Skip to content
Contact

Privacy

Privacy notice

Last updated 11 October 2026

Quoreca is a product of TUD Innovations (OPC) Private Limited, New Delhi, India. This notice explains what we collect when you use quoreca.com and the Quoreca app, why, where it is kept and what you can ask of us.

Who we are

Quoreca is a product of TUD Innovations (OPC) Private Limited, New Delhi, India ("we"). This notice covers the Quoreca app at app.quoreca.com and this website. We are the data fiduciary for the personal data described here under the Digital Personal Data Protection Act, 2023.

What we collect, and why

When you create an account: your name, email address and, if you give it, phone number, to create and secure your account, send sign-in and service emails, and answer you. We record your consent to this notice and when you gave it.

When you set up your company: trading name, legal name, GSTIN, Importer-Exporter Code, state and address, to identify your company on the documents the app produces and to keep one account per registered business.

When you use the app: the products, materials, suppliers, prices, factory steps, orders, buyers and invoice details you enter; the checks the app runs, with a full copy of the inputs and the rule and engine version used, so each result can be reproduced; the documents it generates, each with a cryptographic fingerprint; and an audit log of who changed what and when.

When you pay: your plan, invoices and payment status. Card and bank details are entered with and held by the payment provider, not by us.

When you write to us: your message and address, to reply and keep a record of the conversation.

Automatically: standard server logs (IP address, page requested, time, browser) kept by our hosting provider to deliver and protect the service. We use no advertising or tracking cookies; the app uses only the cookies needed to keep you signed in.

What we do not do

  • We do not sell personal data.
  • We do not use your products, prices or documents for any purpose other than running the service for you, keeping the records it promises, and improving the service in aggregate without identifying you or your company.
  • We do not make legal determinations. The app's results support your decision; see the terms.

Where your data is kept

Account, company, product, check and document data is stored in India, in the Mumbai region (Supabase), and the application runs on servers in Mumbai (Vercel). The services that help us run Quoreca and what each handles:

  • Supabase: database, sign-in and file storage, all account and business data, Mumbai.
  • Vercel: hosting and application servers, requests to the app and server logs; application in Mumbai, content network global.
  • Email provider: sends sign-in and service emails, your email address and the message; named here before sign-up opens.
  • Payment provider: payments, the details you enter with them, India; named here before paid plans open.

We do not add a service that stores customer data outside India without saying so here first.

Who can see your data

  • People in your company you have invited.
  • Quoreca staff, only when a check or document needs a specialist's review or you ask for support. Staff access is logged and protected by a password and an authenticator code.
  • The services above, to the extent needed for their role.
  • Authorities, where the law requires it; we tell you where we are allowed to.

How long we keep it

  • Your account and personal data: for as long as you have an account, then on request or within 12 months of the account closing.
  • Checks, documents and the audit log: for the record-keeping period the relevant trade agreement requires of exporters (5 years for India–UK CETA), even if the account is deleted. Personal identifiers are removed where the law allows.
  • Server logs: a short rolling period set by the hosting provider.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to show you the personal data we hold, correct it, erase it (subject to the retention above), withdraw consent, or nominate someone to act for you. You can export your company's data from the Account screen. For anything else write to the address below; we answer within 30 days.

Security

Every record is protected by row-level access rules in the database, so one company can never read another's data. Files are private and served through short-lived links. Changes are written to an audit log.

Children

Quoreca is for businesses and not meant for anyone under 18; we do not knowingly collect their data.

Changes

We post changes here with a new date and, for material changes, tell you by email before they take effect.

Contact and grievances

Grievance Officer, TUD Innovations (OPC) Private Limited, New Delhi. Write to hello@quoreca.com with any question, request or complaint about your data. We acknowledge complaints within two working days and aim to resolve them within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.