Privacy Policy

Effective / last updated: September 28, 2026

This Policy explains information handling across RigQuoteAI’s website, iPhone and Android mobile app, Desktop Copilot / Desktop Quote Copilot, Quote Copilot and estimating, Industrial Leads / Opportunity Intelligence / Opportunity Radar, Facility Intelligence, Prospect Intelligence / Prospect Search, auction and provider tools, subscriptions, partner tools, support and related integrations. The Terms’ product coverage describes the service families in more detail.

It applies to information about account users and people whose professional contact information is included in business-research features. Information handled depends on the feature used, account access and enabled integrations. A future product is subject to this Policy when it references it, but materially different collection, disclosure or use requires an updated notice and any consent required by law; this Policy is not blanket permission for undefined future data practices.

1. Information you provide

We collect information you submit to use the Service, such as name, business email, phone, company, role, business address or service territory, account details, preferences, support communications and optional marketing choices. We also handle subscription, trial, billing and entitlement information; provider applications, insurance/COI documents and related business records; and referral or partner information.

Feature content may include RFQs, spreadsheets, CSV/PDF files, photos, equipment and site details, job requirements, emails or text you import, customer/contact records, estimates, proposals, acceptance and work-order records, historical quotes, accepted prices, actual costs and completed-job outcomes. Research workflows can include company/facility lookup terms, search origins and radii, industry or machinery filters, saved searches, dossiers, leads, watchlists, pipeline stages, notes, assignments and follow-up tasks. Copilot features process questions, selected context and generated responses.

Submit only information you are authorized to share. Do not include unnecessary sensitive personal information, payment-card details, passwords, credentials or confidential documents whose restrictions prohibit the requested processing.

2. Public and third-party business information

Facility, prospect, auction and opportunity research may collect or receive information from company websites, published business contact pages, directories, government and WARN notices, economic-development releases, auction listings, project/property announcements and other public or authorized third-party sources. This can include company and facility names, business addresses, websites, phone numbers, professional email addresses, published contact names/titles, industrial activity, machinery/process clues, event dates and source references.

We may normalize, connect, classify, score and enrich that information to produce facility dossiers, prospect lists and likely industrial-service or timing inferences. Inferred service needs, equipment or roles are not necessarily confirmed facts. Professional contact information can be personal information even when used in a business context. Source availability does not by itself establish consent to outreach. Contact us to request a correction or review of a business-contact record.

3. Technical, guest, mobile and desktop information

The Service may process IP addresses, browser and device information, operating system/app versions, pages and feature activity, referral information, timestamps, request identifiers, errors and security/service logs. Guest intelligence access uses a browser identifier cookie and server-side usage records to administer the limited search allowance, prevent duplicate requests and control abuse. Pending search information may be held in browser storage to resume a workflow after signup.

Mobile and Desktop licensing and connected features may process installation/device identifiers, app version, activation and session information, entitlement status, usage counts and troubleshooting information. The mobile app can use the camera or photo library only when you choose those functions to capture or select equipment, nameplate or site-access images. Field captures and selected files may be stored locally in encrypted app storage for offline use and later synchronization; cloud-backed research, pricing and synchronization require network access. Content you select for upload or analysis, and records created or saved in connected workflows, may be transmitted to and stored in RigQuoteAI’s hosted systems. Installing an app does not mean all processing stays on your device or all features work offline. Uninstalling the app does not remove cloud records or cancel billing.

When you choose a native share action, such as sharing capture notes or a saved customer PDF, the app opens your device’s share interface and you choose the recipient or destination. RigQuoteAI does not automatically send that content merely because the share interface opens. Temporary local copies created for native PDF sharing are intended to be cleared by the app after use, on startup or sign-out; a recipient app or person may retain anything you choose to share.

A location or address you enter for facility or radius research is search input, not necessarily your physical location. A business’s mapped address or geographic coordinates may appear in research results. This notice does not represent that the app continuously tracks your physical location.

4. Purposes of use

We use information to authenticate accounts, administer subscriptions and licenses, provide requested research and estimating, create and manage business records, support proposals and provider workflows, generate AI-assisted analysis and drafts, synchronize connected records, send service notifications, provide support, measure performance, diagnose problems and improve product quality.

Other purposes include source verification and corrections; billing, referral attribution and partner administration; security, fraud/scraping prevention and usage controls; maintaining records of affirmative account-signup Terms acceptance and Privacy Policy acknowledgment; compliance with law; dispute resolution; and protecting users and our rights. Optional marketing choices are separate from required account-signup acknowledgment.

5. AI processing and human review

AI-assisted features send relevant prompts, submitted content or selected records to AI and research-service providers to generate analysis, classifications, searches or drafts. Depending on the feature, this can include business contact details, uploaded documents and facility/job information. Prompts, outputs, source references, usage and error information may be retained in service records for operation, security, troubleshooting, quality review and permitted improvement.

Provider processing is governed by applicable service agreements and settings. This Policy does not promise that every provider has identical retention practices or that every AI operation occurs on a local device. Product-quality improvement and de-identified benchmarking are distinct from permission to publish confidential files or to use identifiable information for unrelated model training. Any materially different use must have a lawful basis and any required notice or consent. Review AI output before relying on it or communicating it to another person.

6. Pricing, benchmarks and derived information

Where lawfully permitted and consistent with applicable agreements, historical quotes, accepted prices, resource use, actual costs and completed-job records may support estimating quality, resource planning, comparable evidence and benchmarks. Confidential source documents are not made public merely because they were submitted for analysis. Benchmark presentation may use aggregation, de-identification, quality review and publication thresholds to reduce identification risk.

