Privacy Policy

DenebQuote AI is operated by Hearts and Mind Medical Export LLC, a Louisiana limited liability company (subject to verification against the company's formation filing), which is responsible for personal information processed through the Service. Privacy questions and requests: sales@heartsandmindexport.com.

• Account details, such as name, email address, company name and sign-in method.
• Company settings, such as business contact details, a company logo and quotation wording.
• Business records, including quotations, supplier and customer details, pricing, expenses and notes you enter.
• Supplier documents you submit for AI-assisted extraction.
• Trade Intelligence searches and results you choose to save.
• Agreement-acceptance records: accepted document versions, method and time.
• Account-deletion requests and their status.
• Technical information needed to operate, secure and troubleshoot the Service, such as authentication events, request, browser and error information, and logs kept by our service providers.

Please do not upload information that is not needed for your quotation workflow.

• To provide, maintain, secure and troubleshoot the Service.
• To authenticate users and keep each account's records separate.
• To extract supplier-document details at your request for your review.
• To retrieve and save Trade Intelligence information at your request.
• To communicate about accounts, security and the Service.
• To meet applicable legal obligations.

We do not sell personal information. The Service does not include advertising or behavioral-marketing analytics.

When you request supplier-document extraction, the document is sent through Lovable's AI gateway to an OpenAI model for processing. The Service asks the model not to store the request ("store: false"). The Service does not save the original document in its database or file storage; the extracted fields are returned for your review and are not applied to a quotation until you approve them.

That setting is a request, not a guarantee that no provider keeps any transient, security or operational record. Lovable and the model provider may process or retain limited request information under their own terms: [TO BE CONFIRMED: AI provider contracting entity, retention period and permitted uses].

We disclose information only as needed to run the Service, respond to your requests, protect the Service or comply with law. Current providers and recipients:

• Lovable: hosting, managed database, authentication, file storage, server functions, logging and AI gateway.
• OpenAI model via Lovable's AI gateway: supplier-document extraction.
• Google: optional Google sign-in and web fonts.
• Official government data services (currently United States and United Kingdom): tariff and notice requests using the countries, product category and HS code you select. No account or quotation data is sent.

Full subprocessor list: [TO BE CONFIRMED: confirmed subprocessor list].

Public pages are delivered through globally distributed infrastructure. The backend is configured in a Canada region. Backup, log, support-access and AI-processing locations and applicable transfer safeguards: [TO BE CONFIRMED: provider-confirmed locations and safeguards]. Data may be processed outside the country where you are located.

• Account information, company settings, quotations and saved Trade Intelligence lookups are kept while your account is active. You can delete individual quotations and remove your logo at any time.
• You can export your data and request account deletion from Company Settings or by emailing sales@heartsandmindexport.com. We verify ownership, allow a 7-day recovery period to export or cancel, and aim to complete deletion within 30 days of verification, subject to legal requirements.
• Deletion removes account information, quotations, company settings, stored logos and saved Trade Intelligence records.
• We keep only minimal agreement-acceptance audit records and a record that the deletion took place, for [TO BE CONFIRMED: audit-record retention period].
• Supplier documents sent for extraction are not stored by the Service.
• Shared Trade Intelligence cache entries contain only public official-source results, not account data.
• Provider-controlled backups and logs are handled under the provider's retention practices: [TO BE CONFIRMED: provider backup and log retention periods].

Depending on your location and applicable law, you may have rights to access, correct, delete or receive a copy of personal information, or to object to or restrict certain processing. Send requests to sales@heartsandmindexport.com. We evaluate verified requests under the laws that apply to them.

We use reasonable technical and organizational measures, including per-account access controls, to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service uses browser storage to keep you signed in and a first-party cookie, set to expire after seven days, to remember whether the navigation sidebar is open. There are no advertising or third-party analytics cookies. Web fonts are loaded from Google, which receives technical request information such as IP address and browser details.

The Service is for business use and is not directed to children.

We may update this policy. Material changes will be notified in the Service, and you may be asked to accept a new version before continuing to use protected account features.