, a validated explanation saved automatically and any edited clarification draft you explicitly choose to save.
3. Why we use information
We use information to create and protect accounts, prepare and compare documents, save and export reports, provide source evidence, enforce usage limits, identify exact source-pair reuse, synchronize subscriptions, provide support, prevent misuse and investigate service, security or payment issues. We may also process limited information to comply with a specific legal or accounting obligation.
You or your organization must be authorized to provide the documents and personal information you upload. Do not include unnecessary sensitive information. Organizations remain responsible for their own obligations when they decide why personal information in a document is submitted to QuoteRecon.
We use the selected material to provide the AI explanation or editable supplier clarification you request, to enforce the separate PRO AI allowance and spending controls, and to investigate failed or uncertain requests. Your first-use acknowledgement records your instruction to start this optional processing. It does not itself establish a lawful basis for every other person whose data appears in an uploaded document. You or your organization must have authority to provide the documents and instruct this processing.
4. Document processing and storage
PDF and spreadsheet extraction and the normal comparison workflow use software libraries in QuoteRecon’s hosting environment. The current normal comparison workflow does not send document contents to an external AI or document-processing provider. Document contents are not sent to Lemon Squeezy for checkout or subscription synchronization.
Original documents are kept in private application storage under randomized names and outside the public WordPress Media Library. Reports and evidence are limited to the account that owns them and are not public share links. These descriptions do not promise encryption at rest or that all processing occurs in one country.
The normal document extraction, comparison and revision workflows do not send document contents to an external AI provider. When an eligible user explicitly starts Review with AI after the first-use disclosure, QuoteRecon sends only the bounded selected context to OpenAI through its Responses API; it does not send the complete uploaded files through this feature. The request uses store:false and background:false. OpenAI states that API inputs and outputs are not used to train its models by default unless the account opts in. OpenAI’s default abuse-monitoring logs may contain content for up to 30 days and longer when required by law or reasonably necessary to protect its services or others. store:false does not remove those logs.
5. Service providers and disclosures
We use service providers where needed for hosting and infrastructure, email and support communications, payment and subscription services, security and other essential operations. AEserver supplies the current hosting environment. Cloudflare provides visitor analytics for the public website. Lemon Squeezy supplies hosted checkout and billing portal services as merchant of record. The provider may receive account identity, purchase selection and transaction information needed to complete and manage a subscription. QuoteRecon receives subscription and payment-status metadata.
Providers process information under their own service arrangements and may use subprocessors. We may also disclose information when required by law, to protect customers or the service, or to handle an authorized support or security matter. Access to document contents for support should be limited to what the task requires.
OpenAI is the external provider for this optional processing. Its applicable Services Agreement, Data Processing Addendum, current subprocessor list and account-specific settings must be checked before the feature is activated. OpenAI and its subprocessors may process the selected data outside the United Arab Emirates. We do not claim UAE-only processing, zero provider retention or a provider-side deletion right beyond the verified account terms.
6. International processing
QuoteRecon serves customers worldwide. Hosting, payment, email, support, security and other necessary providers or their subprocessors may process information in more than one country. The locations and safeguards that apply depend on the provider and service involved. We assess applicable transfer and privacy requirements and update this notice when verified provider arrangements materially change.
Optional AI requests can involve international processing by OpenAI and its subprocessors. Before activating this feature, we must verify the applicable contracting entity, processing terms, transfer mechanism and any safeguards required for QuoteRecon’s customers and the data submitted. A first-use account acknowledgement is not a substitute for those requirements.
7. Retention and deletion
Original files, extracted information, comparisons and saved reports are retained to provide ongoing access to the service. Automatic document and report expiry is not currently implemented. Cancelling a subscription does not delete this information.
Contact hello@quoterecon.com to request account closure or deletion. We verify the request before an authorized administrator processes it. There is no public self-service deletion interface. The controlled process removes active application originals, extracted information, results, evidence, fingerprints, usage records and customer account information within its scope.
Account deletion and subscription cancellation are separate. An active or unresolved subscription must be handled separately. Limited billing records may be retained when justified for a payment, refund, chargeback, reconciliation, accounting or legal purpose and are assigned a review date. We do not retain document contents or fingerprints merely to preserve comparison allowances.
Backups, technical logs, support messages and records independently held by service providers may follow separate retention and restoration procedures. A deletion request does not necessarily remove every backup copy immediately. If deleted information is restored from backup, the relevant deletion decision must be reapplied. We do not describe an incomplete deletion operation as complete.
Validated explanations are saved automatically. Edited supplier clarification drafts are saved only when you choose Save draft. They remain readable while the associated report and account remain available, including after PRO access expires; new generations and redrafts require current eligible PRO access. QuoteRecon does not currently offer an individual report-deletion control. When an associated report is removed through an authorized process, its saved AI content is removed. Controlled account deletion includes applicable AI content, requests and confirmations; cancellation alone does not delete them.
QuoteRecon has proposed, but has not implemented as automatic deletion deadlines, operational review targets of 13 months after the request month closes for completed AI request records, up to 13 months after supersession or withdrawal for eligible confirmation records, and 24 months after period end for aggregate budget records. Indeterminate requests remain until reconciled. A request record linked to a saved output cannot currently be purged in isolation. Automatic purging remains disabled while these links, justified billing, reconciliation, security and legal exceptions, and AEserver backup and log periods are reviewed. A deletion request does not necessarily remove backup copies immediately. Provider-held data follows OpenAI’s separate applicable retention terms and account controls.
8. Security
We use measures designed to protect information, including authenticated access, owner-scoped reports and documents, private original-file storage, server-side authorization and restricted administrative workflows. No service can be guaranteed completely secure. Protect your login credentials and report suspected misuse to hello@quoterecon.com.
9. Cookies and appearance
QuoteRecon uses necessary authentication and session technologies. Your Light, Dark or System appearance preference is stored in your browser under quoterecon-theme. The Cookie Policy explains these technologies and Lemon Squeezy’s separate hosted checkout.
10. Your requests and rights
Depending on the law that applies, you may have rights to request information, access, correction, deletion, restriction, objection, portability or withdrawal of consent where processing relies on consent. Send a request to hello@quoterecon.com. We verify identity proportionately, consider applicable exceptions and may retain limited information where legally justified. You may also raise a concern with a competent authority where applicable.
AI explanations do not make eligibility, billing, matching, classification or pricing decisions about you and do not alter QuoteRecon’s authoritative results. Contact us using the address above to exercise rights that apply to your information; we will assess identity, legal exceptions and any justified retention.
11. Changes and contact
This policy takes effect on the date shown above. We will communicate material changes appropriately where required. Contact LUNE PC FZ LLC at hello@quoterecon.com with privacy questions.

