Privacy Policy

Last Updated: 2026-08-23

Quoflo, Co. ("Quoflo," "we," "us," or "our") operates https://www.quoflo.com and all subdomains under app.quoflo.com (e.g., https://*.app.quoflo.com) (the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Service, including when you complete a form created by a business or event host ("Host").

Hosts determine the questions in their forms and the event or business purposes for which they use the resulting information. A Host may provide an additional privacy notice or have privacy obligations of its own. This Policy describes Quoflo's practices and does not replace a Host's notice.

Information We Collect

We collect information directly from you, from another person who is authorized to provide it for you, from a Host or an integration you choose to use, and automatically from your browser or device. Depending on how the Service is used, this information may include:

  • - Account and identity information, such as name, email address, profile photo, account role, and authentication information;

  • - Contact and profile information, such as phone number and verification status, postal or structured address, locale, timezone, preferred contact channels, birthdate, age or eligibility status, emergency contacts, and location coordinates or map/place metadata associated with an address you select;

  • - Information you choose to provide about gender, self-described gender, sex at birth, accessibility needs, dietary needs, allergies, or other health-related considerations;

  • - Form information, including free-text answers, selections, dates, addresses, phone numbers, boolean responses, consents, waivers, and information about minors, dependents, or other linked participants;

  • - Electronic signature information, including typed or drawn signatures and initials and the identity of the person completing or signing a form;

  • - Event, transaction, and payment information, such as registrations, orders, memberships, payment status, and payment-method identifiers supplied by our payment processor. Quoflo does not store full card numbers on its servers;

  • - Communications and consent records, including operational or marketing preferences, the wording and policy version shown to you, your choice, unsubscribe or suppression status, message-delivery history, provider identifiers, and related timestamps; and

  • - Device, log, and audit information, such as IP address, user agent, browser and device type, pages visited, session or checkout token, timestamps, verification attempts, and security events.

Forms, Signatures, and Profiles

When you complete a form, we store the answers and the context needed to understand the submission, which may include the applicable Host, event, order, profile, signer or completer, form and form version, completion and expiration dates, and consent or verification evidence. We preserve the wording, settings, and choices from the version you completed. A form version that has already been used may be archived rather than destroyed so that historical submissions and signed records retain their meaning.

Some answers may update reusable profile information or custom-field values. For a signed-in customer, that information may be offered back to the customer as a prefill on a later form. Hosts receive the copy associated with their Host profile; a Host does not automatically receive all information in a user's general Quoflo account.

You may save typed or drawn signatures and initials for later use. They are stored as private files and may be offered to you for reuse. If one submission covers multiple participants, the same signature or initials may be linked to those participants when the signer applies it to them.

Loginless Checkout and Draft Forms

Some Hosts allow a customer to complete checkout forms without signing in. Before payment is completed, those draft forms are associated with and available through the checkout session and are excluded from ordinary profile and Host form history. The session is not shown an existing profile's form history or reusable prefills. If payment succeeds, the submissions become part of the applicable profile, order, and Host history.

If a loginless checkout for an existing profile is completed, its form answers remain in the completed-form record but do not update that profile's reusable fields, saved custom-field values, phone number, or communication-consent record. Information entered for a provisional profile may become part of the profile if checkout succeeds. After an unpaid session expires and any pending payment finalization is resolved, we delete its abandoned submissions, answers, signatures, and provisional profile.

How We Use Information

We use personal information to:

  • - Provide, personalize, maintain, and secure accounts, profiles, forms, signatures, registrations, checkouts, and other Service features;

  • - Share relevant registration, profile, form, and transaction information with the applicable Host so it can administer its event or customer relationship;

  • - Verify contact information, preserve evidence of consents and signed agreements, prevent fraud or abuse, troubleshoot, and enforce our Terms;

  • - Process transactions, provide support, communicate about the Service, and deliver operational or marketing messages consistent with your choices and applicable law;

  • - Analyze and improve the reliability and performance of the Service; and

  • - Comply with law, respond to lawful requests, resolve disputes, protect users and others, and establish, exercise, or defend legal claims.

Google Sign-In

If you choose Google Sign-In, we receive profile information such as your name, email address, and profile photo to create, maintain, and secure your account. Google also processes information under its own terms and privacy policy. You may revoke Quoflo's access through your Google security settings.

Payment Processing and Card Data

Payments made through the Service are processed by Stripe. Payment card information is transmitted directly to Stripe, and we do not store full card details on our servers. Payment information associated with a Host may be stored in that Host's Stripe account rather than Quoflo's Stripe account. The Host's and Stripe's handling of that information is also subject to their own privacy practices and applicable law. See the Stripe Privacy Policy.

