Privacy

Your server names the person. Storage depends on the plan.

RFQ does not run end-user login. Opaque ids can still identify a person inside your app. Hosted RFQ is an explicit exception to any company line that customer content never reaches Bootstrapware.

Where RFQ records live

Local: JSON stays in that browser's storage. Bootstrapware does not receive it.
BYO ($9.99): we store published app configuration. RFQs, quotes, clarifications, and decisions stay on your backend.
Hosted ($19.99): we store structured workflow text and metadata. Attachment bytes stay on the host. You are responsible for Hosted content.

What MCP and webhooks carry

MCP configures apps. It does not accept titles, summaries, quotes, prices, supplier lists, or file bytes. Hosted webhooks carry ids, the actor, revisions, and a time. They do not carry private bodies, prices, or file URLs. See webhooks and AGENTS.md.

Cancel Hosted

If you cancel Hosted, writes freeze immediately. Export remains for 30 days, then Hosted rows are deleted. Moving Hosted to active BYO keeps the stored rows and does not start that clock. Mechanism: export and purge.