سياسة الخصوصية

This Privacy Policy explains what personal data QtecX collects, why, how our systems check and learn from the work done on QtecX, who helps us process it, how long we keep it and what rights you have. It applies to the QtecX platform, its desktop app, its other apps and its websites at https://qtecx.si.

The controller of your personal data is QtecX, the company that provides the service. Postal address: available on request at hello@qtecx.si.

Data-protection contact: hello@qtecx.si (subject "Privacy"). This address reaches the people responsible for data protection at QtecX, and it is the place for every privacy question and request, including from the European Union and the United Kingdom.

QtecX is a global service. Everyone gets the same protections and the same tools, wherever they live, and we also follow the privacy law of the place where you are, including the EU and UK General Data Protection Regulation (GDPR), Turkey's Law on the Protection of Personal Data (KVKK), Egypt's Personal Data Protection Law (PDPL) and US state laws such as the California Consumer Privacy Act (CCPA, as amended by the CPRA). "Your rights and choices" sets them out side by side.

In short

• We collect what we need to run QtecX, keep it safe and improve it.
• Our systems automatically check the work done on QtecX: messages, the agent's replies and actions, outputs, tool use and errors. This keeps the service safe and working, and it is always on.
• People at QtecX look at your content only under fixed rules: a security incident, an abuse report, support you ask for, or a small quality sample. Every access is logged.
• We use content to improve the agent and to train our own models. You can turn this off in Settings › Data, on every plan, at any time. Secrets, keys and personal details are removed first; private and temporary work is never used.
• Your corrections teach the agent for you first. What it learns for everyone is shared only without anything that identifies you.
• In the desktop app the agent works on your own computer, only in the folders you allow; your code backup is never checked or used for training.
• With your own key, your provider bills you and handles your requests under its own terms.
• We do not sell or share your personal data for advertising, and we use no advertising trackers.
• You can download your data and delete your account at any time; see Data Requests.

What changed in version 2.0: we explain how our systems automatically check every session and its outputs, when a person at QtecX may look at your content and how those looks are logged, what the model-improvement setting covers and what it does not, how the agent learns from your corrections, how long these records are kept, your own key, connected apps, what members of a shared project see, QtecX as the controller of your data, and the rights of people in Egypt and under the EU AI Act. Code search for the desktop app now runs on our own servers, so no outside company receives your code for it. Because these changes are important, every account is asked to accept version 2.0; for accounts created before 2026-10-28, it applies from 2026-11-27, and nothing in it applies to data processed before then. Earlier versions stay available: 1.4, 1.3, 1.2, 1.1 and 1.0.

Ticking the box at sign-up confirms that you have read this policy. It is not your consent to processing, except where this policy asks for your consent separately.

What we collect

Account data

Your name and handle, your QT number, your email address, your password (stored only as a secure hash), your 2-step sign-in settings, the accounts you sign in with (for example Google or GitHub) and your profile picture, if you add one.

Your content

Your prompts, chats and messages with the agent and with other people; files you upload, including images and voice notes; projects, sessions and team spaces you create or join; files inside a cloud computer, where cloud computers are offered; outputs the agent produces for you, including code, sites, apps, games, documents, designs, generated images, audio, video and 3D models; hosted sites and posts you publish; the feedback, ratings and corrections you give; and what the memory keeps about your preferences and projects.

The agent's work

The steps the agent takes for you: which tools it used, what it sent to them and what came back, the commands it ran and their output, the pages it read, the files it wrote or changed, its plans and to-do lists, and the errors, retries and fixes along the way.

On your own computer (the desktop app)

In the desktop app the agent works on your computer, only inside the folders you choose to allow, with the rights you give each folder, and asks before risky steps unless you told it not to.

