Your privacy matters

1. Information We Collect

We collect information you provide directly to us, information we collect automatically when you use our services, and information from third parties.

1.1 Information You Provide

• Account information: name, email address, and password when you create an account
• Profile information: job title, company, and preferences you set
• Payment information: billing details processed securely through our payment providers
• Communications: messages you send us through support, feedback forms, or email

1.2 Information Collected Automatically

• Usage data: features used, actions taken, and time spent within our extensions
• Device information: browser type, operating system, and IP address
• Log data: access times, pages viewed, and errors encountered
• Cookies and similar tracking technologies as described in our Cookie Policy

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, and to communicate with you.

• Provide and operate our products and services
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments and questions
• Analyse usage trends to improve and develop new features
• Detect and prevent fraudulent or abusive activity
• Comply with legal obligations

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

• Service providers: Third-party vendors who assist us in operating our services (e.g., payment processors, hosting providers, analytics tools)
• Legal requirements: When required by law, subpoena, or other legal process
• Business transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets
• Consent: With your explicit consent for any other purpose

4. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfil the purposes outlined in this policy. When you delete your account, we will delete or anonymise your personal information within 90 days, unless we are required to retain it for legal or regulatory reasons.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing activities
• Withdrawal of consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at contact@qualtir.com.

6. Data Security

We take the security of your data seriously. We implement industry-standard security measures including encryption in transit (TLS) and at rest (AES-256), access controls, and regular security audits. Qualtir is ISO 27001 certified and our infrastructure is hosted on Google Cloud Platform, which is SOC 2 compliant. For more details, see our Security page.

7. Google Workspace Extensions

Our Google Workspace extensions operate within your Google account environment. We request only the permissions necessary to deliver the functionality of each extension.

• We do not read, store, or process your Google Docs, Sheets, or Drive files beyond what is required for the extension to function
• We comply with the Google API Services User Data Policy, including the Limited Use requirements
• You can revoke our access at any time through your Google Account settings

8. International Data Transfers

Qualtir operates globally. If you are located outside of the European Economic Area (EEA), your data may be transferred to and processed in countries where our servers or service providers are located. We ensure such transfers are conducted in accordance with applicable data protection laws, including the use of Standard Contractual Clauses where required.

9. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: