Privacy policy

Last updated: 12 May 2026

Mogul Investment Group Pty Ltd (ABN 20 612 504 408), trading as QuoteKit (“we”, “us”, “our”), operates the QuoteKit platform at quotekit.dev. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what personal information we collect, why we collect it, how we use and disclose it, and how you can access or correct it. It applies to all users of QuoteKit, including trade professionals (“tradies”) who create accounts and their customers who receive quotes and invoices.

1. Information we collect

1.1 Account and identity information

When you create a QuoteKit account, we collect:

• Your first name, last name, and email address
• Your Australian mobile phone number
• Authentication credentials (email one-time passcode, or via Google or Microsoft single sign-on)

1.2 Business information

To set up your trade profile, we collect:

• Business name, legal name, and Australian Business Number (ABN)
• Business address, phone number, and email
• Trade type and region
• Licence and insurance numbers
• Rate card details — pricing model, hourly/unit rates, callout fees, material markup, travel rates, and payment terms
• GST registration status
• Bank BSB and account number (for display on invoices)
• Business logo

1.3 Customer information

When you create a job in QuoteKit, you enter your customer’s details. This may include:

• Customer name, email address, phone number, and site address

You are responsible for ensuring you have any necessary consent to provide your customer’s personal information to us. We process your customers’ personal information solely on your behalf and in accordance with your instructions through the Service.

1.4 Job and media data

To generate quotes, you upload media files including:

• Video recordings of job sites
• Voice notes and audio recordings
• Photographs
• Site plans, builder’s plans, and PDF documents

We also store the quotes, invoices, and related documents that QuoteKit generates from this media.

1.5 Integration data

If you connect a third-party service (Xero, MYOB, or Google Drive), we store encrypted authentication tokens and basic connection metadata such as the connected email address, organisation name, and sync status. We do not store your third-party passwords.

1.6 Usage and technical data

We automatically collect:

• Activity logs — quote creation, sends, acceptances, and invoice events
• Technical metrics for performance monitoring and error diagnosis

We apply PII scrubbing to application logs. Mobile numbers and other personal identifiers are redacted before logging.

2. How we use your information

We use your personal information to:

• Provide the QuoteKit service — create and manage your account, generate AI-drafted quotes and invoices, and process your jobs
• Process media with AI — analyse your uploaded video, photos, voice notes, and documents to extract job scope and site details
• Generate quotes using AI — our AI agent drafts structured, priced quotes based on your rate card, the site assessment, and your past quoting patterns
• Sync with accounting software — push accepted quotes and invoices to your connected Xero or MYOB account
• Send communications — deliver quotes and invoices to your customers via email, and send you optional SMS notifications if you opt in
• Improve accuracy over time — each quote you accept teaches QuoteKit your preferences through a private knowledge base filtered to your account only
• Maintain security and integrity — enforce data isolation between accounts, detect errors, and prevent misuse

3. AI processing

QuoteKit uses artificial intelligence in the following ways:

• Media analysis — AI extracts site details from your uploaded files (video, photos, voice notes, plans)
• Quote generation — an AI agent generates draft quotes using your rate card and past job history
• Rate extraction — AI may extract rate information from documents you upload during onboarding

All AI processing occurs on cloud infrastructure hosted in Australia, using geo-restricted Australian inference endpoints. Safety guardrails are applied to all AI-generated content.

We do not use your data to train AI models. Your job data, media, and quotes are used solely to provide the QuoteKit service to you.

4. How we store and protect your information

• Location — your data is stored on cloud infrastructure in Australia (Sydney region). Some transactional email may be routed through US-based infrastructure for delivery
• Encryption — sensitive data, including bank account details and authentication tokens for third-party integrations, is encrypted at rest. All data in transit uses TLS encryption
• Access control — your data is isolated to your account. No other user can access your jobs, quotes, or profile data
• Sensitive data handling — bank account numbers are masked (only the last four digits are displayed). Sensitive fields are protected from unauthorised modification
• Infrastructure security — audit logging, threat detection, and least-privilege access controls are in place across all environments

5. Disclosure to third parties

We may disclose your personal information to:

• Cloud infrastructure provider — for hosting, compute, storage, AI processing, email delivery, and SMS delivery. Our provider processes data under their Data Processing Addendum
• AI model provider — accessed exclusively through managed cloud services within Australia. The model provider does not receive your data directly; it is processed through our cloud provider’s managed inference service
• Website hosting provider — for serving our marketing website and application front-end
• Xero, MYOB, or Google — only if you choose to connect these integrations. Data is shared in accordance with your integration settings
• Stripe — our payment processor, for managing subscription billing
• Your customers — when you send a quote or invoice, we deliver it to the customer via email and provide a web link for viewing

We do not sell, rent, or trade your personal information. Our cloud infrastructure operates primarily in Australia. Some personal information may be disclosed to recipients in the United States for transactional email delivery and payment processing (Stripe). We remain accountable under APP 8 for ensuring that any overseas recipient handles your personal information in accordance with the Australian Privacy Principles.

7. Your rights

Under the Australian Privacy Principles, you have the right to:

• Access your personal information — you can view your profile, jobs, quotes, and invoices within the app at any time
• Correct your personal information — you can update your profile details through the Settings screen
• Export your data — you can export your quotes, invoices, and job data from QuoteKit at any time
• Request deletion — you can request that we delete your account and associated data by contacting us
• Withdraw consent — you can disconnect third-party integrations at any time through Settings, and opt out of SMS notifications
• Complain — if you believe we have breached the APPs, you may lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC)

8. Retention

We retain your personal information for as long as your account is active or as needed to provide the service. If you request account deletion, we will delete your data within 30 days, except where we are required by law to retain certain records (for example, to comply with Australian tax record-keeping obligations).

Media files (video, photos, voice notes) are retained for the duration of the associated job. You may request deletion of specific media at any time.

9. Data breach notification

We maintain a data breach response plan in accordance with Part IIIC of the Privacy Act 1988 (Cth). If we become aware of an eligible data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

If you believe your QuoteKit account or data has been compromised, please contact us immediately at [email protected].

10. Children

QuoteKit is designed for use by trade professionals operating a business. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.

11. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or through the QuoteKit application. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

12. Contact us

If you have questions about this privacy policy, wish to make a data access or deletion request, or want to lodge a privacy complaint, contact us at the details below. We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days.

Mogul Investment Group Pty Ltd
Trading as QuoteKit
ABN 20 612 504 408
PO Box 923, Gymea NSW 2227
Email: [email protected]

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.