How We Disclose Information

We disclose personal information in the following circumstances:

  • - To the applicable Host and its authorized staff. Access depends on the user's role; form-answer values and other restricted information are available only to personnel with sufficient permissions;

  • - To service providers that support hosting, private file storage, payment processing, identity or phone verification, communications, analytics, customer support, security, and other operations, subject to appropriate restrictions;

  • - To another person when you direct us to share information or a feature necessarily involves that person, such as a linked participant or signer;

  • - In connection with a merger, financing, acquisition, bankruptcy, or sale of all or part of our business, subject to applicable law; and

  • - To comply with law or legal process, enforce agreements, prevent or investigate wrongdoing, protect the Service or the rights and safety of any person, or establish or defend legal claims.

We do not sell form answers, signatures, or initials to third parties for their independent marketing purposes.

Communications and Consent Records

Operational SMS, marketing SMS, and marketing email choices are managed separately for each Host. When you grant, deny, or withdraw consent, we may retain evidence such as the exact wording shown, policy version, source, choice, actor, timestamp, IP address, user agent, and originating form answer. We may also retain unsubscribe, STOP, bounce, complaint, delivery, and suppression records so that we can apply your choice and avoid sending messages that should not be sent. You may use the unsubscribe instructions in an email or other controls made available through the Service.

Log Data and Analytics

When you visit the Service, we may collect IP address, browser type and version, device information, pages visited, visit dates and times, duration, referral information, and other diagnostic or security data. We may use analytics providers, such as Google Analytics when enabled, to help analyze this usage data. We do not intentionally send private form answers, signatures, or initials to analytics providers.

Cookies

We use cookies and similar technologies to maintain sessions, remember choices, secure the Service, and understand usage. You can instruct your browser to refuse cookies or indicate when a cookie is sent, but some portions of the Service may not work correctly without them.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information. Form-answer values and reusable custom form-field values are encrypted at rest, certain sensitive structured profile details are encrypted at rest, and signature and initial images are stored as private files. We also restrict access according to user roles. No method of Internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.

Data Retention and Deletion

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, preserve form and transaction history, maintain consent and suppression evidence, comply with legal and accounting obligations, prevent fraud, resolve disputes, and enforce agreements. Retention varies by record and may also depend on the applicable Host's relationship with you.

Signed liability waivers may be retained while active and for up to six years after expiration. A waiver without an expiration date may remain active until it is deleted under an applicable policy. If an account or profile deletion affects a waiver that is still within this period, we remove the completion birthdate, redact substantive answer values, delete reusable form-field values, and anonymize the profile or completer. We retain the signature or initials and limited form-version, completion, and audit evidence needed to preserve the signed record, then purge the record after the retention period unless another legal exception applies.

You may request deletion of a Host profile or your full account as described in our Terms, or by emailing support@quoflo.com if you cannot sign in. Deletion is subject to identity verification, the scheduling and cooling-off period described in the Terms, and lawful retention exceptions. Information already provided to a Host or another third party may remain subject to that party's retention practices, so you may also need to contact the Host directly.

Third-Party Websites and Applications

The Service may contain links to services that we do not operate. Their collection and use of information is governed by their own privacy practices. We do not control and are not responsible for third-party sites or services.

Google and YouTube

We use Google and YouTube APIs to embed videos, upload videos to YouTube, and retrieve associated data. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google and YouTube also process information under their own terms and privacy policies.

Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights to know about or access personal information, obtain a portable copy, correct inaccurate information, request deletion, limit or object to certain processing, withdraw consent, or appeal a decision concerning a request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

To exercise a right, contact support@quoflo.com. We may verify your identity and authority before acting. If the request concerns a form or Host profile, please identify the applicable Host. Because the Host may control the underlying event or customer record, we may direct the request to the Host or coordinate with it. A parent, guardian, or other authorized representative may make a request concerning a minor or another person, subject to verification of that authority.

International Data Transfers

Personal information may be transferred to and maintained in the United States or other jurisdictions where we or our providers operate and where privacy laws may differ from those in your location. Where required, we use appropriate mechanisms for international transfers.

Children's and Minors' Privacy

Quoflo accounts and independent use of the Service are intended for people who are at least 18. A Host may, however, configure a workflow in which a parent, legal guardian, or other authorized adult registers, provides information about, or signs a form for a minor. That information may include the minor's identity, birthdate, contact or emergency-contact details, accessibility, dietary, allergy, or other form information, and will be handled as described in this Policy.

Do not submit information about a minor unless you have legal authority and any consent required by law. If you believe a minor has used the Service independently or information about a minor was submitted without proper authority, contact support@quoflo.com. We will review the request and delete or anonymize the information as appropriate, subject to identity and authority verification and lawful retention requirements such as the signed-waiver rule above.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised Policy and update the Last Updated date. If a change is material, we will provide additional notice when required by law. Changes are effective when stated in the revised Policy.

Contact Us

If you have questions or a privacy request, contact us at support@quoflo.com.