Legal

Privacy Policy

Effective date: 1 January 2025

1. Data we collect

When you create an account, we collect your name and email address. When you use Quarria, we collect the data you enter: business profiles, lenses, questions, prompts, and any signals or reports generated on your behalf. We also collect standard server logs (IP address, browser type, pages visited, timestamps) for security and operational purposes. We do not collect payment card data directly. Billing is handled by our payment processor.

2. How we use your data

Your data is used solely to provide and improve Quarria for you. Specifically: to authenticate your account and maintain your session; to run signal searches against the web sources you have configured; to tune signal relevance based on your interactions; and to generate reports and actions. We do not sell your data to third parties. We do not use your business context, prompts, or outcomes to train shared AI models or to improve the product for other customers.

3. Third parties

Quarria uses a small number of third-party services to operate: a cloud infrastructure provider (Railway) for hosting and database; an AI model provider (Anthropic) for signal analysis; and a web search provider (Exa) for source retrieval. Each provider processes only the minimum data necessary to perform their function. We share no data with advertising networks or data brokers. If you sign in via Google, Google's privacy policy governs the authentication step.

4. Retention

We retain your data for as long as your account is active. If you cancel your account, we retain your data for 30 days to allow recovery, after which it is deleted from production systems. Backup copies may persist for up to 90 days before being purged. You can request immediate deletion at any time by contacting us. See Section 5.

5. Your rights

You have the right to access, correct, export, and delete your personal data at any time. You can export your lenses, signals, and reports from within the application. To request account deletion or to exercise any other data right, contact us at the address on our contact page. If you are located in the European Economic Area or United Kingdom, you also have rights under GDPR or UK GDPR, including the right to lodge a complaint with your local supervisory authority. We will respond to all requests within 30 days.