Privacy Policy
Last updated: August 17, 2026
QuickStub ("we", "us") respects your privacy. This Policy explains the personal information we collect, why we collect it, how we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
Information we collect
Account data: your email address and (if you set one) your password hash. Document data: business and worker names, addresses, dates, pay amounts, selected country and jurisdiction, record type, local document currency, entered line values, and an optional last four digits of a Social Security Number or local equivalent. Payment data: handled by our payment processor (Polar Software Inc.); we receive only the order outcome, the plan purchased, and the last four digits of your payment card. Polar processes all charges in U.S. dollars. Technical data: IP address, device/browser type, timestamps, persisted locale preference, and (if you opt in) analytics events. We do NOT collect full Social Security Numbers, full bank account numbers, national identification numbers beyond the optional last-four, or government ID images.
Why we use it (legal bases)
To deliver the Service you requested (performance of a contract); to bill you and prevent fraud (legitimate interest and legal obligation); to send transactional emails such as sign-in links, receipts, and security notices (performance of a contract); to comply with tax, accounting, and anti-fraud obligations (legal obligation); and, where required, on your opt-in consent for analytics or marketing email.
Data minimization
We never ask for a full SSN or its non-U.S. equivalents. The optional last-four field is masked at storage and never displayed in full. We do not store full payment card numbers; payment data is held by our payment processor. Selected country, document currency, and entered line amounts are stored only as part of your draft and document history.
Analytics and your consent
Analytics is off until you allow it. On your first visit we ask, and until you accept, nothing loads from Google: no script, no _ga cookie, no page view. If you accept, we load Google Analytics 4 and send a fixed set of events: landing_view, tool_view, tool_used, tool_cta_click, generator_start, hero_cta_click, hero_demo_interact, section_cta_click, sticky_cta_click, template_showcase_click, and faq_expand. Each one carries only category labels, and only from this list: language, tool, template, page section, FAQ question key, entry source, form field name, and the classification, country, region, and record type you selected. Pay amounts, year-to-date figures, tax estimates, dates, names, addresses, employer names, email addresses, other free text, and user or session identifiers are never sent, and we do not fingerprint your device or run analytics on our servers. Your answer is stored only in this browser, under the key qs:consent:analytics. You can change it at any time from Privacy settings in the footer: declining or withdrawing stops further events, sets Google's opt-out flag for our measurement id, and deletes the _ga and _ga_* cookies your browser allows us to delete.
Who we share it with
Sub-processors: Polar Software Inc. (payments and merchant of record), our hosting provider (compute and database), Resend (transactional email delivery). Each receives only what they need to perform their function and is bound by confidentiality and data-protection obligations. We do not share personal information with advertising networks.
Do Not Sell or Share (CCPA)
We do not sell or share your personal information for cross-context behavioral advertising, and we never have. California residents have the right to confirm this, and to opt out at any time by emailing support@quickstub.app — though there is nothing to opt out of.
Retention and deletion
Account and document data is retained while your account is active and for up to 30 days after closure to handle disputes and chargebacks, then deleted. You may request immediate deletion (GDPR Art. 17 / CCPA right to delete) by emailing support@quickstub.app; we will process within 30 days, subject to legal obligations to retain billing records.
Your rights
Subject to applicable law you have the right to access, rectify, port, restrict, object to processing, and request erasure of your personal information. EU/UK residents may lodge a complaint with a supervisory authority. To exercise any right, email support@quickstub.app from the address on file; we will verify the request and respond within 30 days.
Security
Personal data is encrypted in transit (TLS 1.2+) and at rest. The optional SSN-last-four is encrypted with an application-level key separate from the database. Access to production data is limited to staff who need it for support and security.
International transfers
Our infrastructure may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses (SCCs) for transfers from the European Economic Area, the United Kingdom, and Switzerland.
Contact
Privacy questions or requests: support@quickstub.app. If you believe we have not addressed your concern, you may contact your local data-protection authority.
This page is informational only and does not constitute legal, tax, or financial advice. Please consult a qualified professional before relying on it.
Questions? Email support@quickstub.app.