Privacy Policy

At Qublin, we respect your privacy and are committed to protecting the corporate knowledge and personal data you entrust to us. This Privacy Policy explains how we collect, use, store, and process data when you use our platform ("Service").

1. Information We Collect

We collect data necessary to provide and maintain our AI workspace search service:

• Account & Sign-In Data: Name, work email address, profile photo, and OAuth authentication tokens when you sign in via Google or connect integrations.
• Connected Workspace Data: Documents, messages, tasks, and text contents from connected platforms (e.g., Notion, Slack, Google Drive, Jira, Confluence, Asana) that you explicitly authorize us to index.
• Technical & Usage Data: IP addresses, browser information, query logs, and usage metrics to monitor performance and security.

2. How We Process Data & AI Model Training

Your workspace data is parsed, chunked, and stored as mathematical vector embeddings in isolated vector database tenants managed directly on our infrastructure.

Zero Public Model Training Guarantee: Data transmitted to our AI sub-processors (such as OpenAI) via commercial APIs is processed strictly to construct context embeddings and generate answer completions for your users. In accordance with OpenAI’s commercial API policies, customer API data is NOT used to train, retrain, or improve public AI models.

3. Sub-processors & Third-Party Services

We rely on trusted third-party service providers to deliver the Service. These include:

• OpenAI: LLM prompt completion and vector embedding generation via commercial API.
• Authentication & Integration Providers: Google, Slack, Notion, Atlassian, and Asana OAuth APIs for secure read-only authorization.

4. Data Security & Credentials

We implement industry-standard administrative, physical, and technical safeguards to protect your data, including:

• AES-256 encryption for stored credentials and OAuth tokens.
• TLS/HTTPS encryption for data in transit.
• Tenant-isolated database structures ensuring organization data remains strictly segregated.

5. Cookies & Tracking Technologies

We use essential cookies strictly necessary for session management, user authentication, and CSRF protection. We may also use non-essential performance or analytics cookies to understand website usage and improve user experience. You can manage or disable cookies via your browser settings.

6. International Data Transfers

For users in the European Economic Area (EEA), UK, or Switzerland, transfers of Personal Data to third-party sub-processors located outside the EEA (such as OpenAI in the USA) are safeguarded under valid transfer mechanisms pursuant to Chapter V GDPR, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs).

7. Data Retention & Deletion

We retain indexed workspace data only for as long as your account remains active or as needed to provide the Service. If you disconnect an integration, remove a workspace, or terminate your Qublin account, all corresponding vector indices and token credentials are deleted from our active database systems.

8. Your Rights (GDPR / Data Protection)

Depending on your location, you have rights under applicable privacy laws (such as GDPR), including the right to access, rectify, or request deletion of your personal data processed by Qublin. For B2B data controller agreements, please refer to our Data Processing Addendum (DPA).

9. Contact Us

For any privacy inquiries or data protection requests, please contact us at privacy@qublin.com.