Skip to main content
Qadiance
Legal

Privacy Policy

How Qadiance collects, uses and protects information across the website and the Studio product.

THE POLICY

Last updated: 26 September 2026

This Privacy Policy explains how Qadiance ("we", "us", "our") collects, uses and protects information when you use our website and Studio product.

1. Information we collect

  • Account information: name, email and authentication details when you sign up.
  • Studio early-access details: your name, email address and what you are building when you join the waitlist, so we can manage the list and contact you about availability. You can ask us to remove your details by emailing [email protected].
  • Content you provide: anything you input into Studio, including notes, documents and conversation history, which forms your persistent memory store.
  • Usage data: how you interact with the site and product, including pages visited, features used, model/agent usage volume and error logs.
  • Payment information: handled by our payment processor; we do not store full card details on our own servers.
  • Device/technical data: IP address, browser type and similar data collected automatically.

Our website is served through Cloudflare's edge network, which terminates TLS, caches static assets and filters malicious traffic in front of our origin server. Cloudflare processes IP addresses and request metadata as our infrastructure provider and data processor under its GDPR-compliant data processing agreement; we do not use it for analytics or profiling. Resend delivers transactional account, Services enquiry and Studio waitlist emails on our behalf.

2. How we use it

  • To operate and personalise Studio, including maintaining your persistent memory across sessions.
  • To manage the Studio early-access list and contact people on it when Studio is ready.
  • To route requests across underlying AI providers and select fallback models when needed.
  • To bill for usage-based access.
  • To improve the product, diagnose issues and maintain security.
  • To communicate with you about your account or, where you've opted in, product updates.

3. Third-party AI providers

Studio routes parts of your input to third-party AI model providers to generate responses and power agents/tools. These providers process the specific content you send through them under their own data processing terms. We select providers with reasonable data protection standards and do not sell your content to them for their own model training unless a provider's terms require opt-out and you have not opted out.

4. Data retention

Persistent memory is retained for as long as your account is active, so Studio can continue to personalise its behaviour. You can delete specific memory items or your entire account's stored data at any time from account settings; deletion requests are processed within 30 days.

5. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data and to object to certain processing. Contact [email protected] to exercise these rights. Users in the EU/UK have rights under GDPR; users in California have rights under the CCPA/CPRA.

6. Cookies and browser storage

We use only the browser storage that signing in and using an account requires. There is no analytics, advertising or third-party tracking code on the site and nothing is written to local storage, session storage or IndexedDB.

  • Session cookie (authjs.session-token, __Secure- prefixed on HTTPS): keeps you signed in. It is HTTP-only, holds a signed session token rather than your content and expires after 30 days or when you sign out.
  • CSRF cookie (authjs.csrf-token): a security token that proves account and sign-in form submissions came from our own pages.
  • Sign-in flow cookies (authjs.callback-url, authjs.state): short-lived values that remember where to send you after sign-in and protect the Google sign-in exchange; they are cleared once the flow ends.

Studio content is stored in your account on our servers, not in your browser. Because the cookies above are required for authentication, blocking them in your browser settings will stop sign-in and account features from working.

7. Security

We use industry-standard measures to protect your data, including encryption in transit. No system is completely secure and we cannot guarantee absolute security.

8. Children

Our services are not directed to individuals under 16, and we do not knowingly collect data from them.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the website or, for account holders, via email.

10. Contact

Questions about this policy or your data: [email protected].

This document is a drafting starting point and has not been reviewed by a lawyer. Before publishing, confirm your actual third-party AI providers' data processing terms, your real data retention timeframes and which privacy regimes (GDPR, CCPA/CPRA, others) apply to your users, then have this reviewed by a licensed attorney.