Privacy policy
Last updated 27 July 2026
The short version
The routing console on the home page runs entirely in your browser. Nothing you type into it, including thresholds, approver addresses and quote figures, is sent to us. That changes only if you create a workspace, because a workspace exists precisely to store things on our side so they survive the browser.
What we hold once you create a workspace
Your email address, your saved routing rules, your audit trail, and, if you connect HubSpot, the HubSpot access token you pasted. The token is used to read your quotes and to write quote status back on your instruction. We do not read anything in your portal that your token does not grant, and you can revoke the token from HubSpot at any time without contacting us.
How we sign you in
A magic link sent to your email address. We do not store passwords, because we never ask for one. Sign-in links are single use and expire after fifteen minutes.
Payment
Payments are handled by Stripe. We never see or store your card details. Stripe holds your billing information under its own privacy policy, and it is the source of truth for whether your subscription is active.
Analytics
We use Vercel Analytics, Google tags and Microsoft Clarity to see which parts of this page people use. Vercel Analytics is cookieless and stores nothing on your device. The other two are not placed on the page at all until analytics is on for you, and that is the tag being withheld rather than a setting sent to a tag that is already running. Google tags means two of them, both loaded at that point and not before: a Google Ads conversion tag, and Google Analytics, which records which pages were viewed along with the ordinary things a page view carries, an approximate location from your IP address, your browser and device, and the page you arrived from. Microsoft Clarity records clicks and scrolling, and Microsoft's own FAQ says it keeps recording page views and basic interactions even without cookie consent, which is why withholding the tag is the only honest way to gate it. In the EU and EEA nothing is placed until you press Accept, and if you decline nothing is placed at all. Outside the EU and EEA there is no banner, consent is recorded when the page first loads, and the tags are placed then. Which of the two you get is decided by your browser's own time-zone setting, matched against a named list of EU and EEA zones that includes Cyprus and the French outermost regions as well as every zone whose name begins with Europe; a zone we cannot read is treated as European. You can decline at any time by clearing site data. Analytics never receives anything you type into the console.
Deleting everything
The workspace has a delete control that removes your account, your rules, your audit trail and any stored HubSpot token, immediately. If you would rather someone did it for you, email dario@leanaistudio.com and it will be done by hand. Deleting your workspace does not cancel a subscription, which you cancel from the Stripe billing portal.
Who to ask
QuoteRelay is built and run by Dario Verghi at LeanAI Studio. Questions about any of this go to dario@leanaistudio.com and are answered by a person.