1. Introduction  

Your privacy and data security are our top priorities. We understand that the data such as documents you upload to our system are sensitive, and we want to be transparent about how we protect them. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or use our services. 

2. Information We Collect  

We may collect the following types of information: 

• Personal Information: Name, email address, payment details, and any other information you provide. 

• Usage Data: IP address, browser type, device information, and interactions with our website. 

• User uploaded data: prompts, files inputted into our product 

3. How We Use Your Information  

We use your information to: 

• Provide, maintain and improve Questtor and its features. 

• Process and analyse documents, prompts and other content you submit to the platform. 

• Provide AI-assisted functionality, including document review, question answering, summarisation and risk identification. 

• Authenticate users, process payments and manage customer accounts. 

• Monitor platform performance, troubleshoot issues and maintain security. 

• Communicate with you regarding your account, service updates and support requests. 

• Comply with applicable legal obligations. 

AI Processing 

Questtor utilises third-party AI infrastructure providers and large language models to deliver AI-powered features within the platform. Our current AI infrastructure includes: 

• Cortecs AI (LLM routing and orchestration) 

• Tensorix (model hosting provider) 

• OVHcloud (model hosting provider) 

Models used by Questtor may change over time, but are always open source. 

Uploaded documents, prompts and generated outputs may be processed by these providers solely for the purpose of providing the requested service. 

Questtor does not permit AI providers to use customer data to train or improve their models unless explicitly stated otherwise and agreed with the customer. We select providers that contractually restrict the use of customer data for model training wherever possible. 

4. Data Sharing and Disclosure  

We never share your data without your explicit consent. We do not sell or rent your data. However, we may share information with: 

• Service providers assisting us in operating our business. 

• Legal authorities if required by law. 

• In the case of business transfers, such as a merger or acquisition. 

5. Data Security  

We implement technical and organisational measures designed to safeguard customer information against unauthorised access, loss, misuse, alteration or disclosure. 

Our services are hosted on Google Cloud Platform, which maintains internationally recognised security certifications, including ISO 27001 and SOC 2. 

Security measures employed by Questtor include: 

• Encryption of data in transit using TLS/SSL. 

• Encryption of stored data through Google Cloud services. 

• Role-based access controls to limit access to authorised personnel. 

• Authentication and authorisation mechanisms designed to protect customer accounts. 

• Monitoring, logging and auditing capabilities to support incident detection and response. 

Questtor personnel access customer data only when necessary to provide support, maintain the service or fulfil contractual obligations, and access is restricted to authorised individuals. 

6. Data Retention 

We retain personal information, uploaded documents and AI-generated outputs only for as long as necessary to provide our services, comply with legal obligations, resolve disputes and enforce agreements. 

Customers may request deletion of their information at any time by contacting us at info@questtor.com 

7. Your Rights  

Depending on your location and applicable laws, including the UK GDPR and EU GDPR, you may have the right to: 

• Access your personal information. 

• Correct inaccurate information.

• Request deletion of your information. 

• Restrict or object to processing.

• Request portability of your data. 

• Withdraw consent where processing is based on consent. 

• Lodge a complaint with a supervisory authority. 

8. Changes to this policy  

We may update this Privacy Policy from time to time. The latest version will be posted on our website with an updated effective date. 

9. Contact Us  

If you have any questions, please contact us at info@questtor.com