Privacy Policy

a) Personal Information

When you use QuestWhisper, we collect the following personal information:

• Profile Information: Name, email address, profile picture (from your authentication provider)
• Account Data: User ID, authentication tokens, account preferences
• Communication Data: Chat messages, conversation history, AI interactions
• Usage Data: Feature usage patterns, session duration, interaction frequency

b) Technical Information

• Device Information: Browser type, operating system, device identifiers
• Connection Data: IP address, location data (general geographic region)
• Performance Data: Error logs, response times, system performance metrics

c) Content You Share

• Shared Conversations: Content you choose to share publicly
• Feedback: User feedback, ratings, and support communications
• User-Generated Content: Any content you create or share through our platform

a) Primary Uses

We use your information to:

• Provide Service: Deliver AI-powered conversational assistance and maintain chat history
• Personalization: Customize your experience and remember your preferences
• Authentication: Verify your identity and maintain secure access to your account
• Integration: Connect with your authorized third-party services (Google Workspace)
• Communication: Send service updates, respond to inquiries, and provide support

b) Service Improvement

• Analytics: Analyze usage patterns to improve service quality and performance
• AI Training: Improve AI responses and accuracy (using anonymized data only)
• Bug Fixes: Identify and resolve technical issues and errors
• Feature Development: Develop new features based on user needs and feedback

c) Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent fraud
• Protect the rights and safety of our users and the public

a) Security Measures

We implement comprehensive security measures to protect your data:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Regular security audits and vulnerability assessments
• Secure Infrastructure: Use of secure cloud infrastructure with enterprise-grade security
• Monitoring: Continuous monitoring for unauthorized access and suspicious activities

b) Data Storage Locations

Your data is stored in secure data centers with the following characteristics:

• Geographically distributed for redundancy and performance
• Compliant with international data protection standards
• Regular backups and disaster recovery procedures
• Physical security measures and access controls

a) Authentication Providers

We use secure third-party authentication services to verify your identity:

• Google OAuth: For Google account authentication and profile information
• Other OAuth Providers: Additional authentication options may be available

b) AI and ML Services

Our AI capabilities are powered by:

• Large Language Models: Advanced AI models for natural language processing
• Speech Services: Voice-to-text and text-to-speech processing
• Search APIs: Web search and content extraction services

c) Data Sharing Policies

We only share data with third parties when:

• Required to provide our services (e.g., authentication, AI processing)
• You explicitly authorize the sharing
• Required by law or legal process
• Necessary to protect our rights or the safety of users

a) Limited Use Compliance:

QuestWhisper complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not use your data for advertising, model training, or any unauthorized purpose.

b) Access and Permissions

When you authorize Google Workspace integration, we access:

• Gmail: Read and send emails, search email content (only during active sessions)
• Google Drive: Access and search files, create documents (with your permission)
• Google Docs/Sheets/Slides: Create, read, and edit documents as requested
• Google Calendar: Read events and create calendar entries when requested
• Google Forms: Create forms and access responses as needed

c) Data Handling

• No Permanent Storage: Email content, files, and documents are not stored on our servers
• Session-Based Access: Data is accessed only when you make specific requests
• Minimal Processing: We process only the minimum data necessary to fulfill your request
• No Background Access: We do not access your Google data when you're not actively using the service

d) Revoking Access

You can revoke our access to your Google Workspace data at any time by:

• Visiting your Google Account security settings
• Removing QuestWhisper from your connected apps
• Contacting our support team for assistance

a) Voice Input Processing

Our voice features work as follows:

• Real-Time Processing: Voice input is processed in real-time and converted to text
• No Recording: We do not record, store, or save your voice input
• Immediate Deletion: Audio data is discarded immediately after processing
• Secure Transmission: All voice data is transmitted securely and encrypted

b) Text-to-Speech Output

• Generated Audio: AI responses are converted to speech in real-time
• Streaming: Audio is streamed directly to your device without storage
• No Retention: Generated audio is not stored or retained

a) Public Sharing

When you choose to share AI conversations publicly:

• Content Storage: The shared content is stored on our servers
• Public Access: Shared content becomes publicly accessible via unique URLs
• Attribution: Your name is associated with the shared content
• View Tracking: We track basic view statistics for shared content
• Automatic Expiration: Shared content expires after 30 days

b) Content Control

• Voluntary Sharing: All content sharing is voluntary and user-initiated
• Removal Rights: You can request removal of shared content at any time
• Content Moderation: We reserve the right to remove inappropriate shared content

a) Essential Cookies

We use essential cookies to:

• Authentication: Maintain your login session and security
• Preferences: Remember your settings and preferences
• Functionality: Enable core features and functionality

b) Analytics and Performance

• Usage Analytics: Understand how users interact with our service
• Performance Monitoring: Monitor service performance and reliability
• Error Tracking: Identify and resolve technical issues

c) Cookie Management

You can control cookies through your browser settings, but note that disabling essential cookies may affect service functionality.

a) Retention Periods

• Chat History: Retained indefinitely unless you delete your account
• Account Data: Retained while your account is active
• Shared Content: Automatically deleted after 30 days
• Usage Analytics: Aggregated data retained for up to 2 years
• Authentication Tokens: Refreshed regularly, expired tokens are deleted

b) Data Deletion

We provide options for data deletion:

• Individual Conversations: Delete specific chat conversations
• Account Deletion: Complete account and data deletion upon request
• Automatic Cleanup: Regular cleanup of expired and unnecessary data

a) Data Access Rights

You have the right to:

• Access: Request access to your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data

b) Control Options

• Account Settings: Manage your preferences and settings
• Data Export: Export your chat history and data
• Service Withdrawal: Discontinue service and delete data
• Third-Party Revocation: Revoke access to integrated services

c) Exercising Your Rights

To exercise your rights, contact us through our support channels. We will respond to your request within 30 days and may require identity verification.

a) Transfer Safeguards

• Adequate Protection: Transfers only to countries with adequate data protection
• Contractual Safeguards: Standard contractual clauses for international transfers
• Security Measures: Consistent security standards across all locations
• Compliance: Adherence to international data protection regulations