• What leaves your device: the files and parts of files the agent reads to do your task, the commands it runs and their output, the pages it reads in its browser, and the changes it makes. They are sent to our servers and to the AI model providers to produce the answer, the same way a file you upload is. Apart from the code search and the code backup described below, files the agent does not open stay on your device.
• What stays on your device: the full path of the folders you allow, the permission log of what the agent did on your device, the sign-in and device keys (sealed by your system's keychain), and the code-search index of your project (in the project's .qtecx/ folder).
• Code search: to build that index, pieces of your code files are sent to our servers, which turn them into numbers (embeddings) on our own machines and keep nothing; the numbers come back and are stored on your device. No outside company receives your code for this.
• Device pairing: when you connect a device, we record its name, its system (for example Windows), the app version, a public key and when it was last seen. You can remove a device at any time, and a removed device can no longer connect.
• Working files: the agent keeps its notes for a build (the to-do list, decisions, memory notes, lessons and error logs) in the project's .qtecx/ folder.

Code backup (desktop projects)

A desktop project keeps an encrypted backup copy of its code on our servers, with its versions, so you can restore your work on another device and, in the default mode, see it on the web. It includes the project's .qtecx/ working files. Files that usually hold secrets (for example .env files and keys) and rebuilt outputs (for example node_modules) are left out; large files such as images and models are stored once by their fingerprint.

• Default mode: the key is held in our server's key vault. This lets us restore your code to any of your devices and show it to you on the web. Our systems can decrypt it only to do that: the backup is never used to improve QtecX or to train models, and it is not part of the automated checks, in either mode. People at QtecX do not look at it except to fix a problem you asked us to fix, or where the law requires.
• Private mode: the key stays on your devices and is protected by a recovery code that only you have. We store only encrypted data we cannot read, so we cannot show it on the web or use it for anything. If you lose every device and the recovery code, we cannot recover your code. When you switch to private mode, the versions saved before stay readable in the default mode until you delete them; you can delete them when you switch.
• How long: versions are kept as long as the project and your account exist, so you can go back to any of them. They are deleted when you delete the project's backup, the project or your account.

Your own key

If you connect your own account with an AI provider (QtecX 1 Key), we keep the key sealed (encrypted with its own lock, which is locked again with our server's master key), we show only its last four characters, and we open it only for the call you asked for. We also keep the provider you chose, the models it offers you and your choices for them.

Connected apps

When you connect an app or a tool server (for example through the Connectors in the composer or an MCP server you add), we keep the connection, the permissions you gave, and its sign-in token, sealed like your own key. We record what the agent asked the connected app to do and what came back.

Usage, credit and purchase records

How you use the service (which features, when); your credit balance and what spent it; your plan, the purchases you made and their status, your country and an invoice reference. Payment card details are collected by Paddle, never by us.

Technical and security data

IP address, device and browser type, request timestamps, sign-in events, the devices you signed in from, the desktop app's version and its update checks, and error reports.

Records our checks make

What our automated checks find in a session (described below): quality and error signals, safety flags, and short excerpts of the content that caused them; and, when a person at QtecX looks at your content, a record of who looked, what, when and why.

Records of your choices

The version of the Terms of Service and this policy you accepted and when; the update notices you were shown; your data-control setting; your cookie choice; your answer to the age question (18 or older, or 13 to 17; never your date of birth); that you confirmed you are 18 or older when you bought something.

Sign-up review data

If your account waits in review, the language you chose and how you came to QtecX (for example the invite that brought you).

Reports

When you report content or appeal a decision, what you wrote and the content concerned.

How our systems check the work done on QtecX

What is checked, and why

QtecX runs an AI agent that writes code, runs programs, browses the web, builds games and documents and acts in connected apps. To keep that safe and working, our systems automatically analyse every session: the messages, the agent's replies, its steps and the tools it used, the outputs it made (code, games, documents, sites, projects), and the errors along the way. They do this to:

• keep people safe: find illegal content, child sexual abuse material, phishing, malware, fraud and other abuse, and stop it;
• keep the service secure: find attacks on QtecX, on other people or on their computers, leaked secrets, and attempts to get around limits or safety checks;
• keep the service working well: find steps that fail, answers that are wrong, tools that break, and slow or costly paths, and fix them;
• improve QtecX, as the next section explains, for people whose setting allows it.

