Privacy Policy | Quotable Payments

Last updated: August 7, 2026 This Privacy Policy is published by Quotable Ventures, Inc., a Delaware corporation ("Quotable," "we," "us," or "our"), together with its affiliates. Quotable is the controller of the personal information described in this Policy, except where this Policy states otherwise.

This Policy applies to the Quotable platform and to the payment functionality made available through it. It should be read together with our Terms and Conditions, including the Payment Services Addendum.

How Does Quotable Use Your Data?

Quotable prioritizes the protection of your data integrity and privacy. We operate transparently and responsibly to ensure that your data is handled with care. Here’s a detailed overview of our data utilization practices:

Quotable Data Collection

When using Quotable, whether by submitting Request for Quotes (RFQs), browsing our platform, or communicating with our suppliers, we collect specific information necessary to facilitate business transactions. This includes your company name, contact details, project specifications, and any other relevant data required to fulfill your requests. If you use the payment functionality of the platform, we also collect the information described in the section titled "Payment Services and Related Information" below, including identity, ownership, and financial account information required for regulatory screening.

Quotable Data Usage

Your data is used solely for the purposes outlined in our terms of service, such as processing RFQs, facilitating communication between parties, and improving the functionality of our platform, enabling and settling payment transactions, meeting our own and our service providers’ legal and regulatory obligations, preventing fraud and abuse, and supporting automated or AI-assisted features.

Quotable operates under a strict confidentiality policy. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose your information only as described in the section titled "When and with whom do we share your personal information?" below. Where RFQs are made visible on our platform, sensitive details are redacted first. Your supplier list is kept confidential and is not shared with external entities except as described in that section.

Quotable Supplier Data Protection

Suppliers partnering with Quotable can trust that their client information remains secure and confidential. We do not share supplier lists with third parties.

Security Measures

Quotable employs industry-standard security measures, including encryption protocols, firewalls, and regular security audits, to protect your data from unauthorized access and breaches.

Quotable Data Retention

Your data is retained only for as long as necessary to fulfill the purposes for which it was collected, as outlined in our terms of service or as required by applicable laws and regulations. Where you ask us to delete your data, we will do so unless we are required or permitted to retain it. In particular, information collected for anti-money laundering, know-your-customer, sanctions screening, and payment recordkeeping purposes must be retained by us and by our payment services provider for the period required by applicable financial services law, which is generally five (5) years from the end of our relationship with you or from the date of the relevant transaction, whichever is later. We also retain information as necessary to resolve disputes, enforce our agreements, and comply with tax and accounting obligations.

We do not rely on consent as our only legal basis for processing. We process most personal information because it is necessary to perform our contract with you, because we are subject to a legal or regulatory obligation, or because we have a legitimate interest in operating, securing, and improving the platform. Where we do rely on your consent, for example for certain cookies or marketing communications, you may withdraw that consent at any time by contacting us, and withdrawal does not affect processing carried out before withdrawal. Withdrawing consent does not entitle you to deletion of records we are required by law to retain.

What Information Does Quotable Collect?

Quotable is a business-to-business platform and processes personal information relating to the representatives, personnel, and beneficial owners of the companies that use it. Depending on how you use the platform, we collect:

This includes, but is not limited to:

Your Company Name
Contact Details
Project Specifications,
Other pertinent data required for RFQ processing and communication
Identity information about your representatives, directors, shareholders, and beneficial owners, including name, date of birth, nationality, and government-issued identifiers such as passport, national identification, driver’s licence, or tax identification numbers, where required for regulatory screening
Financial account information, including bank account details and payment instructions
Screening results, including sanctions, politically exposed person, and adverse media search results, which may include information relating to alleged or actual criminal offences drawn from publicly available sources
Technical and usage information, including IP address, device and browser information, and interactions with the platform
Communications with our support team

We do not intentionally collect special categories of personal data. Please do not submit health, biometric, or similar sensitive information through the platform.

How Does Quotable Process Your Information?

Your information is processed with strict adherence to the principles outlined in the data protection laws described in the section titled "Which privacy laws apply?" below. We use it solely for the purposes stated in our terms of service, such as:

Processing RFQs
Facilitating Communication Between Parties
Enhancing the Functionality of Quotable
Enabling, instructing, and settling payment transactions
Verifying identity and meeting anti-money laundering, sanctions, and other regulatory requirements
Detecting, investigating, and preventing fraud, misuse, and security incidents

Our processing methods are designed to ensure the confidentiality, integrity, and security of your data.

What Legal Bases Does Quotable Follow to Process Personal Information?

We rely on the following legal bases, which correspond to those set out in Republic Act No. 10173 (Data Privacy Act of 2012), the EU and UK General Data Protection Regulation, and comparable laws: performance of a contract with you or steps taken at your request before entering into one; compliance with a legal or regulatory obligation, including anti-money laundering, sanctions, and payment services requirements; our legitimate interests in operating, securing, and improving the platform, preventing fraud, and establishing or defending legal claims; and, where applicable, your consent. Where we process information relating to alleged or actual criminal offences as part of sanctions and adverse media screening, we do so on the basis of our and our payment services provider’s legal obligations and, where required, under the substantial public interest ground for the prevention and detection of unlawful acts.