We may create and use de-identified, aggregated or statistical information for analytics, product improvement, estimating, benchmarking, opportunity intelligence and fraud prevention when it does not reasonably identify a user, customer or confidential source. Derived data remains subject to privacy obligations when it can still identify a person. We do not treat an updated policy or the word “derived” as permission to disregard prior confidentiality commitments or consent requirements.

7. Sharing with users, providers and subscribers

Information may be visible to authorized members of your account or organization and to parties involved in a workflow you request, such as a customer receiving a proposal, a provider reviewing relevant quote/site information, or an auction/referral partner receiving information needed for its authorized role. Review access permissions and recipient details before sharing. Exported files and communications can also be retained by their recipients.

Business-research records, including available professional contact information, may be displayed to users and paid subscribers through Industrial Leads, Facility Intelligence, Prospect Search and related features. We therefore do not make a blanket claim that business contact information is never disclosed for commercial value. Some privacy laws define “sale” or “sharing” more broadly than ordinary usage; any rights that apply to a disclosure are not waived because the information concerns a business contact or was sourced publicly. Use the privacy-request process below to request access, correction, deletion, suppression, or an applicable opt-out.

Submitting a private RFQ, customer file or account-registration record does not by itself authorize publishing it as a prospecting record for unrelated subscribers. Publicly listed business information may separately appear in research, subject to applicable law. Users receiving contact information are independently responsible for lawful use and outreach; our Terms do not authorize unlawful spam or disregard of opt-outs.

8. Service providers, integrations and other disclosures

We use providers for hosting and file delivery, databases and authentication, payments, email and notifications, AI/research, analytics, performance measurement and security. The current service architecture includes Vercel, Supabase, Stripe and AI/research services; Google analytics/tagging and other integrations may operate where configured. These providers receive information appropriate to their functions and applicable agreements. Provider availability and configuration can change.

When you choose to connect a third-party account or use an integration, relevant account identifiers, permissions, credentials/tokens and selected workflow information may be processed as needed for that connection. An external website or service has its own privacy practices, and disconnecting an integration does not automatically delete information it already received. This Policy does not claim that a vendor is an integration partner merely because it is mentioned in a software comparison.

We may also disclose information to authorized personnel and advisers with a relevant operational need; to comply with law or legal process; to investigate fraud or security issues; to enforce agreements or protect rights and safety; or in connection with a financing, acquisition, reorganization or sale, subject to applicable confidentiality, notice and other legal requirements. A business transfer does not automatically remove existing privacy commitments.

9. Payments and communications

Payment providers process payment-card transactions. RigQuoteAI receives information needed to administer billing, such as customer/subscription identifiers, transaction status, plan, billing details and trial/cancellation status. Do not send full payment-card numbers to support or include them in uploaded documents.

We send account, security, billing, trial, support and other requested service communications. Marketing preferences can be managed using available unsubscribe controls or by contacting support. Unsubscribing from promotional messages does not cancel a subscription or necessarily stop essential account/security or requested service messages. A business-contact suppression request for our research products is distinct from unsubscribing from one sender’s email; tell us which request you are making.

10. Cookies, browser storage and analytics

Cookies and similar storage support authentication, preferences, guest allowances, pending workflows, referral attribution, usage measurement, conversions, performance and security. Vercel Web Analytics and Speed Insights support traffic/performance measurement; Google tagging/analytics may operate where configured. Analytics and logging are not the same as a guarantee that all browsing is anonymous.

Browser controls can limit cookies and local storage, but blocking necessary technologies may affect sign-in or other features and does not itself delete server records. Mobile encrypted local drafts and secure session storage are separate from ordinary browser cookies. Available controls differ between browsers, mobile/desktop software and providers. For information about applicable opt-outs, including any legally recognized browser signals, contact support. This Policy does not claim a universal cookie-consent or opt-out-signal mechanism where one is not implemented, and does not limit any rights that applicable law gives you.

11. Retention, deletion and security

Retention depends on the data and its purpose. Account/workspace records may be retained while needed for the Service; transaction and agreement records for billing, audit, contractual and legal needs; and technical/security records for troubleshooting and abuse prevention. Research records may be refreshed or retained for source verification and quality purposes. Backups and records held by authorized recipients or third parties may have separate retention periods.

We consider operational necessity, legal obligations, disputes, fraud prevention, applicable agreements and deletion requests when determining retention. We do not promise one fixed deletion deadline for every data category. Closing an account, uninstalling the app or deleting a local file does not necessarily delete cloud data, recipients’ copies, lawfully retained records or de-identified aggregate information.

We use administrative and technical safeguards designed to protect information, including authentication and access restrictions. No system is perfectly secure. Protect your credentials, devices and exports, and promptly report suspected unauthorized access. This Policy is not a claim of a security certification or a guarantee against every breach.

13. International use and children

RigQuoteAI is operated for business use, and information may be processed in the United States and locations where relevant service providers operate. Laws can differ between locations. Where applicable law requires a particular lawful basis, transfer mechanism, contract or notice, that requirement is not replaced by merely using the Service or reading this Policy. This Policy does not claim participation in a certification framework that has not been verified.

The Service is not directed to children; account use is intended for adults. We do not knowingly solicit personal information from children under 13. Contact support if you believe a child has provided personal information so we can review and address it as appropriate.

14. Changes to this Policy

We may update this Policy as features and data practices change. The date above identifies this version. Material changes will receive any additional notice or consent required by law, and an update will not retroactively authorize materially different uses contrary to prior commitments. Contact support for questions or a prior version.

Contact RigQuoteAI: support@rigquoteai.com.

Products covered · Desktop software license · Privacy and business-contact requests