What the checks are not

• They do not look into the code backup, in either mode, or into files on your computer that the agent did not open.
• They are not used to build an advertising profile, to rate you as a person, or to infer things such as your health, beliefs or sexual life.
• They do not make decisions with legal or similarly significant effects about you on their own. A check may stop a step, refuse a request, or hold an output or a hosted site for review; a person decides before an account is closed, and a person reviews every appeal.

Always on

These checks are part of running a safe service. They are always on, for every account, including people who turn off model improvement, because without them we could not protect you, other people or the service. Turning off model improvement stops your content being used to improve the agent or train models (next section); it does not stop safety and security checks.

What the checks keep

Most results become counts and statistics with nothing that identifies you (for example "this tool failed in 2% of builds"). A check that needs to keep content keeps only a short excerpt with the signal, for the time shown under "How long we keep it".

When a person at QtecX looks at your content

People at QtecX do not read your sessions, projects or files out of curiosity or for marketing. A person may look at your content only in these cases:

1. Security incident: to investigate and stop an attack, a breach or a leak.
2. Abuse: when someone reports content, when an automated check flags it, or when an appeal needs a decision; this can include the messages of other members of a shared session, where they are part of what was reported.
3. Support you ask for: when you ask us to fix a problem, we look at what you allow and only what the fix needs.
4. Sampled quality review: a small random sample of sessions is reviewed by trained people to check the agent's work. Samples are taken only from accounts whose model-improvement setting is on, never from people under 18, never from items you mark private or temporary, and never from the code backup. We hide names, emails and other identifying details where we can.
5. The law: when the law or a valid order from an authority requires it.

Every such look is logged: who looked, at what, when and for which of the reasons above. The log is checked regularly, and access is limited to the people who need it for that reason, under a duty of confidentiality. We never look at your sealed keys or tokens.

How we use it, and the lawful basis

Purpose	Lawful basis (GDPR)
Running the service you asked for: your account, the agent, the desktop app and your paired devices, computers, the code backup, projects, sessions, team spaces, your own key, connected apps, hosted sites, credits and support	Contract, Art. 6(1)(b)
Automated checks for reliability and quality of the service you asked for: finding and fixing failed steps and broken tools	Contract, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f)
Safety and security: protecting accounts, preventing abuse, fraud and spam, checking sessions, outputs, hosted sites and generated media for illegal content, malware and phishing, and human review under the rules above	Legitimate interests, Art. 6(1)(f); legal obligation, Art. 6(1)(c), where a law requires it
Improving QtecX, learning for everyone from corrections, sampled quality review and training our own models (next section), with an opt-out you can use at any time	Legitimate interests, Art. 6(1)(f)
Analytics in the EU, EEA, UK and Turkey	Consent, Art. 6(1)(a), given in the cookie banner or the desktop app's first-run question
Analytics elsewhere, with an opt-out	Legitimate interests, Art. 6(1)(f)
Legal duties: tax and accounting records, lawful requests, reports under the EU Digital Services Act, child-safety reports	Legal obligation, Art. 6(1)(c)
Marketing emails, if we ever send them	Consent, Art. 6(1)(a)

You can withdraw consent at any time; this does not affect what we did before.

Improving QtecX and its models

What we do

We use content and usage data from the service to improve QtecX: to make the agent make fewer mistakes, to write better methods and skills it can reuse for everyone, and to train and improve our own AI models that power QtecX. Examples: a step that failed and how it was fixed, an answer you corrected or rated, a task and the work that completed it, a game or document the agent built and how it was checked, and which features are used and how.

Learning from your corrections

When you correct the agent, rate an answer or tell it how you like things done, it learns for you first: your memory and the agent's lessons for you and your projects serve only you, and you can see and delete them in Settings. This personal learning is part of the service and does not depend on the model-improvement setting; you manage it with the memory controls.

