Privacy
Short and plain. Trade Voice Quote (tradevoicequote.co.uk) is run by Joe Mulreany, trading as Trade Voice Quote, in the UK. He is the data controller and we follow UK GDPR. Questions or requests: [email protected]
Last updated 23 October 2026.
What we keep, and why
We keep as little as we can. This is the full list.
- Your email address. To log you in and to find your account. Lawful basis: it is needed to run the service you asked for (contract).
- Your password, if you choose one. We never store the password itself, only a salted, one-way scrambled version (PBKDF2-SHA256) that cannot be turned back into the password. When you set a password we check it against a list of leaked passwords using Have I Been Pwned. Only the first five characters of a scrambled copy are sent, so the service never sees your password or your email. Lawful basis: contract.
- Your Google account ID, if you use Google sign-in. When you tap Continue with Google, Google tells us your email address (which must be verified) and a Google account ID. We store the ID so we can recognise you next time. We get nothing else from your Google account, and we link it to an existing account with the same email. Lawful basis: contract. Google handles your sign-in under its own privacy policy.
- Your trade, if you tell us. To word your quotes in your trade's terms. Lawful basis: our legitimate interest in making the service work well for you. You can skip it or change it in Settings.
- Your business details, prices and past quotes (including customer names and phone numbers you type in). So they are on every phone you log in on, and so you can reopen and resend them. Lawful basis: contract. Before you log in, these stay on your phone only.
- Your subscription status and Stripe customer number. To know whether you have paid. Lawful basis: contract, and our legal duty to keep accounting records.
- Whether you ticked the email box. Lawful basis for marketing emails: your consent. It is unticked unless you tick it.
- When you last used the app. To delete accounts nobody uses (see Keeping and deleting).
- Free quote counts by account and by a scrambled (hashed) version of your IP address. To stop the free quotes being reused, we keep a scrambled (hashed) version of your IP address, not the address itself, and delete it after 30 days. Lawful basis: legitimate interest in preventing abuse.
- Blocked requests: when we block a request (too many tries, too many wrong passwords, a daily limit, a throwaway email address or a bad request) we keep a short record of what was blocked, a scrambled (hashed) version of the IP address and the time, for 30 days, to stop abuse.
The customer details in your quotes are your customers' data. You decide what to type in. We only store them for you and do nothing else with them.
Your recordings
We never store them. A recording is sent to OpenAI to turn it into text and then into a quote, and is gone from our side when the quote is made. We do not save the audio or the text.
Who else handles your data
- Cloudflare hosts the site and stores our database. Purpose: running the service.
- OpenAI hears your recording and reads the text to write the quote. OpenAI is in the United States, so this is a transfer outside the UK. It is covered by the safeguards in OpenAI's data processing terms. OpenAI may keep API data for a short time to check for abuse, under its own terms.
- Stripe takes payment. Your card details go to Stripe and never touch us. Stripe keeps payment records as the law requires.
- Google signs you in if you choose Continue with Google. Google is in the United States, so this is a transfer outside the UK, covered by Google's own safeguards. If you never use Google sign-in, nothing is sent to Google.
- Have I Been Pwned (run by Troy Hunt) checks new passwords against leaked password lists. It only receives the first five characters of a one-way scramble of the password.
- Cloudflare Turnstile runs an invisible check that you are a person, when you make a free quote, sign up, log in, ask for a log in link or ask for a password reset. Cloudflare sees your browser and network details for this and gives us back a pass or fail. It does not set advertising cookies. Cloudflare is in the United States, so this is a transfer outside the UK, covered by the safeguards in Cloudflare's data processing terms. Lawful basis: legitimate interest in preventing abuse.
- Brevo sends your log in, sign up and password reset emails. If you tick the email box, it also holds your email address on our mailing list.
We do not sell your data and we do not use it for advertising.
Cookies
Essential cookies only: one keeps you logged in, and a short-lived one (10 minutes) is used only while you sign in with Google, to check the sign-in is really yours. We use no analytics or advertising cookies, so there is no cookie banner. The app also saves your prices and quotes in your phone's own storage so it works offline.
Keeping and deleting
- Your account, business details and quotes: until you delete your account.
- Free accounts with no activity for 24 months are deleted automatically. Accounts that have paid are kept until you delete them, because of billing records.
- Log in and sign up links: 15 minutes. Password reset links: 30 minutes. Both work once. Logged in sessions: 30 days, renewed each time you use the app. You can end them all with Log out everywhere.
- Free quote counters: up to 13 months.
- Payment records held by Stripe: as long as tax law requires.
- Database backups: removed within 30 days of a deletion.
Your rights
You can ask to see, correct or delete your data, to take it with you, to object to how we use it, and to take back consent at any time.
- Download my data: Menu, then Settings. You get everything we hold as a file.
- Delete my account: Menu, then Settings. It removes everything and cancels your subscription.
- Stop marketing emails: untick the box in Settings, or use the unsubscribe link in any email.
- Anything else: email [email protected]. We reply within one month.
If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would like the chance to put it right first.
Read our Terms too.