Quote & Cut

The plugin also sends your saved API key, a site UUID and your site domain in request headers for licensing, validation, usage tracking and abuse prevention.

The plugin contacts external services only for the features described below. It does not load remote JavaScript or remote executable code. The plugin contacts the following Quote & Cut endpoints:

• https://api.quoteandcut.com/licensing/* – account activation, API key validation, service status and quota/entitlement resolution. Called when an API key or activation token is checked or saved, when service account status is displayed, when the service account status is manually refreshed, and periodically or after cache expiry as needed to keep the connected service account status current.
• https://api.quoteandcut.com/nesting/* – nesting and quote calculation. Called when a customer submits a quote on the frontend. The plugin sends job data required for nesting, which may include geometry, material, sheet, quantity and nesting-configuration data. Active, completed and failed jobs are retained only temporarily by the Quote & Cut API while queued, processed, acknowledged, expired or retained briefly for troubleshooting before automatic removal.
• https://www.quoteandcut.com/exchange-rates/setup-exchange-rates.json – public currency-conversion data used during the setup wizard.

The plugin also exposes one inbound REST endpoint on your WordPress install:

• /wp-json/quoteandcut/v1/license-bump – receives account-status webhooks from api.quoteandcut.com . Requests are verified using an HMAC-SHA256 signature and timestamp check. This endpoint only refreshes the plugin service-status cache; it does not read or modify site content.

Quote & Cut service terms: https://www.quoteandcut.com/terms-conditions/ Quote & Cut privacy policy: https://www.quoteandcut.com/privacy-policy/

The plugin contains admin links to Quote & Cut account, pricing and setup pages. These are normal outbound links opened by the administrator; they are not remote code loads.

Source code for bundled libraries

This plugin bundles third-party browser libraries and locally hosted font files. Readable equivalents or source packages are available as follows:

• Quote & Cut DXF geometry compatibility helper – MIT License. Readable source: assets/js/quoteandcut-dxf-geometry-compat.js ; contains the small vector/curve subset used by the first-party assets/js/DXFGeometry.js file, derived from three 0.124.0 source: https://www.npmjs.com/package/three/v/0.124.0
• DXFGeometry.js and all other Quote & Cut PHP, JavaScript, CSS, SVG, PNG and POT files not listed as third-party assets are first-party Quote & Cut files distributed under GPLv2 or later as part of this plugin.
• jsPDF 4.2.1 – MIT License. Minified: assets/vendor/js/jspdf.umd.min.js ; readable: assets/vendor/js/jspdf.umd.js ; source: https://www.npmjs.com/package/jspdf/v/4.2.1 jsPDF is bundled locally under the MIT licence. Quote & Cut uses jsPDF only to generate and save order parts-list PDFs in the WooCommerce admin. The bundled jsPDF UMD build has been locally patched to remove the unused pdfobjectnewwindow output mode because that mode would otherwise contain a fallback reference to an external PDFObject CDN script.
• dxf-parser 1.1.2 – MIT License. Minified: assets/js/dxf-parser.min.js ; readable: assets/js/dxf-parser.js ; source: https://www.npmjs.com/package/dxf-parser/v/1.1.2 and https://unpkg.com/dxf-parser@1.1.2/src/ The bundled dxf-parser has been locally patched to keep values the importer needs (a layer’s line type, flags, plot flag and true colour; an ellipse’s extrusion direction; a spline’s weights; an entity’s true colour) and to count the entity kinds it does not read. Each change is marked “Quote & Cut:” in the readable file, which the minified file matches.
• Inter and Montserrat font files via @fontsource 5.0.17 – SIL Open Font License 1.1. Files are stored in assets/vendor/fonts/ ; sources: https://www.npmjs.com/package/@fontsource/inter/v/5.0.17 and https://www.npmjs.com/package/@fontsource/montserrat/v/5.0.17

Bundled third-party licenses and first-party asset notes are listed in assets/vendor/THIRD-PARTY-LICENSES.txt .

Privacy

Quote & Cut stores uploaded original DXF files, generated preview images and returned layout files in your WordPress uploads directory. Related job data, quote-context hashes/signatures and file paths may also be stored in WooCommerce cart data, order item meta and plugin settings. Quote folders neither attached to an order nor in a customer’s cart or session are eligible for automatic cleanup after a grace period, currently 48 hours by default; a quote in a cart or session is kept while it lasts (a guest’s cart and session for as long as the session, a logged-in customer’s cart until it is emptied). Order files are retained for fulfilment unless manually removed or handled under the store owner’s retention policy.

If diagnostic mode is enabled by the site administrator, additional calculation and pricing breakdown details may be stored and shown to administrators inside WordPress for troubleshooting.

The plugin sends the configured API key, site UUID and site domain to Quote & Cut in request headers for licensing, validation, quota/usage tracking and abuse prevention.

For frontend abuse protection, the plugin uses temporary rate-limit counters keyed by a hash of the visitor IP address plus the site’s Quote & Cut site UUID. Raw IP addresses are not intentionally stored in the database or written to disk by the plugin for this purpose, and the counters expire automatically.

During setup, the plugin may contact the Quote & Cut exchange-rate feed. Public exchange-rate requests may include normal HTTP request metadata and a plugin User-Agent containing the site URL.

The plugin exposes a signed inbound REST webhook endpoint for Quote & Cut account-status change notifications. Valid requests update only the plugin service-status cache.

Site owners should review and update their customer-facing privacy notices before enabling uploads and cloud processing, including what files/order data are collected, what cleaned geometry/job data is sent to Quote & Cut, and how long files are retained.

Service privacy policy: https://www.quoteandcut.com/privacy-policy/ Service terms and conditions: https://www.quoteandcut.com/terms-conditions/