Privacy Policy
Last updated November 3, 2026
QuickVal is operated in British Columbia, Canada. This page explains what information QuickVal collects, how it is used, and who handles it. Questions or requests: hello@quickval.ai.
What we collect
- Account: your email address, your password (stored only as a one-way hash) and your display name.
- Optional profile details used to brand your reports: broker name, title, email and phone.
- Organization details: name, address, phone, website and logo.
- Business and financial information you enter to produce valuations: business name and address, industry, revenue and other financial figures, addbacks and notes. This can include information about your clients. You are responsible for having the right to share it with QuickVal.
- Billing: payments are handled by Stripe. QuickVal stores a Stripe customer reference and your subscription status, plus the billing notifications Stripe sends us, which can include your billing name, email and address. QuickVal never sees or stores your card number.
- Security records: login and account events (for example sign-in, failed sign-in and registration), with the IP address, browser user agent and email address involved. Server logs record IP address, requested URL, referring page and user agent.
How we use it
To run the service, generate valuation reports, send account emails (email verification and password reset), handle billing, and keep accounts secure.
QuickVal has no advertising, does not sell or rent your data, and uses no analytics or tracking tools and no session recording. The providers that do receive data are all listed below.
AI-generated report sections
To write some report sections, QuickVal sends business details (business name, city/region/country, industry, revenue and other financial figures, year founded and website address) to OpenAI or Anthropic. Those AI services may also search the public web for the business. Your account identity (your name and email) is not sent.
Service providers and where data is processed
- DigitalOcean: application servers and the main database in Toronto, Canada; file storage (generated report PDFs and logos) in San Francisco, US.
- Vercel: hosting for this website (quickval.ai) and the QuickVal app (app.quickval.ai), US.
- Stripe: payments.
- OpenAI and Anthropic: AI-generated report sections (US).
- Resend: sending email.
- Sentry: error reports from the app and server. A report can include the data involved in the failing request, such as business details or an email address. Passwords and sign-in tokens are removed.
- Better Stack: server logs.
- Google Maps Platform: address suggestions while you type an address in the app. Google receives what you type and your IP address.
Your information is therefore stored and processed in Canada, the United States, and other countries where these providers operate.
Cookies and browser storage
QuickVal uses only functional cookies and browser storage. An HttpOnly sign-in cookie keeps you logged in; it is cleared when you close the browser and stops working after 7 days without use. A short-lived HttpOnly cookie links email verification to the browser you signed up in. A cookie remembers whether the sidebar is open. Browser storage remembers that you have seen the welcome screen and which editor panels you collapsed. There are no tracking or advertising cookies, so there is no cookie banner.
Security
Passwords are hashed and connections are encrypted. Report PDFs are private and shared only through links that expire after an hour. Organization logos are served from a fixed, hard-to-guess address so they can appear in reports; anyone with the address can view the logo. No system is perfectly secure, but we take these steps to protect your information.
Retention and your rights
- Account and business data are kept while your account is active.
- Server logs are kept only as long as needed to run and secure the service.
- Security records are kept indefinitely and cannot be edited.
There is no self-serve deletion or export yet. If you are a user, you can email hello@quickval.ai to ask to access, correct, export or delete your information. Requests are answered within 30 days.
When you ask us to delete your account, we delete it along with your valuations, the business details and financial figures in them, and your report files. If you are the only member of your organization, we delete the organization and its logo too. Valuations you created inside a shared organization are deleted with your account. We keep security records, which include your email address, and billing records.
Children
QuickVal is not intended for people under 18.
Changes
If this policy changes, the new version is posted on this page with a new date.
Contact
QuickVal · hello@quickval.ai
See also the Terms of Service.