A clear account of how Quotia handles information.

This Privacy Policy covers Quotia's public website, account and demo-request experiences, and the Quotia application. Quotia is operated by Orchard Digital Solutions Inc. and is a business service for teams that manage client work, evidence, reviews, and reports.

A customer organization determines what client and job information its authorized users add to its workspace. Questions about information entered by your employer or another organization may need to be directed to that organization first.

Orchard Digital Solutions Inc. is responsible for personal information under its control and operates Quotia from the following address:

Privacy inquiries, access or correction requests, and complaints can be sent to the Orchard Digital Solutions Inc. Privacy Contact at [email protected].

• Account and session information: name, email address, authentication state, password-reset state, session information, IP address, and browser or device details.
• Organization information: workspace name, memberships, roles, permissions, invitations, assignments, and active-organization selection.
• Customer-provided client work: client and location details, Playbooks, job responses, field notes, evidence files, findings, reviews, approvals, and reports.
• Billing information: selected plan, billing cadence, subscription state, and provider identifiers. Payment-card details are collected by Stripe; Quotia stores provider identifiers rather than full card details.
• Communications: invitation and password-reset messages, support correspondence, and the contact details and message submitted through the demo-request form.
• Security and usage information: request identifiers, event codes, access decisions, rate-limit signals, page context, and product interactions used to operate and protect the service.
• AI request information: a user's instruction and the relevant document, template, variable, or selected-image context needed to prepare an AI-assisted revision.

Information may come from you, your organization and its administrators, other authorized members of the workspace, your browser or use of the service, and the providers that support billing, email delivery, storage, analytics, and requested AI features.

• Create accounts, authenticate users, and maintain sessions.
• Operate organization workspaces, roles, assignments, and access controls.
• Store evidence, run Playbooks and client jobs, support review, and generate reports.
• Process subscriptions and keep billing state synchronized.
• Send invitations, password resets, demo responses, and service communications.
• Prevent abuse, enforce security controls, investigate incidents, and maintain reliability.
• Prepare an AI-assisted revision when an authorized user requests one.
• Understand website and product usage when analytics is enabled.
• Meet contractual, legal, accounting, and recordkeeping obligations.

Quotia uses providers for hosting, storage, email, billing, analytics, security, and user-requested AI functions. The information each provider receives depends on the feature being used and is processed under applicable service terms and agreements.

• Microsoft Azure: hosting and storage.
• Stripe: payments and billing.
• Elastic Email: email delivery.
• OpenAI: user-requested AI features.
• Google Analytics: website and product analytics when enabled.
• Google Fonts: website fonts.
• Other service providers: services needed to operate and protect Quotia.

Quotia may also disclose information when required by applicable law, to investigate or prevent harm, or in connection with a corporate transaction, subject to applicable legal and contractual requirements.

Quotia uses cookies required for authentication, security, and active-workspace selection. The browser also stores limited signup-attribution and checkout-event state so the application can preserve context and avoid duplicate events. When Google Analytics is enabled, it may set or read analytics identifiers.

When Google Analytics is enabled, Quotia sends normalized page and interaction data, including page category, a sanitized referrer, selected marketing actions, and an internal user identifier for signed-in activity. Quotia's application-generated analytics payloads are designed not to include query strings, names, email addresses, client or document names, invitation or reset tokens, or checkout-session identifiers. Google Analytics may also receive standard browser, device, network, and automatically collected interaction information.

Quotia keeps information while it is needed to provide and secure the service, follow customer instructions, maintain required business and audit records, resolve disputes, and meet contractual or legal obligations. The period depends on the type of information and the reason it is held.

Deletion may take time to propagate across systems and service providers. Legal holds, security investigations, contracts, or applicable law may require some information to be retained longer.

To request access, correction, or deletion, contact [email protected]. Quotia may need to verify your identity and coordinate with the customer organization responsible for the workspace before completing the request.

Processing locations depend on Quotia's deployment and the providers used. Information may be processed outside your province, state, or country and may be subject to the laws of those locations.

Depending on where you live, you may have rights to ask about, access, correct, delete, or restrict certain processing of personal information, or to withdraw consent where consent applies. Some rights are subject to legal, contractual, security, and recordkeeping exceptions.

Send a request to [email protected]. If the information belongs to a customer workspace, Quotia may refer the request to that organization or work with it to respond.

Quotia uses organizational, technical, and application safeguards designed for the sensitivity of client evidence and reports. These include organization- and role-aware access checks, private file access, upload validation, rate limits, browser protections, and redacted operational logging. Read more on the Security page.

No online system can guarantee absolute security. Please report suspected unauthorized access promptly and avoid sending passwords, access tokens, or client evidence in an initial support email.

Quotia is intended for organizational and business users, not children. Contact Quotia if you believe a child has provided personal information.

Quotia may update this policy as the service and its information practices change. The current version will remain available on this page with its updated date. Material changes may also be communicated through the service or by email when appropriate.

Privacy questions or requests can be sent to the Orchard Digital Solutions Inc. Privacy Contact at [email protected].