Privacy Policy

Last updated: July 13, 2026

1. Who We Are

Quota (joinquota.app) is a social platform for salespeople. Reps log their deals and appointments, track their stats privately, and — if they choose — share their wins publicly, compete on leaderboards, and connect with other reps and companies. Because Quota deals with income and commission data, we take privacy seriously. This policy explains what we collect, how we use it, and the choices you have.

2. What We Collect

Account and profile data

• Email address and password (credentials are managed by our authentication provider, Supabase — we never see or store your plaintext password).
• Username, display name, and optional profile photo.
• Profile details you choose to add: bio, industry, sales role (closer and/or appointment setter), job title and company (including an optional second job), and an optional field for the CRM tool you use. The CRM field is collected for internal product research only and is never shown publicly.

Deal and appointment data

• Deals you log: product, sale amount, commission, date, notes, and an optional photo.
• Appointment entries (for appointment setters): appointments set and sat, optional commission or bonus, date, and notes.
• The visibility setting you choose for each entry, and which of your jobs you posted it under.
• Private pipeline entries in your Closing Stats tracker (estimated values, statuses, loss reasons, notes). These are strictly private and are never shown to anyone but you.

Proof uploads

• If you choose to get an entry verified, you may voluntarily upload proof — for example a closing disclosure, pay or bonus statement, CRM screenshot, calendar screenshot, or signed contract. Proof uploads are stored in private storage and are described further in Section 4.

Social activity

• Comments, reactions, follows, direct and group messages, and job applications you submit.

Analytics and error data

• Product analytics via PostHog: page views, feature usage, and events like logging a deal or viewing the leaderboard. Commission and money values in the interface are masked from session recordings and autocapture.
• Error and crash data via Sentry, which may include a session replay when an error occurs, so we can diagnose and fix bugs.

3. How We Use Your Information

• Operating the platform — your profile, deals, feed, messages, and notifications.
• Leaderboards and stats — computing rankings, per-role stats, company pages, and achievement badges from entries you have made public.
• Verification review — authorized reviewers examine proof you submit to approve or reject a verification request.
• Transactional email — sent via Resend: welcome email, verification results, new followers, comments, reactions, new messages, achievement notifications, and a weekly digest.
• Analytics and improvement — understanding how features are used so we can improve the product.
• Security and integrity — protecting accounts, enforcing our Terms of Service, and keeping leaderboards honest.

We do not sell your personal data. We do not run third-party advertising.

4. Who Can See Your Information

Your entries are private by default. Every deal or appointment entry has a visibility setting you control:

• Only Me — private, just for your own tracking. Never appears on the feed or leaderboards.
• Public — your name and numbers are visible to the community.
• Blurred — public, but your commission stays hidden. Commission is removed on our servers before data is sent, so it cannot be read by other users.

• Proof uploads are never public. They are stored in a private bucket, accessible only through short-lived signed links, and are seen only by authorized reviewers as part of verification.
• Direct messages are visible only to the participants of the conversation.
• Your Closing Stats tracker is visible only to you — it never appears on leaderboards, feeds, or your public profile.
• Your public profile (username, display name, photo, bio, industry, role, company, achievements, and public entries) is visible to other users.

5. Third-Party Service Providers

We use a small set of processors to run Quota. Each receives only what it needs to provide its service:

• Supabase — authentication, database, and file storage.
• Vercel — application hosting.
• Resend — transactional email delivery.
• PostHog — product analytics.
• Sentry — error monitoring.

We do not sell personal data to anyone, and we do not share it with data brokers or ad networks.

6. Email

We send transactional and notification emails (verification results, followers, comments, messages, weekly digest). We do not send third-party marketing email. If you want to stop receiving non-essential notification emails, contact us at the address below and we will turn them off for your account. Deleting your account stops all email immediately.

7. Data Retention and Account Deletion

We keep your data for as long as your account exists. You can permanently delete your account at any time in-app: Edit Profile → Delete Account. Deletion is immediate and permanent, and covers:

• Your profile, deals, appointment entries, and Closing Stats tracker.
• All uploaded files — profile photo, deal photos, and proof uploads.
• Messages you sent, and your comments and reactions on other users' posts.
• Your follows, notifications, and job applications.

If you acted as a verification reviewer, the review records themselves are retained for audit integrity but are disassociated from your identity. We do not email you after deletion.

8. Cookies and Local Storage

We use:

• Authentication cookies (Supabase) — to keep you signed in. Essential; the app doesn't work without them.
• Local storage — your light/dark theme preference and small interface state.
• Analytics cookies (PostHog) — to understand product usage as described above.

We do not use advertising or cross-site tracking cookies.

9. Your Privacy Rights

If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) gives you the right to access, correct, and delete your personal data, and to appeal a decision we make about a rights request. We extend the same rights to all users regardless of location:

• Access and correction — most of your data is directly visible and editable in-app (profile, deals, entries). For anything else, email us.
• Deletion — self-serve in-app (Section 7), or by emailing us.
• Appeal — if we decline a request, you may appeal by replying to our decision, and we will respond as the TDPSA requires.

We do not sell personal data or process it for targeted advertising, so no opt-out for those activities is needed.

10. Age Requirement

Quota is for working sales professionals and is intended for users 18 years of age or older. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete the account.

11. Data Security

Data is encrypted in transit, database access is protected by row-level security so users can only read what they are authorized to see, and proof uploads live in private storage accessible only through expiring signed links. No system is perfectly secure, but we design for privacy first — sensitive data like commission on blurred entries is stripped server-side, never merely hidden in the interface.

12. Changes to This Policy

We may update this policy as Quota evolves. We will post changes on this page and update the "Last updated" date. For material changes, we will notify you in-app or by email.

13. Contact

Privacy questions or requests: privacy@joinquota.app