Privacy notice

Information the service processes

• Account details used for sign-in, your profile and privacy preferences.
• Decision titles and statements, snapshots, selected cards, reflections, follow-up questions, AI responses and Decision Records.
• Uploaded files, their names and file details, and text extracted from successfully parsed files.
• Guest access details, expiry and usage counts, and limited operational information used to manage access, errors and abuse prevention.

Supply only information you are authorised to process. Avoid unnecessary personal information and sensitive business material; do not upload passwords or access keys.

Why it is used

The service uses this information to sign you in, save and resume your work, parse files, provide requested AI assistance, export records, apply your privacy choices and remove work when you request deletion. Operational information supports access controls, usage limits and fault diagnosis.

Each decision has a separate workspace. AI input is assembled from the current authorised decision, its confirmed snapshot, selected cards, reflections, follow-up discussion and relevant excerpts from its files—not account-wide decision history.

AI and service providers

Lovable Cloud provides the account, data and file services. Requested snapshots, interpretations, follow-up answers and synthesis use OpenAI models through Lovable's AI service. Decision text and relevant parsed file excerpts are sent for that processing. A failed or incomplete file parse may mean its content is not available to the AI.

Signing in with an external provider also involves that provider's handling of your sign-in under its own notice. Service providers' own terms govern processing they perform; this notice does not promise a particular processing country, provider retention period or exclusion from provider model improvement. Consider those limitations before supplying sensitive material.

Optional research and operational diagnostics

Optional product research is off by default. You can change and save the preference in Settings; declining it does not block core features. That preference does not authorise sharing your private decision content or using it for model training.

Operational diagnostics are minimised and are not intended to include your decision text, document text or raw guest link. The service also uses a secret-salted digest of an available network address to limit guest-session issuance rather than storing the raw address for that limit.

Browser storage and guest access

Your browser stores sign-in session information and, for guest access, a guest token. The service stores a hash of the guest token rather than the raw link. Treat the link as confidential and avoid using a shared browser for private work.

Guest links expire after 24 hours. Expiry blocks access; removal of stored guest work happens during scheduled cleanup and may not occur at the exact expiry time. Use Erase now to request removal from the active service sooner. Explicitly importing guest work into an account creates a new account context and revokes the guest link.

Retention, export and deletion

Account decision work is kept so you can return to it until you delete the context or account. Archiving is not deletion. Settings lets you export account data and download original uploaded files separately; Decision Records can also be copied, downloaded or printed.

Context deletion removes its work and uploaded files from the active service. Account deletion removes your account and its contexts and files. Guest erasure removes guest work. If removal fails, the service reports the failure so you can retry; do not treat a failed request as completed deletion.

Deletion from the active service does not remove copies you downloaded or shared, and is not a promise of immediate removal from backups or providers' independent records. Those copies may remain subject to their applicable retention arrangements.

Your choices and questions

You can edit your decision work, manage optional research consent, export data, delete a context or delete your account through the Companion. Guest users can erase their work or explicitly import it into an account. These controls do not limit any additional rights available under applicable law.

For privacy questions not addressed by these controls, email connect@quastrat.com. Do not send passwords or private guest links with a request.