We share personal information with the following categories of recipients, in each case only to the extent necessary:

Other platform users. RFQs are shared with suppliers you select, and, if you open an RFQ to suppliers outside your network, with those suppliers, with sensitive details redacted.
Our payment services provider. If you use the payment functionality, we share identity, ownership, contact, and financial account information with the regulated financial institution identified in the Payment Services Addendum, and with entities in its group acting as its subcontractors and subprocessors, so that it can open and operate an account in your company’s name, screen and monitor transactions, and meet its regulatory obligations. That provider processes this information as an independent controller for regulatory purposes and under its own privacy policy, which is linked in the Payment Services Addendum.
Service providers and subprocessors. Hosting, infrastructure, analytics, communications, customer support, and similar vendors acting on our instructions under written contracts.
Professional advisers, auditors, and insurers, under duties of confidentiality.
Regulators, law enforcement, and courts, where we or our payment services provider are required to disclose information, including in response to lawful requests for information. We may be prohibited by law from notifying you of such a request.
Acquirers or successors in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information and do not share it for cross-context behavioral advertising.

International Transfers

Your information may be transferred to, stored in, and processed in countries other than the one in which you are located, including the United States, Ireland, the Philippines, and other jurisdictions in which our service providers and our payment services provider operate. Some of those countries may not provide the same level of data protection as your own.

Where personal information of individuals in the European Economic Area or the United Kingdom is transferred outside those areas, we rely on an approved transfer mechanism, which for our current arrangements is the European Commission’s Standard Contractual Clauses, together with the UK Addendum where applicable, and supplementary measures where appropriate. You may request a copy of the relevant safeguards by contacting us at payops@getquotable.ai.

Which privacy laws apply?

Because we operate across multiple jurisdictions, more than one privacy law may apply to you. We comply with Republic Act No. 10173 (Data Privacy Act of 2012) where it applies, with the EU and UK General Data Protection Regulation where we process personal information of individuals in those regions, and with applicable United States state privacy laws, including the California Consumer Privacy Act as amended. Where laws conflict, we apply the standard that gives you the greater protection.

Does Quotable Use Cookies and Other Tracking Technologies?

Quotable employs cookies and other general tracking technologies to enhance user experience, analyze website traffic, and personalize content. These technologies may collect information such as IP addresses, browser types, and browsing patterns. We use strictly necessary cookies to operate the platform, and analytics and functional cookies where permitted. Where required by law, we ask for your consent through a cookie banner before setting non-essential cookies, and you can change or withdraw your choices at any time through the cookie preferences link on our site. You can also control cookies through your browser settings, although disabling strictly necessary cookies may prevent the platform from working.

What is the Storage Duration of our Information with Quotable?

We retain your information only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our data retention periods are determined based on legal obligations, business needs, and user preferences. Deletion requests are handled as described in the section titled "Quotable Data Retention" above.

Does Quotable Solicit Information from Minors?

Quotable is a business-to-business platform intended for use by companies acting through adult representatives. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us with personal information, please contact us.

Quotable User Privacy Rights

Depending on where you are located, you may have the right to access your personal information, to request correction of inaccuracies, to request deletion, to object to or restrict processing, to receive a portable copy of information you provided to us, to withdraw consent, and to be informed about automated decision-making. Individuals in the European Economic Area and the United Kingdom also have the right to lodge a complaint with their supervisory authority, and individuals in the Philippines may complain to the National Privacy Commission. Residents of California and other United States states with comprehensive privacy laws have rights to know, delete, correct, and opt out, and the right not to be discriminated against for exercising them.

To exercise any of these rights, contact us at payops@getquotable.ai. We will verify your identity and respond within the period required by applicable law, and in any event within thirty (30) days, unless an extension is permitted. These rights are subject to the retention obligations described above.

Do foreign-owned businesses have specific privacy rights in Quotable Philippines?

Foreign-owned businesses operating in Quotable Philippines are afforded the same privacy rights and protections as domestic entities. We ensure compliance with the Data Privacy Act of 2012 and other relevant regulations, regardless of the ownership structure of the business.

Do other regions have specific privacy rights?

In addition to the Data Privacy Act of 2012, other regions may have specific privacy rights and regulations that apply to the processing of personal information. Quotable endeavors to comply with all applicable laws and regulations, providing appropriate protections for user data across different jurisdictions. See the sections titled "Which privacy laws apply?" and "Quotable User Privacy Rights" above.

Do we make updates to this notice?

Quotable reserves the right to update this Privacy Policy periodically to reflect changes in our practices, legal requirements, and industry standards. Where a change materially affects your rights, we will give you notice through the platform or by email before it takes effect. The date at the top of this Policy shows when it was last revised.

