Your privacy is paramount to us. This Privacy Policy ("Policy") describes how we collect, protect, process, and share your personal data when you use the Qoretec AI strategic intelligence platform ("Services" or "Qoretec AI").
Qoretec AI is developed, owned, and operated by **Green Stream Solutions (B) Sdn Bhd**, a legally registered entity in Brunei Darussalam. For the purposes of this Policy, the terms "Qoretec AI", "we", "us", and "our" refer to the Qoretec AI application, platform, and services provided and managed by Green Stream Solutions (B) Sdn Bhd.
1. Data Controller
Green Stream Solutions (B) Sdn Bhd acts as the **Data Controller** for the personal information collected on our website, user registration profiles, and platform usage metrics.
If you have any questions or would like to exercise your data privacy rights, you can reach our data protection officer at:
2. Information We Collect
We collect information only to provide, secure, and continuously improve Qoretec AI:
- Account Information: When you register, we collect your name, email address, organization name, chosen country, timezone, and local credentials.
- Your Data Vault Documents: We store and process the files, datasets, and spreadsheets you upload to your private Data Vault solely to feed your strategic AI chat sessions. These documents are isolated per workspace and are never shared.
- Chat and Query History: We store your chat sessions, strategy inputs, and generated AI insights to allow you to review and continue past conversations.
- Technical & Usage Data: We collect standard logs, IP addresses, browser types, device information, and anonymous usage patterns to optimize performance and prevent security abuse.
3. FastSpring Payment Processing (GDPR & CCPA Roles)
We do not collect, process, or store credit cards, debit cards, or payment credentials directly.
- **Independent Data Controller:** All subscription and credit purchases are processed by our authorized reseller and Merchant of Record, **FastSpring** (Bright Market, LLC). FastSpring acts as an independent Data Controller for transaction and billing details.
- **Data Sharing:** When you initiate a transaction, you share your payment and billing information directly with FastSpring. FastSpring shares basic transaction metadata (such as your name, email, subscription tier, credits purchased, and transaction ID) with Qoretec AI to allow us to provision and unlock your premium services.
- **Security Standards:** FastSpring processes all cardholder data in strict compliance with the Payment Card Industry Data Security Standard (PCI-DSS) and applicable global regulations (including GDPR and CCPA). We encourage you to review FastSpring’s Privacy Policy for more information.
4. How We Use Your Data
We utilize the collected information for the following specific purposes:
- Service Provisioning: Setting up your workspaces, managing AI credits, and running active strategy consulting sessions.
- Privacy & Security Enforcement: Isolating your Data Vault documents using strict Row-Level Security (RLS) to ensure that your corporate data is never mixed with other users.
- Customer Support: Resolving technical, billing, or platform issues.
- Platform Analytics: Improving the user interface, optimizing token utilization, and refining AI responses.
5. Data Security & Storage
- **Vault Security:** Files in your Data Vault are stored in securely isolated, encrypted databases and object storage with restricted access policies.
- **Encryption:** All personal data and platform traffic are encrypted in transit using industry-standard TLS protocols and at rest.
- **No Training on Your Files:** We do not use your private Data Vault documents, corporate spreadsheets, or chat transcripts to train global, public machine learning models. Your strategic insights remain proprietary to your workspace.
6. Sharing of Information
We do not sell, rent, or trade your personal data. We only share data with essential, trusted service providers necessary to operate our platform:
- FastSpring: To process global subscription payments and manage sales tax compliance.
- Supabase / Database Hosting: Secure cloud storage providers to host the user tables and workspace contents.
- AI Infrastructure Providers: Select model endpoints (e.g., Vertex AI) to compute your queries (data sent is transient and covered under strict confidentiality agreements).
7. Your Data Protection Rights (GDPR / CCPA)
Depending on your residency, you may have the following legal rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of any inaccurate or incomplete details.
- Deletion (Right to be Forgotten): Request that we delete your account and personal history, subject to legal storage retention requirements.
- Restriction: Request that we restrict or pause processing of your personal data.
- Portability: Request a copy of your personal data in a structured, machine-readable format.
- Withdraw Consent: Withdraw your consent for any voluntary processing at any time.
To exercise these rights, please email us at connect@qoretec.com.
8. Updates to this Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any modifications will be posted directly on this page with an updated "Last Updated" date.
9. Contact Our Privacy Team
For any privacy questions or requests regarding your data, please contact: