QuoteVitalsPrivacy
The short version. Your quotes are yours. We use them to build your comparison and for nothing else. There is no advertising and no third-party analytics in the product. We never sell or trade your information, never train models on your documents, and never aggregate vendor pricing across customers. Your documents are read by Anthropic's Claude model to be extracted — that is stated in full below rather than buried.
1. What we hold
Everything below is scoped to your organisation at the database level. No other customer can reach it.
- Your account — an email address and a password you set, or a sign-in link, plus your role and sign-in records.
- What you upload — the vendor quotes, specifications and RFQ documents you add, and the names, notes, corrections and approvals your team puts around them.
- What the product derives — extracted line items, terms, computed confidence scores, flags, and the total cost of ownership figures.
- Outputs — the Excel bid tab and PDF memo generated for each comparison.
- Billing — your plan and invoices. Card details are held by Stripe and never by us.
- Operational records — ordinary server logs and backups needed to run the service and restore it after a failure.
We do not ask for your name, your hospital's address, or your phone number unless you type them in somewhere.
2. No patient data
QuoteVitals handles commercial purchasing documents. It is not designed for, and must not be used for, protected health information, clinical records, or anything identifying a patient. We do not act as a HIPAA business associate for this product. If something like that reaches us by mistake, tell us and we will work with you to remove it.
3. Your documents are read by an AI model
QuoteVitals extracts figures and terms using Claude, Anthropic's model, through Anthropic's commercial API. Your documents leave Fandonia's systems for the duration of that processing.
Sent to Anthropic: the document pages, the specification if attached, the relevant extracted figures when you ask a question, and the question itself. Not sent: your name, your email, your organisation's name, or any other organisation's material.
Under Anthropic's commercial terms, content sent through the API is not used to train models, you retain all rights to your inputs, and you own the outputs. Anthropic deletes API inputs and outputs within 30 days; content flagged for a usage-policy violation may be held longer. Fandonia does not train any model of its own on your documents and does not use one customer's documents to improve results for another. Corrections your team makes are reused only within your own organisation.
4. Everyone who processes your data
Each of these companies processes your data only to deliver the part of the service named, under a written agreement with Fandonia LLC.
| Provider | What it does | What it sees |
|---|---|---|
| Anthropic | Extraction and analysis of quotes and specs | Document content, per request |
| Supabase | Database, authentication, private file storage | Everything held in your account |
| Vercel | Application hosting | Requests in transit, short request logs |
| Inngest | Background jobs: extraction, rules, retention | Record identifiers, not document content |
| Resend | Inbound quote email and outbound notices | Those messages and their attachments |
| Stripe | Billing and card processing | Billing contact and card details |
We will email organisation owners at least 30 days before adding a processor that would handle document content.
5. The documents are yours, and so is what is inside them
A vendor quote carries that vendor's pricing, discount structure and commercial terms — material they gave to your organisation, not to us. We hold those documents on your behalf. In the language of privacy law you are the controller of that material and we are your processor.
We will never aggregate vendor pricing across customers into a benchmark, an index or a market report, and never show one customer's figures to another in any form, anonymised or otherwise.
Your obligations to your vendors stay yours. Where a quote is subject to a confidentiality term, that term runs between you and them, and we will help you honour it rather than stand in the way.
6. How it is protected
Files are encrypted in transit and at rest. Every record carries an organisation identifier and row-level security keeps one organisation's data out of another's reach. Access is limited to what is needed to operate the service.
We will not read your documents except where you ask us to for support, or where we are compelled by law. If we ever suffer a breach affecting your files, we will tell you what happened, what was affected and what we are doing about it — promptly, in plain language, whether or not a law requires it.
7. Getting your data out, and getting rid of it
You can download the bid tab and the memo for any comparison at any time, and your original documents remain downloadable from the comparison they belong to. Deleting a comparison removes every document, extraction and flag belonging to it. Deleting your account takes effect immediately, from Settings, with no email to us. The full mechanics are on the retention and deletion page.
8. Purchases
Billing is processed by Stripe under its own terms and privacy policy. We never receive your card details.
9. If you email us
We receive your email address and whatever you include in the message. We use it only to reply and to keep a record of the conversation, and we delete it on request.
10. Your rights
Privacy laws in many places give you rights to access, correct, export or delete personal information a company holds about you. The self-service tools in the product are how we honour those rights; writing to us is the fallback, not a prerequisite. We do not charge for this and we do not make it difficult.
11. This website
quotevitals.app is a set of static pages. It sets no cookies and loads no third-party analytics, fonts or advertising.
12. Changes
If any of this changes we will update this page with a new effective date, and for anything material we will say so in the product. We do not make that kind of change quietly.
13. Contact
Privacy questions and data requests: direction@fandonia.app. General support: support@fandonia.app. QuoteVitals is operated by Fandonia LLC; postal correspondence can be addressed care of our registered agent — please email first so we can give you the current address.