What the agent learns for everyone comes only from people whose model-improvement setting is on, is combined from many people, has names, emails and other identifying details removed, and is reviewed by a person before it takes effect.

How we prepare the data

For training we build a separate copy, the training set, only from records that are allowed to be used:

• only from people whose setting is on, and only work done after their setting allowed it;
• never items you mark private or temporary, never the code backup (in either mode), never your sealed keys or tokens, and never a shared project unless every person who contributed to it allows it;
• before anything is stored for training, passwords, keys, tokens and other secrets we can detect are removed, and so are names, email addresses, phone numbers, addresses and other details that identify a person; a record that still carries them is left out;
• the training set carries no account name, email or handle, and it is kept apart from the live service, with access limited to the people who build our models.

No method removes everything every time; we test and improve the removal, and the opt-out is always yours.

Why this is lawful: how we weighed it

We rely on our legitimate interest in a service that works better and more safely for everyone who uses it (Art. 6(1)(f) GDPR). Before using data this way we did the three-step test the European Data Protection Board describes for AI models, and we keep a written record of it, which you can ask for:

1. The interest: improving the agent and our models is a real and lawful interest, and you benefit from it directly.
2. Necessity: real tasks and their outcomes are what teach an agent to do them; we use no more than that needs, and we remove identifying details first.
3. Balancing: you can expect this use, because we tell you at sign-up and in Settings; we limit it with the safeguards in this section; and you can stop it at any time without giving a reason.

Your choice: the opt-out

• Settings › Data › "Use my data to improve QtecX models" turns it off at any time, free of charge, on every plan, with no change to your service. Turning it off is your right to object under Art. 21 GDPR, and we always honour it.
• What turning it off stops: your content being added to training sets, used to train our models, used for what the agent learns for everyone, and sampled for quality review.
• What it does not stop: the automated safety, security and reliability checks; human review for a security incident, an abuse report, support you asked for or the law; and your own personal learning (managed in the memory controls).
• Default: the setting is shown when you sign up and is on by default for every plan (Free, Pro and Max), except for people under 18, for whom it is off by default and only a parent or guardian can turn it on. The same rule applies everywhere.
• Not retroactive. For accounts created before 2026-10-28, content created before 2026-11-27 is used only as version 1.4 allowed.
• Our models must not repeat your data. Before we use a model we trained, we test that it does not reproduce personal data or secrets.

When you turn it off

From that moment your data is not used for new improvement or training work, it is not added to new training sets, and it is not sampled for quality review. When you delete content or your account, it is not used in new training sets either. Improvements and models already made cannot be taken back. Your personal features keep working.

AI providers

The AI model providers that run inside QtecX process your requests to produce answers and media. Where their terms let us choose, they are bound not to use your content to train their own models, and to keep it only as long as they need to serve the request and to prevent abuse. This section is about our own models; your content is never given to another company to train theirs. With your own key, your provider's terms apply instead (next section).

Your own key

If you use QtecX 1 Key with your own account at an AI provider:

• Your provider bills you for the model calls made with your key, under your agreement with it. Those calls do not use QtecX credits; computers, storage and QtecX's own tools still do.
• Your requests go to your provider under its terms. Your prompts, the context the agent sends and the replies pass through our servers to your provider. What your provider keeps, for how long, and whether it trains on them, is decided by your agreement with it, not by us; read its terms.
• Our checks still apply. The work passes through QtecX, so the safety, security and reliability checks and the rules for human review apply as for any session, and so does the model-improvement setting.
• Steps your key cannot do (for example a picture, if your key has no image model) run on QtecX's own models and are marked, unless you turn on "Only my key".
• Removing the key destroys it and its lock. When you delete your account, every key is destroyed and cannot be recovered.

Memory, shared projects and what others can see

QtecX has a memory, so you do not need to repeat yourself. You can see, delete and turn off what it keeps, in Settings.