How can you contact us about this notice?

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at payops@getquotable.ai, or by mail to Quotable Ventures, Inc., 2025 Guadalupe Street Suite 260 Austin, Texas, 78705, marked for the attention of the Privacy Contact. Our team is available to assist you and address any inquiries promptly.

Our Philippines operations can be reached at 6018 J.D. Villena St.6th Floor, Poblacion Makati City, Metro Manila, 1210 and on (02) 86719331.

How can you review, update, or delete the data we collect from you?

You have the right to review, update, or delete the personal data we collect from you. To exercise these rights or make any data-related requests, please contact us using the information provided in this Privacy Policy. We will respond to your requests in accordance with applicable law and with the retention obligations described in this Policy.

Quotable offers a variety of payment methods to facilitate transactions, including:

Credit Cards
Debit Cards
Bank Transfers
Online Payment Gateways

Our payment processing uses third party services, which are secure and compliant with industry standards to protect your financial information. Besides general payment information, Quotable does not store credit card information in any database Quotable controls what so ever. Quotable is not a bank, financial institution, or money transmitter, and does not hold or custody funds.

If you use the payment functionality of the platform, a payment account is opened in your company’s name with the regulated financial institution identified in the Payment Services Addendum, and Quotable acts as your authorized representative in managing the flow of funds in that account. To enable this, we collect and share with that institution the identity, ownership, contact, and financial account information described above, and it processes that information through its own group, including outside your home country, in order to complete due diligence, screen transactions, and meet its regulatory obligations.

Where you provide us with personal information about your representatives, personnel, directors, shareholders, or beneficial owners for this purpose, you confirm that you have given them the notices and have the legal basis required for us and that institution to process it. We will provide you with a template notice on request.

How Does Quotable Handle Addresses for Orders?

Quotable collects and stores shipping and billing addresses to fulfill orders and provide accurate delivery. Your addresses are used solely for order processing and are subject to our strict privacy and security measures. We verify addresses to ensure accuracy and prevent shipping errors. RFQs that you open to the public will expose only the city and country of the request.

How Does Quotable Protect Your Data?

Quotable prioritizes data security and implements measures to protect your information from unauthorized access, disclosure, or alteration. Our data security practices include encryption protocols, secure transmission methods, and regular security audits to identify and mitigate potential risks. In the event of a data breach, we have incident response procedures in place to minimize impact and ensure transparency with affected users. Where required by applicable law, we will notify the relevant supervisory authority and affected individuals within the period prescribed by that law. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

What Are Our Responsibilities as a Quotable User?

As a user of our platform, you are responsible for safeguarding your account information and complying with our terms of service and privacy policy. This includes maintaining the confidentiality of your login credentials, adhering to acceptable use policies, and promptly reporting any security concerns or suspected breaches to us.

How Does Quotable Utilize Third-Party Integrations like ERP Systems?

Quotable may engage third-party services or integrations to enhance our platform’s functionality and provide additional features to users. Any data sharing with third-party service providers is done in accordance with our privacy policy, and we ensure that third parties comply with data protection standards and regulations. Where you connect a third-party system to the platform, information shared with that system is governed by that provider’s own privacy policy and not by this Policy. A current list of our subprocessors is available on request at payops@getquotable.ai.

Automated Processing and AI Features

The platform uses artificial intelligence and automated processing to extract, structure, analyze, and generate data, documents, and recommendations. These features assist users and do not produce legal or similarly significant effects about you without human involvement. We do not use your business content to train third-party general-purpose AI models except where you have expressly agreed. Our payment services provider carries out automated screening of transactions and counterparties for fraud, sanctions, and anti-money laundering purposes, which may result in a payment being delayed, declined, or reported to authorities.

How Does Quotable Handle User Feedback and Reviews?

Quotable collects and publishes user feedback and reviews to improve our services and assist other users in making informed decisions. Our moderation policies ensure that user-generated content meets our guidelines for relevance, appropriateness, and authenticity. Users retain ownership of their feedback and reviews, and we respect their rights in accordance with applicable laws and regulations.

What Customer Support Services Does Quotable Offer?

Quotable provides comprehensive customer support services to assist users with inquiries, issues, and feedback. Our support team is available through various communication channels, including email, live chat, and phone, to address your concerns promptly and effectively.

How Does Quotable Ensure Compliance with Regulatory Obligations?

Quotable is committed to compliance with relevant laws, regulations, and industry standards governing our operations. This includes transparency regarding our regulatory compliance efforts, cooperation with authorities and regulatory bodies as required, and ongoing efforts to maintain alignment with evolving legal and regulatory requirements.

Additional Information

For any additional information not covered in this Privacy Policy, please refer to our Terms of Service or contact us directly for clarification. We are committed to transparency and accountability in our data-handling practices.

Reach out at payops@getquotable.ai.

Quotable Support Hotline (02) 86719331