Privacy Policy

1. Information We Collect

We collect data necessary to provide the QwryAI platform, including:

• Account and identity data (name, email, authentication metadata).
• Workspace and configuration data (chatbot settings, integrations, prompts, and uploaded content).
• Conversation and support data (messages, tickets, knowledge-base content, and optional attachments).
• Billing and transaction data (plan, subscription status, payment records from payment processors).
• Technical and usage data (IP address, device/browser data, logs, diagnostics, and product analytics events).

2. Data Sources

Data is collected directly from users and workspace admins, through connected services, and automatically from platform usage.

3. How We Use Information

We process personal and customer data to operate and improve the service, including authentication, model-powered responses, support operations, billing, fraud prevention, security monitoring, and legal compliance.

4. Third-Party Services

Depending on enabled features, we use third-party providers such as:

• OpenAI and AI model providers for language and embedding features.
• Stripe for billing, payment processing, and invoicing workflows.
• Google OAuth for authentication and account sign-in.
• Sentry and analytics providers for error monitoring and usage insights.
• Cloud/infrastructure providers (including storage, queues, and caching such as AWS and Upstash where configured).
• Communication and email providers for transactional notifications.

5. Slack

When a workspace admin connects Slack, QwryAI receives the workspace ID and name, the app's bot user ID, and a bot token. The token is stored encrypted (AES-256-GCM) and is used only to read and send messages for your agent.

• We process messages that mention the app in a channel and direct messages sent to the app, with the sender's Slack user ID and any files attached to those messages. Other channel messages are not stored.
• These messages are kept as conversations in your QwryAI workspace, and are sent to AI model providers to generate replies.
• If you add a Slack Action, the agent reads your channel list to find the channel you chose and posts the topic there, with a link to the QwryAI conversation.
• When a member links their Slack account to Backstage, we store their Slack user ID with their QwryAI account.
• Disconnecting Slack in QwryAI, uninstalling the app, or revoking its token deletes the stored token and the connection. Stored conversations follow the retention terms below and can be deleted on request.

6. Data Sharing

We do not sell personal information. We disclose data only to subprocessors and service providers needed to deliver the platform, and to authorities when legally required.

7. Data Retention and Deletion

We retain data for the duration of your account and for a limited period after termination for security, legal, and financial requirements. Typical retention targets:

• Account and workspace records: while account is active.
• Operational logs and security events: up to 12 months.
• Billing and tax records: up to 7 years where legally required.

Deletion requests are handled through support and privacy contact channels, subject to legal hold requirements.

8. Your Privacy Rights

Depending on jurisdiction (including GDPR/UK GDPR and CCPA/CPRA), you may have rights to access, correct, delete, export, or restrict processing of your data, and to appeal where applicable.

To exercise rights, contact support@qwryai.com. We verify requests before processing.

9. Cookies and Tracking

We use essential cookies (for authentication and session management) and may use analytics cookies where configured. See the Cookie Policy for details.

10. International Transfers

Your data may be processed in countries other than your own. Contractual and technical safeguards are used where required by law.

11. Contact

For privacy requests, contact us at support@qwryai.com.