Privacy Policy

1. Who we are

Quorvel is an independent business based in India and is the controller of the personal data described here. Contact us at hello@quorvel.tech.

2. Information we collect

• Account information — your email address, basic profile, and API keys.
• Action metadata — when you use the ledger, we store the metadata you send: action names, the inputs and outputs you choose to log, status, idempotency keys, timestamps, and approval decisions.
• Billing information — handled by Paddle. We receive limited details (plan, country, last four digits, transaction IDs) but never your full card number.
• Usage data — logs, IP address, and device/browser information, used for security and reliability.
• Communications — emails and waitlist sign-ups you send us.

3. How we use your information

We use this data to operate and secure the Service; to record, dedupe, gate, recover, and alert on your actions; to provide support; to process billing through Paddle; to send essential service notices and, if you opt in, product updates; and to comply with the law.

4. What we never do

We never sell your data. We never use your data to train AI or machine-learning models. We never share your action data with other customers.

5. Sub-processors

We rely on a small set of trusted providers to run the Service:

• Vercel — website and front-end hosting
• Render — API hosting
• Neon — managed PostgreSQL database
• Upstash — managed Redis for queues and alerts
• Paddle — payments and Merchant of Record
• Zoho Mail — business email
• Formspree — waitlist form handling

Each processes data only as needed to provide its service to us.

6. Security

Data is encrypted in transit (TLS) and at rest. You can choose your data region, or self-host the ledger in your own VPC on eligible plans. We apply least-privilege access internally.

7. Data retention

Action history is retained according to your plan (for example, 7 days on Free, 90 days on Pro, and 1 year on Scale). You can export or request deletion of your data at any time. We delete account data within 30 days of account closure, except where we must retain records for legal or accounting reasons.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email hello@quorvel.tech.

9. Cookies

Our website uses minimal, essential cookies. We keep analytics light and do not use invasive cross-site advertising trackers.

10. International transfers

We may process data in countries other than yours. Where required, we use appropriate safeguards for those transfers.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

12. Changes to this policy

We will update this policy as the Service evolves; the “Last updated” date reflects the latest version.

13. Contact

Privacy questions? Email hello@quorvel.tech.