Privacy Policy

QuickGraft is a trading name of Mackie AI Enterprises Limited (company number 17107639), registered in England & Wales. ICO registration number: C1895868. Contact: [email protected]

We collect the following information when you register and use QuickGraft: Account data: your name, email address, and business name. Client records: names, addresses, and contact details you enter for your clients. Job and quote data: job descriptions, pricing information, and job details you provide. Invoice and payment records: invoice amounts and payment status. Usage analytics: feature usage and session data, collected in anonymised form to help us improve the service.

We use your data to: — Provide and operate the QuickGraft service. — Send quotes and invoices on your behalf via email. — Improve the product through anonymised usage analytics. We do not sell your data or your clients' data to any third party. Ever.

Quote content you enter is processed by an AI model (Anthropic Claude) to generate quote suggestions. This data is not stored by the AI provider beyond the immediate request and is not used to train their models. No client personal data is sent to AI services — only job descriptions and your pricing context (rates and business name).

As a QuickGraft user you are a data controller for your clients' personal data. You are responsible for having a lawful basis to store and process their information — for example, because it is necessary to fulfil a contract. QuickGraft acts as a data processor on your behalf. We process your clients' data only as instructed by you and only to provide the service.

Account and job data is retained for the duration of your subscription plus 12 months after cancellation. You can request deletion of your account and data at any time by contacting [email protected]. We will action deletion requests within 30 days, except where we are required to retain data for legal or financial compliance purposes (typically 6 years for financial records under UK law). If your subscription expires, your account moves to read-only mode — all existing data remains accessible. If you request full account deletion, your profile and login credentials will be deleted. Please note that UK law (HMRC) may require you to retain copies of financial records for up to 6 years. We recommend exporting your data before requesting account deletion.

You have the right to: Access — request a copy of the personal data we hold about you. Rectification — ask us to correct inaccurate data. Erasure — ask us to delete your data (subject to legal retention requirements). Restriction — ask us to limit how we process your data. Portability — receive your data in a machine-readable format. Objection — object to certain types of processing. To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month.

We are registered with the Information Commissioner's Office (ICO) under registration number ZC110311. If you are unhappy with how we have handled your data, you have the right to make a complaint to the ICO at ico.org.uk. We would, however, appreciate the chance to address your concerns first — please contact us at [email protected].

We use the following trusted sub-processors to operate QuickGraft: Supabase — database and authentication, hosted in the EU. Anthropic — AI quote generation (job description data only, not client personal data). Stripe — subscription payment processing. Resend — transactional email delivery (quotes and invoices). Vercel — website hosting (USA, with EU data transfer protections in place). Sub-Processor note on Anthropic: Data submitted through the Anthropic API to power our AI quote generation is explicitly not used to train Anthropic's AI models.

We may update this policy from time to time. We will notify you of significant changes by email. The date below shows when this page was last updated.