When you work with other people in a shared project, session or team space:

• Members see the shared work: the messages in a shared session, the agent's replies and steps, the outputs, files and versions, who is present and who did what. What the team settled together is kept in the project's shared memory, because it belongs to the project.
• Owners and admins decide who joins and what each member may do, and they can see the project's activity and usage. They cannot see your private sessions, your private memory or your other projects.
• Your private items stay yours, and you can choose whether others see that you are online.
• When you leave, what you contributed stays with the project, as the project's work.

What you publish (a hosted site, a public post, a public profile) can be seen by anyone.

Connected apps and tool servers

When you connect an app or add a tool server (MCP), the agent can read from it and act in it on your behalf, within the permissions you gave. What the agent sends there, and what that app does with it, is governed by your agreement with that app and its own privacy notice; the app is not our processor. You can disconnect it at any time, and its token is then destroyed. Publishing your work online goes through these connections; you are the publisher of what you publish there.

Who receives data

• Service providers (processors) act only on our instructions, under contracts that protect your data: cloud hosting, email delivery, AI model and media providers, web search, bot protection and others. The full list, with what each one does and where, is on the Sub-processors page.
• Paddle.com, our reseller and Merchant of Record, is an independent controller for your purchase under its own privacy notice. We receive from it only what we need to give you your plan or credits: the purchase, its status, your country and an invoice reference.
• Your own AI provider (with your own key), apps and tool servers you connect, and sign-in providers you choose (for example Google or GitHub) receive what you send them through QtecX, under their own terms.
• Other members of a shared project, session or team space see the shared work, as explained above.
• Professional advisers (legal and tax advisers, accountants) under a duty of confidence, when we need their advice.
• Authorities, when the law requires it, to protect someone's safety, or to report child sexual abuse material.
• A company that takes over the service: your data moves with the service, and this policy keeps protecting it.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

Where data is stored and international transfers

Our servers and main data store are in the European Union. In the desktop app, your files stay on your computer, wherever it is, except what is sent as described above. Some providers are outside the EU and the UK, mainly in the United States; some AI model providers may process requests in other countries, which the Sub-processors page shows. People who run QtecX may reach data from outside the EU, for example from Turkey or the United States, under the same safeguards.

Where a country has no adequacy decision, transfers are protected by:

• the EU Standard Contractual Clauses, with the UK addendum for UK data;
• the EU-US Data Privacy Framework, where the provider is certified;
• for data from Turkey, the standard contracts the Personal Data Protection Authority publishes, notified to it as the law requires;
• for data from Egypt, the permit or licence the Personal Data Protection Center requires;
• for other countries, the safeguards their law requires;
• and each provider's own security measures.

You can ask for a copy of the safeguards that apply to your data at hello@qtecx.si.

How we protect it

Encryption in transit (HTTPS), hashed passwords, 2-step sign-in, an encrypted code backup, sealed keys and tokens, isolated cloud computers where they are offered, a permission gate and a local log for the agent on your desktop, paired devices that prove who they are with their own key, automated checks for abuse and leaks, access controls, a log of every human look at content, regular backups and a written incident plan. If a personal data breach happens, we notify the supervisory authority within 72 hours where the law requires it, and tell affected people without undue delay when the risk to them is high.

