Legal

Privacy Policy

Last updated: 2 August 2026

In this Privacy Policy, "Qualody," "we," "us," and "our" refer to Qualody Inc., a Delaware corporation with its principal place of business at Continental Dr, Suite 305, Newark, DE 19713.

This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (qualody.com) or use our Service (the "Service"), and describes your rights regarding that information.

By using our website or Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or Service.

1. Information We Collect

1.1 Information you provide directly

Name, work email, company name, job title, and phone number (e.g., when you book a demo, contact us, or sign up for a pilot)
Account credentials, if you create an account
Billing and payment information (processed via our payment provider — see Section 5)
Content you upload to the Service, including RFP/DDQ/security questionnaire documents, internal policies, response libraries, and any other files or text you submit ("Customer Content")

1.2 Information collected automatically

IP address, browser type, device information, and general location
Usage data — pages visited, features used, session duration
Cookies and similar tracking technologies (see Section 7)

2. How We Use Information

We use the information we collect to:

Provide, operate, and maintain the Service, including generating AI-drafted responses from your Customer Content
Communicate with you — account notices, support, product updates, marketing (with opt-out available)
Improve and develop the Service
Process payments and manage billing
Monitor for security, fraud, and abuse
Comply with legal obligations
Respond to inquiries and provide customer support

Regarding Customer Content specifically: We use Customer Content solely to provide the Service to you — e.g., searching your approved documents to draft responses. We do not use Customer Content to train general-purpose AI/ML models, ours or any third party's, unless you explicitly opt in.

3. Legal Basis for Processing (EU/UK Users)

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

Contract — to provide the Service you've signed up for
Legitimate interests — to improve our Service, ensure security, and communicate with existing customers
Consent — for marketing communications and non-essential cookies
Legal obligation — where required by law

4. How We Share Information

We do not sell your personal information. We may share information with:

Service providers who help us operate the Service (see Section 5 for current list)
Professional advisors — lawyers, accountants, auditors
Legal/regulatory authorities — where required by law, or to protect our rights
Business transfer — if Qualody is involved in a merger, acquisition, or asset sale, in which case we will notify you

We require our service providers to protect your data and only use it for the purposes we specify.

5. Third-Party Service Providers

We currently use the following categories of third-party vendors:

Cloud hosting & infrastructure — Amazon Web Services (AWS) — hosting, file storage (Amazon S3), database, and data processing
AI / ML processing — Amazon Bedrock (AWS) — runs Anthropic Claude models to generate draft responses from Customer Content. Bedrock does not use your inputs or outputs to train its underlying models.
Transactional email — Resend — account, invitation, and job-completion emails
CRM / lead management — Notion — managing demo requests and customer communications
Analytics — Google Analytics — tracks website usage and visitor behavior to help us understand and improve the Service
IT helpdesk — Notion — manages customer support conversations, tickets, and inquiries
Payment provider — Stripe — processes subscription payments and billing information securely on our behalf

Some of these providers may process or store data outside your country of residence, including in the United States. Where required (e.g., for EU personal data transferred to the US), we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Data Retention

Account and Customer Content: Retained for as long as your account is active, and for 30 days after termination to allow for data export, unless a longer period is required by law or agreed in your contract.
Usage/analytics data: May be retained in aggregated, de-identified form indefinitely.
You may request deletion of your data at any time, subject to legal retention requirements (see Section 8).

7. Cookies

We use cookies and similar technologies to operate our website and understand usage. You can control cookies through your browser settings. Disabling cookies may affect website functionality.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict certain processing
Request a copy of your data in a portable format (data portability)
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with your local data protection authority (EU/UK users)

To exercise any of these rights, contact us at contact@qualody.com.

9. Security

We implement reasonable technical and organizational measures to protect your information, including:

Encryption in transit — all traffic to and from the Service is encrypted using TLS/HTTPS
Encryption at rest — documents you upload (Customer Content) are stored in Amazon S3 with server-side encryption using AES-256 (Amazon S3-managed keys, SSE-S3)
Access controls — authenticated access via Amazon Cognito, with role-based permissions limiting who can view your data

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is intended for business use by adults. We do not knowingly collect personal information from anyone under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above. Material changes will be communicated via email or a notice on our website.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Qualody Inc.
Continental Dr, Suite 305, Newark, DE 19713
contact@qualody.com