1. Who we are

Readmyquote (the "Service") is a brand operated by Tsun Company ("we", "us", or "our"), based in Hong Kong SAR. We are committed to protecting your privacy and handling your personal data transparently and lawfully.

For any privacy-related inquiries, contact us at cs@readmyquote.com.

2. Information we collect

We collect the following categories of information:

Account data: email address, hashed password, account creation date.
Form content: form titles, descriptions, fields, and configurations you create.
Submission data: responses submitted through your published forms by your respondents.
Billing data: processed by Stripe; we store only your Stripe customer ID and subscription status. We do not store full payment card details.
Usage data: log files, IP addresses, browser type, pages visited, and timestamps for security and analytics.
Cookies: session cookies for authentication and necessary site functions.

3. How we use your information

To provide, operate, and maintain the Service.
To process subscriptions and payments via Stripe.
To send transactional emails (account confirmation, billing receipts, security alerts).
To respond to your inquiries and customer support requests.
To detect and prevent fraud, abuse, or violations of our Terms of Service.
To comply with legal obligations.

4. Legal basis (for EEA / UK users)

Where the GDPR applies, we process your data on the following legal bases:

Contract: to deliver the Service you signed up for.
Legitimate interests: to maintain security and improve the Service.
Consent: for non-essential cookies and marketing communications (where applicable).
Legal obligation: to comply with tax, accounting, and other applicable laws.

5. Data sharing & sub-processors

We share data with the following trusted sub-processors to operate the Service:

Supabase — database hosting (Singapore region).
Stripe, Inc. — payment processing.
Render — application hosting.

We do not sell your personal data. We only disclose data when legally compelled or to enforce our rights.

6. Data retention

We retain account and form data for as long as your account is active. Upon account deletion, we delete your personal data within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

7. Your rights

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal data.
Receive a copy of your data in a portable format.
Object to or restrict certain processing.
Withdraw consent at any time (where consent is the legal basis).
Lodge a complaint with your local data protection authority.

To exercise these rights, email cs@readmyquote.com.

8. International data transfers

Our infrastructure is hosted in Singapore (Supabase) and the United States (Stripe, Render). By using the Service, you consent to your data being processed in these jurisdictions. Where applicable, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Security

We implement industry-standard security measures: encrypted data at rest and in transit (HTTPS/TLS), hashed passwords, role-based database access (RLS), and regular security reviews. However, no system is 100% secure; we cannot guarantee absolute security.

10. Children's privacy

The Service is not intended for children under 16. We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or via in-app notice. Continued use of the Service after changes means you accept the updated policy.

12. Contact

Tsun Company
Hong Kong SAR
Email: cs@readmyquote.com

Privacy Policy