How long we keep it

• Account data and content: as long as your account exists.
• Versions of your work (a project's saved versions, document versions and the code backup): as long as the project and your account exist, then deleted with them.
• Cloud computers, where offered: archived and then removed after the days your plan shows (for example 7 days on Free).
• Paired devices, backup settings, your own keys and connected apps: until you remove them or delete your account.
• Records our automated checks keep with content excerpts: up to 90 days, then reduced to statistics with nothing that identifies you. Longer only when they belong to a security incident, an abuse report, a moderation decision or a support case you opened, and then for as long as that case needs (at most the times below).
• Quality-review samples: up to 90 days.
• The log of human looks at content: 2 years, so it can be checked.
• What the agent learned for everyone: kept while it is in use, without anything that identifies you; reviewed at least once a year.
• Training sets: built from allowed records only; a record whose owner turned the setting off or deleted it is not added to any new training set. Training sets are rebuilt and old ones deleted at least once a year.
• Deleted accounts: removed from live systems within 30 days, and from backups when they rotate out (up to 30 more days).
• Technical logs: up to 14 days. Security logs: up to 90 days.
• Credit, usage and purchase records: as long as accounting and tax law require (up to 10 years), pseudonymised where possible.
• Acceptance and notice records: while your account exists, plus the time needed to prove them.
• Reports and moderation decisions: up to 2 years, to handle appeals and repeat abuse; child-safety reports as long as the law requires.
• Analytics: up to 13 months, then aggregated or deleted.

Your rights and choices

QtecX is used around the world, and everyone has the same tools, wherever they live:

• Download your data: Settings › Account › "Download my data". The file includes your paired devices, your desktop backup settings, your connected apps and keys (never the keys themselves) and your data-control choices.
• Delete your account: Settings › Account › "Delete account".
• Model improvement and quality samples: Settings › Data › "Use my data to improve QtecX models".
• What the agent learned for you: the memory controls in Settings.
• Paired devices, the code backup, your own keys and connected apps: their own pages in Settings.
• Cookies: "Cookie settings" at the foot of our pages or in Settings › Data.
• The records our checks keep about you, and the log of human looks at your content: ask at hello@qtecx.si. We give them to you, except where telling you would harm a security or abuse investigation or other people's rights, as the law allows.
• Anything else: hello@qtecx.si.

How to use your rights, and how fast we answer, is on the Data Requests page. We answer within one month, or sooner where the law where you live sets a shorter time (longer for complex requests, and we tell you why). We may ask you to confirm your identity first. The law where you live may give you further rights; the main ones are below, and if yours is not listed, write to us and we honour the rights it gives.

European Union, EEA and United Kingdom (GDPR)

Under the GDPR you have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability, to object to processing based on legitimate interests (including model improvement and analytics), to withdraw consent at any time, not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you, and to complain to a supervisory authority, for example Slovenia's Information Commissioner (Informacijski pooblaščenec), the UK Information Commissioner's Office or the authority where you live. From the EU or the UK, write to us at hello@qtecx.si (subject "Privacy").

EU AI Act

QtecX is an AI system, and we follow the transparency duties of the EU Artificial Intelligence Act: we tell you when you are dealing with AI, and images, audio and video generated in QtecX carry a machine-readable marker where this is technically feasible. We do not use AI for practices the Act forbids, such as manipulating people, social scoring, or recognising emotions or sorting people by biometric data. The AI and Generated Content Terms set out what this means for content you publish.

Turkey (KVKK)

Law No. 6698 on the Protection of Personal Data (KVKK) applies, and this part is our information notice under its Article 10.

• Data controller: QtecX, at the address and email in "Contact" below.
• Purposes and legal grounds (KVKK Article 5(2)): running the service under our contract with you (c); legal duties such as tax records (ç); establishing and defending legal claims (e); and our legitimate interests (f) for the safety, security and reliability checks, for human review under the rules above, and for improving QtecX and its models, with the safeguards and the opt-out above. Training sets are made from data whose identifying details have been removed.
• Special categories of data (KVKK Article 6): we do not seek them. If your content contains them, we process them only to run the service you asked for and as the law allows, and we remove them before anything is stored for training.
• Your explicit consent (açık rıza) is asked only where KVKK requires it: analytics cookies in Turkey run only after you allow them, and you can withdraw that at any time. Your service never depends on it.
• Transfers abroad (KVKK Article 9): our servers are in the European Union and some providers are in other countries, as the Sub-processors page shows. These regular transfers are protected by the standard contracts the Personal Data Protection Authority publishes, which we notify to the Authority as the law requires.
• How we collect it: electronically, when you use the service, the desktop app and our websites.
• Your rights (KVKK Article 11): to learn whether your data is processed and to ask for information about it, to learn the purpose and whether it is used for that purpose, to know who receives it in Turkey or abroad, to have it corrected, deleted or destroyed, to have those changes passed on to those who received it, to object to a result against you that comes only from automated analysis, and to claim compensation for damage from unlawful processing. Write to hello@qtecx.si (subject "KVKK"); we answer within 30 days, free of charge. You may also complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Egypt (PDPL)

