Privacy Policy
Quote Box · last updated 2026-09-30 · Terms of Service
What this app stores
Quote Box adds a quote request form to your product pages and lets you answer requests with a Shopify invoice. To do that it stores the following, keyed to your shop domain:
- Quote requests sent from your storefront: the product and variant, the quantity, and what the shopper typed into the form — their name and email, and, if you ask for them, their company, phone number, and a message.
- For requests you answer: the price you quoted, its currency, the ID and invoice link of the draft order Shopify creates, when the invoice was sent, and the request status (new, invoice sent, ordered, closed, or spam).
- Your plan, the price you signed up at, and how many quote requests arrived this month.
- An access token issued by Shopify when you install the app, used to read your products and to create draft orders.
What this app does not collect
We only receive what a shopper chooses to send through the form. We do not track shoppers who do not send a request, and we set no cookies.
To slow down spam, requests are rate-limited by the sender's network address. That address is kept only in the app's memory, is cleared within a minute after a ten-minute window ends, and is never written to the database.
We do not receive payment information. When a shopper pays an invoice, they pay through your own Shopify checkout.
We do not use your data to train models, and we do not sell or share it.
Who receives it
Shopify. When you send an invoice, the app creates a draft order in your store with the shopper's email address, the product, quantity, and your price, and Shopify emails the invoice to the shopper. That draft order is part of your store from then on.
Railway (railway.com), which hosts the app and its PostgreSQL database in the Netherlands. Railway processes data only to host the service.
There are no other processors. No email service, analytics service, advertising network, or error-reporting service receives your data or your shoppers' data.
How long it is kept
Quote requests stay in your inbox while the app is installed, so you can answer them and look back at them.
When you uninstall the app, Shopify sends a shop/redact request 48 hours later. On that request we delete everything we hold for your shop. Nothing is kept after that.
You can ask for deletion sooner by emailing us.
Requests from shoppers
If a shopper asks your store for their data, everything we hold about them is visible to you in the Quote Box inbox: each request shows the fields they filled in.
If a shopper asks to be deleted, Shopify forwards a customers/redact request and we remove their name, email, company, phone number, and message from their quote requests. The product, quantity, and any price you quoted stay as your own record, no longer linked to a person. Draft orders already created in your store are part of your Shopify data and follow Shopify's handling.
Changes
If what we store changes, this page changes with it before the change ships. The date at the top of this page is the last time that happened.
Contact
Questions, or a deletion request: beobjoong@gmail.com