Quovec™ (the “Service”) provides two business tools under one company. The Quovec COO Engine is an operating-intelligence platform for multi-unit operators — it reads your store sales, accounting, labor, and cash-flow data and produces findings, alerts, and recommendations. Quovec Lease IQ is a lease-leverage tool for commercial tenants — it reads the lease documents and operating data you give it and produces abstracts, critical dates, CAM/NNN reviews, fair-market benchmarks, and drafted correspondence held for your approval. This policy explains what we do with the data you give either product. It applies to the Quovec websites, web applications, mobile apps, and the Claude (MCP) add-on.
1. Who this covers
Quovec is sold to organizations, not consumers. Across both products, most of what you provide is business information — for the COO Engine, your store operating and financial records; for Lease IQ, your leases, CAM statements, and lease financials. We also process a small amount of personal information, mainly the account details of the people who sign in, and any personal details that happen to appear inside documents or records you provide.
2. What we collect
- Account information — name, work email, organization name, hashed password or identity-provider identifier, and role.
- Customer Data you provide — Quovec COO Engine — your point-of-sale and sales records, accounting and profit-and-loss (P&L) data, bank and cash-flow data, labor and scheduling data, and related operating metrics. Much of this is drawn, at your direction, from business systems you connect (see Connected data sources below).
- Customer Data you provide — Quovec Lease IQ — lease documents and photographs of leases, CAM and NNN reconciliation statements, rent schedules, optional store sales figures, and other lease-related figures, plus any notes you enter.
- Financial data. Collectively, the sales, P&L, cash-flow, banking, rent, and occupancy-cost figures described above are your financial data. We treat all of it as confidential Customer Data, we do not sell it, and we do not use it to train third-party AI models.
- Information we generate — the findings, summaries, recommendations, and draft correspondence the Service produces from the data you provide.
- Operational records — activity, security, and diagnostic logs (for example, timestamps, IP address, and user agent).
- Connected data sources — if you connect a business system, we ingest data from it at your direction and only to run the Service. Examples include QuickBooks (accounting), Toast or another point-of-sale system (sales), a payroll provider such as Paychex, Gusto, or ADP (labor), and your bank via Plaid (cash-flow). You can disconnect a source at any time.
- Billing information — plan, invoices, and payment status. Card details are entered directly with our payment processor (Stripe); we never see or store your full card number.
- Mobile app permissions — if you photograph a lease, the app uses your camera solely to capture those pages. If you use voice features, audio you speak is processed to transcribe and respond to you. If you enable notifications, we store a push token to send you critical-date and approval alerts. All are optional, and the apps work without them.
We do not use advertising identifiers, we do not track you across other companies’ apps or websites, and we do not build advertising profiles.
3. How we use it
- To provide the Service — read your leases and operating data, produce findings and recommendations, track dates, and prepare drafts for your review.
- To authenticate you and keep your organization’s data isolated from every other organization.
- To notify you about renewals, option windows, alerts, and items waiting for your approval.
- To bill you, provide support, and respond to your requests.
- To secure the Service — detect abuse, investigate incidents, and maintain the audit log.
- To meet legal obligations.
We may use aggregated, de-identified data that does not identify you, your organization, or any individual to operate and improve the Service.
4. AI processing
The Service uses third-party AI to help read lease text, analyze your operating data, and prepare draft correspondence and recommendations. That data is sent to the provider solely to process it for you, and your data is not used to train third-party AI models. Where you use voice features, your speech is transcribed and synthesized by our voice providers solely to operate the feature. Findings are informational and may contain errors, so you should verify them — and any extracted lease terms against your executed lease — before acting.
6. We do not sell your data
We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not sell or license your lease documents, operating records, or portfolio data to landlords, brokers, data brokers, or anyone else.
7. How we protect it
We maintain administrative, technical, physical, and organizational safeguards designed to protect Customer Data against unauthorized access, disclosure, alteration, and destruction. These include strict logical separation of each customer’s data, access controls operating on a least-privilege basis, encryption of data in transit and of sensitive fields at rest, immutable activity logging, and periodic review of our controls.
We do not publish the design, configuration, or implementation detail of our security architecture. That information is confidential and constitutes a trade secret of Quovec; disclosing it would materially increase risk to every customer on the platform. Customers with a diligence requirement may request a security overview under a non-disclosure agreement by writing to admin@quovec.com.
No method of transmission or storage is completely secure, and we do not warrant absolute security. Where a security incident affects your personal information, we will notify you in the manner and within the time required by applicable law.
8. Retention & deletion
We retain your documents and data for the life of your account and for up to twenty-four (24) months after the account is closed, after which they are deleted. Tamper-evident audit records may be kept longer where required for security and legal compliance.
You can delete your account and all associated data yourself, at any time, from inside the app — go to Account & data → Delete account. This permanently removes your organization, records, documents, comparables, reports, and findings. It cannot be undone. You may also request export or deletion by emailing admin@quovec.com.
9. Your rights
Depending on where you live, you may have the right to access, correct, port, or delete your personal information; to know what we collect and why; to opt out of any sale or sharing of personal information (which we do not do); and to limit the use of sensitive personal information. Residents of California, Colorado, Connecticut, Virginia, Utah and other US states with privacy laws, and individuals in the EU and UK, may exercise these rights.
To exercise any right, email admin@quovec.com. We will verify your request and respond within the time the law allows. We will not discriminate against you for exercising a privacy right. You may use an authorized agent where the law permits. If you are in the EU or UK, you may also lodge a complaint with your supervisory authority.
10. International transfers
We operate from the United States. Your data may be processed in the United States and in other countries where we or our sub-processors operate. Where required, we rely on appropriate safeguards for those transfers.
11. Children
The Service is a business tool intended for use by people aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, email admin@quovec.com and we will delete it.
12. Changes to this policy
We may update this policy. Material changes take effect on notice — for example, by posting an updated version here and re-prompting acceptance inside the app. The version and effective date at the top of this page always reflect the current policy.
13. Contact us
Questions about this policy, your data, or your account: admin@quovec.com.
The full contracting terms, including the binding agreement you accept when you create an account, are in the Terms of Service and in the signed agreement inside each app — for the COO Engine at app.quovec.com/legal, and for Lease IQ at leaseiq.quovec.com/legal.