Egypt's Personal Data Protection Law (Law No. 151 of 2020) and its executive regulations apply to the data of people in Egypt.

• Legal grounds: we process your data to perform our contract with you, to meet legal duties, for the legitimate interests and with the safeguards described above, and with your consent where the law requires it. Model improvement follows the same rule as everywhere: you can turn it off at any time in Settings › Data.
• Children: the data of a person under 18 is processed only with the consent of a parent or guardian.
• Transfers abroad are made only to countries and providers that give an adequate level of protection, with the permit or licence the Personal Data Protection Center requires.
• Your rights: to know what data we hold and to get it, to withdraw your consent, to have your data corrected, completed, updated or erased, to limit its processing, to be told of a breach that affects it, and to object to its processing where the law allows. Write to hello@qtecx.si (subject "PDPL"); we answer within the time the law sets. You may also complain to the Personal Data Protection Center.

United States (California and other states)

If you live in California or another US state with a privacy law, you have the right to know what personal information we collect and why, to access it, to correct it, to delete it, to opt out of its sale or sharing (we do neither) and of targeted advertising (we do none), to limit the use of sensitive personal information, and not to be treated differently for using these rights. An authorised agent can make a request for you.

• Categories we collect (notice at collection): identifiers (name, handle, email, IP address); account login details; commercial information (plans, purchases, credits); internet and device activity (usage, technical and security data); content you give us and that the agent makes (the contents of your messages, files and projects); inferences we draw only to run and secure the service; and approximate location from your IP address. Each is described under "What we collect".
• Purposes: the ones in "How we use it" and "How our systems check the work". Retention: the times in "How long we keep it".
• Sources: you, your devices, the apps you connect, your sign-in provider and Paddle.
• Sensitive personal information (such as your account sign-in, or the contents of messages between you and other people) is used only to provide and secure the service and as the law allows, never to infer characteristics about you. Using content to train our own models is a use for our own service, not a sale or sharing; the switch in Settings › Data turns it off and also works as your request to limit.

Automated decisions

We do not make decisions that have legal or similarly significant effects on you by automated means alone. Sign-up review is decided by a person. Automated checks may stop a step, refuse a request or hold content for review; a person decides before an account is closed, and a person decides on any appeal.

Children

QtecX is for people 13 years old or older. People under 18 may use it only with the permission of a parent or legal guardian, and only people 18 or older can make payments. Where the law of your country sets a higher age, that age applies. We do not knowingly collect data from anyone under 13. For people under 18, model improvement is off by default and their sessions are never sampled for quality review; the safety checks apply to them as to everyone. The Age Policy explains how a parent or guardian can see, correct or delete their child's data, and what we do when we learn that someone under 13 has an account.

Changes to this policy

We may update this policy. For a material change we tell you at least 30 days before it takes effect, by email and in the app; when a change needs your new acceptance, we ask for it in the app. Changes never apply to data we processed before their effective date. Earlier versions stay available: Privacy 1.4, Privacy 1.3, Privacy 1.2, Privacy 1.1, Privacy 1.0.

Contact

QtecX Postal address: available on request at hello@qtecx.si Privacy and data protection, including requests from the EU and the UK: hello@qtecx.si (subject "Privacy")

Related policies: Terms of Service · Sub-processors · Data Requests · Cookie Policy · Age Policy · AI and Generated Content Terms