Privacy Policy

Who can use the Portal

The Portal is invite-only. There is no public or self-service signup — an account is created only when a Queralt team member sends you an invitation to the email address you provide. By accepting an invitation and signing in, you agree to this Privacy Policy.

Information we collect

Account information

• Your email address and, if the invitation included it, your name
• Your pilot role (end user or network administrator) and the organization you belong to
• If you sign in with a Microsoft account, basic profile information provided by Microsoft: name and email address. Microsoft sign-in works only for people who have been invited. It cannot be used to create an account

Information you submit

• The title, description, and category (observation / unexpected result / feedback / exercise result) of each entry
• For exercise results: the exercise, the outcome, and the device make and model you report
• An optional screenshot or file you choose to attach to an entry
• An optional 1–5 experience rating after submitting an entry
• Call requests: the times you propose, your time zone, and any note you add
• Questions you ask the help assistant, and the answers it gives (see "The help assistant" below)

Automatically collected information

• Sign-in timestamps and session information, handled by our authentication provider (Supabase)
• The time you last used the Portal. It is updated while you use the Portal, at most about once every ten minutes, so our team can see whether participants are active
• How long you use the Portal each day, counted a minute at a time, and only while a Portal page is open and you are using it, so our team can see how much participants use it. No details of what you do on each page are recorded
• A record of who invited you and when
• Standard web server/request logs collected by our hosting provider (Vercel) and database provider (Supabase)

Cookies and similar storage

• Cookies that keep you signed in
• A cookie that remembers you have seen the welcome screen
• A short-lived cookie that limits how often your last-used time is recorded
• Your browser's local storage remembers the email address you last used on the sign-in page, so you don't have to type it again. It stays on your device

We do not use tracking cookies for advertising, and we do not sell any information you provide.

How we use this information

• Authenticate you and maintain your session
• Display your own submitted entries back to you
• Allow Queralt's pilot program team to review, triage, and respond to submitted entries, and to track their status
• Understand and improve the product based on your feedback and experience ratings
• Schedule calls with you and keep track of each organization's progress through the pilot
• Notify our team and create follow-up tasks when you submit an entry or request a call
• Understand how the help assistant is used and improve the Portal's guides where its answers fall short
• Communicate with you about the pilot program (e.g., invitations, sign-in links)

Who can see your information

• You can see your own submitted entries, screenshots, and ratings.
• Queralt administrators (team members with a @queraltinc.com or @mail.queraltinc.com email address) can see all entries, screenshots, and ratings submitted by all pilot participants, along with the email address associated with each submission, call requests, each participant's role, organization and last-used time, and the questions and answers in the help assistant, in order to manage the pilot program.
• Documents in the Asset library are shared with all pilot participants.
• When we send an invitation, a copy of it, without your sign-in link, goes to Queralt team members, including the project's lead architect, so we have a record of who was invited.
• We do not share your individual submissions with other pilot participants or with any third party for their own purposes.

Service providers

We use the following third-party services to operate the Portal. Each processes data only as necessary to provide their service to us:

• Supabase — database, authentication, and file storage hosting
• Vercel — application hosting
• Microsoft (Microsoft Graph / Exchange Online) — sending sign-in and notification emails
• Microsoft Entra ID (Azure AD) — optional Microsoft sign-in
• Anthropic — generates the help assistant's answers (see below)
• Queralt's internal team tools — summaries of entries, call requests and pilot progress, and contact details (name, email, organization), are passed to our internal team workspace so staff can follow up. Queralt staff and test accounts are excluded. This is not shared outside Queralt

The help assistant

The Portal includes an AI help assistant that answers questions about the pilot. It is an automated tool and can make mistakes.

• What you type, and the conversation so far, is sent to Anthropic, our AI service provider, to produce each answer.
• We save each question and answer, linked to your account and whether you are an end user or network administrator. Queralt administrators can read them to see what people ask and to improve the Portal. Other participants cannot see them.
• Please don't type passwords, PINs, private keys, certificates, or other sensitive information into the assistant.

Data retention

We retain your account and submitted entries for as long as the pilot program is active and your account remains invited, or until you request deletion. If your account is removed from the Portal, your account record, submitted entries, attached screenshots, help assistant questions and last-used time are permanently deleted at that time. Copies already passed to our internal team tools, and any invitation copies already sent, are not deleted automatically, and we will remove them on request.

Data security

Access to entries is restricted so that participants can only see their own submissions, and only Queralt administrators can see submissions from other participants. Screenshots and documents are stored in access-controlled storage and are never made publicly accessible. Sign-in links are single-use, are sent only to the invited email address, and expire.

Your rights

You may request access to, correction of, or deletion of your information at any time by contacting chris@queraltinc.com.

Changes to this policy

We may update this Privacy Policy as the Portal evolves. We will notify active participants of material changes.

Contact

Questions about this policy or your information can be directed to chris@queraltinc.com.