Privacy policy

Who we are

Last updated: October 2026.

LingoQuote (lingoquote.com) is operated by Barak AI (Kobi Barak), Israel. Email: hello@lingoquote.com. Postal address: available on request. In this policy, “we” and “us” mean Barak AI.

This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it, and your rights. It is for contractors who use LingoQuote (“you”), for the customers of those contractors who receive quotes and documents through LingoQuote, and for visitors to our website.

Our role: controller or processor

Your account data. For data about you and your LingoQuote account (for example your name, email, business details, subscription and how you use the app), we are the controller. We decide how it is used, as described in this policy.

Your customers' data. When you add your customers' details, quotes, photos, signatures and messages to LingoQuote, you decide why and how that data is used. For that data we act as your processor (under the GDPR and UK GDPR) and your service provider (under US state privacy laws). We use it only to provide the service to you and on your instructions.

For business customers, our Data Processing Addendum (DPA) forms part of our Terms of service and sets out how we process your customers' data. A copy is available on request.

If you are a contractor's customer: please contact the contractor first about your data. If you contact us, we will pass your request to the contractor and help them respond.

What data we collect

Account and business details: name, email address, phone number, business name, trade, logo, address, and the details you choose to show on your mini-site.

Content you add: your customers and their contact details, jobs, quotes, the voice notes and photos you use to create quotes, job photos, signed documents and signatures, payment-stage records, messages and reviews.

Subscription details: your plan, billing history and invoices. Card details are collected and handled by our payment provider, named at checkout. We do not see or store your full card number.

Technical data: IP address, browser and device type, sign-in times, and the logs we need to keep the service secure and working.

Customer portal activity: when a contractor's customer views a quote, signs, or leaves a review, we record that activity for the contractor, for example the signature, the name entered, the time, and technical data such as IP address.

Website data: only if you agree to non-essential cookies, data about how you found and used our website. See our Cookie policy.

Why we use data, and our legal bases

To provide the service you signed up for: creating quotes from voice and photos, collecting e-signatures, tracking payment stages, storing job photos, running the customer portal and mini-site, and collecting reviews. Legal basis: performance of our contract with you.

To manage your subscription, billing and taxes. Legal basis: our contract with you and our legal obligations.

To send you service messages, such as account, security, trial and billing notices. These are part of the service, not marketing.

To keep the service secure, prevent fraud and abuse, and fix problems. Legal basis: our legitimate interest in running a safe and reliable service.

Website analytics and advertising: only with your consent. Legal basis: consent, which you can withdraw at any time.

To comply with the law and respond to lawful requests from authorities. Legal basis: legal obligation.

Artificial intelligence

Some features use AI, for example turning a voice note or photos into a draft quote. To do this, the relevant content (such as the voice note, photos and text) is sent to our AI providers, Anthropic and OpenAI.

Our AI providers process this data on our behalf. It is not used to train their models.

AI output is a draft. You review, edit and approve it before anything is sent to a customer. We tell you when content is generated by AI.

We do not use AI to make decisions about anyone that have legal or similarly significant effects.

Who we share data with

We use the following providers (sub-processors), each only for its purpose:

Hosting and database: Supabase (database and file storage, hosted in the EU, Frankfurt) and Vercel (app hosting).

AI: Anthropic and OpenAI.

Messaging: Twilio and Meta (WhatsApp), when messages are sent through LingoQuote.

Email: Resend.

Subscription payments: our payment provider, named at checkout.

Website analytics and advertising, only after consent: Google and Meta.

Your customers and the public: your customers see the quotes, documents and portal pages you share with them. Your mini-site, and the reviews you choose to show on it, are public.

Authorities: only where the law requires it. If our business is sold or reorganised, data may pass to the new owner, who must respect this policy.

We do not sell personal data. A current list of sub-processors is available on request.

Where data is stored, and international transfers

Our database and files are hosted in the EU (Frankfurt, Germany). We operate from Israel.

The European Commission recognises Israel as providing an adequate level of data protection, and reaffirmed this on 15 January 2024. Israel is also covered by UK adequacy regulations. Data can therefore be transferred from the EU and the UK to Israel without additional safeguards.

Some of our providers may process data in other countries, including the United States. Where a country does not have an adequacy decision, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses (with the UK Addendum for UK data), or the EU-US Data Privacy Framework where the provider is certified.

How long we keep data

While your account is active, we keep your data so the service works.

If you delete your account, you have 30 days to change your mind. After that, we delete your account and its content. See our Data deletion page.

We keep billing records and invoices for as long as tax and accounting laws require.

Security and error logs are kept only as long as needed for security and troubleshooting. Deleted data may remain in backups for a limited time until those backups are overwritten.

Your rights in the UK and EU

If the UK GDPR or the GDPR applies, you have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time (this does not affect anything done before you withdrew).

You can export your data at any time from your account.

You can complain to a data protection authority: in the UK, the Information Commissioner's Office (ICO); in the EU, the authority in your country. We would appreciate the chance to help you first.

Our representative in the EU and in the UK: details available on request.

Your rights in the US

Depending on where you live, US state privacy laws may give you the right to know what personal information we hold, access it, correct it, delete it, get a copy of it, and opt out of the sale or sharing of personal information or of targeted advertising. We honour these rights where those laws apply.

We do not sell personal information. Advertising cookies, which some state laws treat as “sharing” or targeted advertising, load only if you opt in, and you can turn them off at any time in cookie settings.

We will not treat you differently for using your rights. Where the law allows, you may use an authorised agent; we may need to verify the request.

How to make a request

Email hello@lingoquote.com. We may need to confirm your identity before we act. We reply within the time the law requires (for example, one month under the GDPR and UK GDPR).

If you are a contractor's customer, see “Our role” above: the contractor is usually the right first contact.

Messages to contractors' customers

Contractors usually share quote and portal links from their own phone.

Where LingoQuote sends a text message, WhatsApp message or email on a contractor's behalf, the contractor is responsible for having the recipient's consent where the law requires it (for example under the US Telephone Consumer Protection Act). Recipients can reply STOP to a text message to stop receiving them.

Children

LingoQuote is a business tool and is not directed at children. We do not knowingly collect personal data from children.

Security

We use technical and organisational measures appropriate to the risk, including encryption in transit and access controls. No system is completely secure.

If a personal data breach affects your data, we will notify you and the relevant authorities where the law requires.

Changes and contact

We may update this policy. If a change is material, we will tell you in advance by email or in the app.

LingoQuote (lingoquote.com) is operated by Barak AI (Kobi Barak), Israel. Email: hello@lingoquote.com. Postal address: available on request.