Privacy Policy | Quenaire

1. Information we collect

We collect information you provide directly — such as your name, email address, and company name when you register — as well as information generated by your use of the service, including security documents you upload, questionnaire files, and AI-generated answers. We also collect standard server logs (IP addresses, browser type, pages visited) and crash reports.

2. How we use your information

We use your information to provide, maintain, and improve the Quenaire service. Documents you upload are used solely to generate answers to your questionnaires and are not shared with other customers or used to train AI models. We may send you transactional emails (account alerts, answer-ready notifications) and, with your consent, product updates.

3. Data retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by emailing [email protected]. We retain backups for 30 days after deletion as a safeguard against accidental loss.

4. AI and your documents

Your documents are passed to AI inference APIs as ephemeral context — they are never stored by the model provider or used to train any model. We maintain data processing agreements with all AI providers that prohibit retention or training on customer data.

5. Sharing and disclosure

We do not sell your personal information. We share data with service providers who help us operate the platform (cloud infrastructure, email delivery, analytics) under strict data processing agreements. We may disclose data when required by law or to protect the rights and safety of Quenaire and its users.

6. Security

All data is encrypted in transit (TLS) and at rest (AES-256). Access to production data is restricted to the people who operate the service. For details, see our Security page.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. GDPR and CCPA rights are available to applicable users. To exercise any right, email [email protected]. We respond within 30 days.

8. Cookies

We use strictly necessary cookies to maintain your session. We do not use advertising cookies. A Data Processing Agreement (DPA) is available to paid customers upon request.

9. Changes to this policy

We will notify you by email at least 14 days before material changes to this policy take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at [email protected] or write to Quenaire, Inc., 548 Market St, San Francisco CA 94104.