Privacy Policy

1. Data we collect

We collect only what we need to run the Service.

1.1 Data you give us

• Account data: email address, password hash, display name, avatar, workspace name.
• Workspace content: the sites, searches, content and settings you track in the Service.
• Billing data: plan, order history and payment status. Card details go directly to Stripe — we never see or store them.
• Support data: anything you send us by email or through in-product feedback.

1.2 Data we collect automatically

• Device data: device type, operating system, browser and version, screen size, IP address.
• Log data: pages visited, timestamps, actions taken, time on page, error traces.
• Cookies and similar technologies: to keep you signed in, remember preferences and measure usage.

1.3 Data from third parties

If you sign in with Google or Facebook, we receive the identifier, email address, name and avatar those providers share with us. We do not receive your password from them.

2. How we use it

• to create and secure your account and workspace;
• to deliver the Service — tracking searches, producing reports, publishing changes you ask for;
• to process payments, manage subscriptions and credits, and handle support requests;
• to diagnose faults, prevent abuse and protect the Service;
• to send service notices, and — only if you opt in — product updates you can unsubscribe from at any time;
• to meet legal obligations.

Where the law requires a legal basis (for example under the GDPR), we rely on performance of our contract with you, our legitimate interest in operating and securing the Service, your consent where we ask for it, and compliance with legal obligations.

3. Sharing

We do not sell your personal data. We share it only with:

• Service providers who process data on our behalf under contract — hosting, object storage, email delivery, payment processing (Stripe) and product analytics;
• Your workspace members — other people you invite can see workspace content and member names;
• Authorities, where we are legally required to disclose;
• A successor entity, in a merger or acquisition, subject to this policy.

4. International transfers

We operate globally, so your data may be processed in countries other than your own. Where we transfer personal data out of a region with transfer restrictions, we use an approved mechanism such as the EU Standard Contractual Clauses.

5. Retention

We keep your data for as long as your account is active. When you delete your account, we remove your workspace and its content after the cooling-off period shown in the product, except where we must keep records longer for legal, tax or anti-fraud reasons. Backups age out on their own cycle.

6. Security

We use encryption in transit, hashed passwords, access controls and audit logging. No system is perfectly secure; if a breach affects your data we will notify you and the relevant regulators as required by law.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your personal data, to object to processing, and to withdraw consent. Much of this is available directly in account settings; for anything else, email privacy@querywin.com and we will respond within the period required by applicable law. You also have the right to complain to your local data protection authority.

8. Children

The Service is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

9. Changes

We may update this policy. We will change the “Last updated” date above and, for material changes, notify you in the product or by email before they take effect.

10. Contact

Questions or requests about your data? Email privacy@querywin.com.