Privacy Policy
Last updated: Draft — not yet published
Who we are
QYVERION is operated by Theodore Warren (“we”, “us”), [To be confirmed: business address]. We are the data controller for personal data about account holders and visitors described here. For data you store about your own customers inside your workspace, you decide how it is used and we process it on your behalf to provide the service.
Based in: Kansas, United States
Data we collect
- Account data: name, email address, password (stored hashed by our authentication provider).
- Workspace content: customers, notes, tasks, projects, calendar events, invoices, estimates, payments, expenses, uploaded receipts and team member details.
- AI assistant content: prompts you send and the proposals returned.
- Technical data: IP address, device and browser information, and logs of activity needed for security.
- Support messages you send us.
Why we use it and legal basis
- To create your account and provide the service — performance of our contract with you.
- To keep the service secure and prevent fraud — our legitimate interests.
- To answer support requests — contract / legitimate interests.
- To meet legal obligations — legal obligation.
- Product improvement and any marketing: [To be confirmed: whether used, and on what basis (e.g. consent)]
Who we share it with
- Service providers that host the app, database and file storage, and provide the AI model used by the assistant.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, tax compliance and invoicing. Paddle processes payment details under its own privacy policy.
- Professional advisers (such as legal and accounting).
- Authorities where required by law.
We do not sell personal data.
Retention
We keep data while your account is active. When a trial or subscription ends, the workspace becomes read-only and data is kept so you can return; it is not deleted automatically. Data is deleted or anonymised when no longer needed or on request. Specific periods: [To be confirmed: retention periods and how to request account deletion]
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your data, to data portability, to withdraw consent, and to complain to a data protection authority. Contact support@qyverion.com to make a request. Rights that apply and response time: [To be confirmed: based on the business's location and customers' regions]
International transfers
Our providers may process data in other countries. Safeguards used: [To be confirmed: confirm with providers (e.g. standard contractual clauses)]
Security
We use technical and organisational measures including encrypted connections, access controls that keep each workspace private, and permission checks on every request for files such as receipts.
Cookies and local storage
We use only essential browser storage to keep you signed in. We do not currently use analytics or advertising cookies. If that changes, this policy will be updated.
Changes and contact
We may update this policy and will change the date above. Questions: support@qyverion.com. See also our Terms.