— change or withdraw optional cookie consent.
This policy describes what Qleerly does with your data. It is written from what the service actually does, not from a template.
Qleerly AI AB (reg. no. 559595-0246), Rombäck 481, 841 74 Fränsta, Sweden, is the controller of the personal data described here. You can reach us at sales@qleerly.ai.
| Data | When | Why |
|---|---|---|
| Email address | When you create an account | To identify your account and send sign-in links |
| Password hash | If you set a password | To sign you in. We store a scrypt hash, never the password itself |
| Session cookie | When signed in | To keep you signed in. Named qs, HttpOnly and Secure |
| Anonymous cookie | On first use without an account | To count free answers. Named qa, a random id with no identity attached |
| IP address | When you request a sign-in link | To detect abuse of the sign-in form |
| Truncated IP hash | On each answer | To apply the daily free limit. We store a shortened hash, not the address |
| Your conversations | When signed in | So you can return to them. Exportable and deletable by you at any time |
| Project documents | When you upload a text, Markdown, CSV, JSON or PDF file to a project | To search project material and use relevant excerpts in chat. Team members with access can read shared files. |
| Team membership and plugins | When you join a team project or create a plugin | To control access and save your reusable instructions and chosen capabilities. |
| Usage metadata | On each answer | Token counts, cost, latency, which model answered |
| Billing data | If you subscribe | Held by Paddle. We store customer and transaction references, your plan and billing period, and verified net payout for cost controls. |
| Marketing consent | Only if you tick the opt-in box in Paddle's checkout | To send product updates and offers by email. We never send these unless you said yes there, and you can withdraw at any time by contacting us |
Qleerly AI AB also operates Aiomize, a separate website-optimization service. Its Google consent screen uses our Qleerly AI app identity. The following describes that optional connection; it is separate from Qleerly chat and its Paddle subscription.
With your permission, our Google app, named Qleerly AI, connects Google data to Aiomize, operated by Qleerly AI AB. This optional account connection is separate from public-page analytics cookies and does not connect Google reports to Qleerly chat.
Google sign-in uses your Google account identifier and verified email address to identify your account. The optional Search Console connection reads verified-site properties, search queries, clicks, impressions, average positions, sitemap information and indexing diagnostics. The optional Google Analytics connection reads the GA4 properties available to your account and aggregate page measurements for the property you select, including sessions, page views, engagement and configured key events. These permissions do not provide access to Gmail, contacts or Google Drive, and do not let Aiomize change Analytics or Search Console settings.
Google Ads is a separate optional connection. If you separately connect a Google Ads account, we process account identifiers, campaign or ad data and performance reports for the advertising features you choose. Google's adwords permission can allow viewing and managing Ads accounts; effective access also depends on your Google Ads account role and our application controls. The Analytics and Search Console connection buttons do not request this permission.
We use these reports to show your website performance, compare reporting periods and prioritize or assess website optimization for your account. Connection tokens are encrypted on our server. Selected properties and collected reports are associated with the customer account that authorized the connection. Processing services may handle information only as needed to provide these user-facing features. We do not sell Google API data or use it to train general-purpose AI models. Google account identifiers and Analytics or Search Console reports are not used for advertising targeting. Human access is limited to the support, security, legal or internal-operation cases permitted by Google's Limited Use rules.
You can disconnect Google in Aiomize's Integrations area and revoke the app's access in your Google Account. Disconnecting stops new collection and removes the native connection credentials and stored Analytics observations. Previously saved optimization reports, security records and backups are not automatically erased by disconnecting; they follow the retention and deletion practices in Aiomize's privacy policy. For deletion requests, contact sales@qleerly.ai.
Our use and sharing of Google API data follow the Google API Services User Data Policy, including its Limited Use requirements.
When you are signed in, your conversations are saved to your account so that you can come back to them, on any device. They are stored on our server in Sweden, and only you can read them — every request is checked against the account that owns the conversation.
You can take them with you. Export everything you have written as a file at any time, from your account page. Delete a single conversation, or erase all of them at once, and they are gone from our database — not hidden, not archived.
If you use Qleerly without an account, nothing you write is saved at all.
Uploaded .txt, .md, .csv and .json text, and text extracted from PDFs, are stored on our server in Sweden and indexed so Qleerly can find relevant excerpts. Original PDF bytes are not stored after extraction. PDF bytes are sent to external AI-processing services for text extraction; scanned PDFs without searchable text are rejected. When you ask a question with a project selected, relevant excerpts are sent with your message to AI-processing service providers to generate your answer. Document text is not sent to advertising or analytics services.
Project owners can invite existing accounts as viewers or editors. Members can read shared files and plugins; editors can change them. Each person's conversations remain private, although answers can contain information from shared files. The owner can remove members and delete the project. You can export material you uploaded and erase it from shared projects with your account data; the project owner can also delete files and plugins. Removing a project removes its documents and plugins. Avoid uploading secrets or personal information that you do not want processed by project members or the model provider.
Our usage log records how many tokens a request used and what it cost — never the text. We do not store card numbers. We do not intentionally send your conversations to advertising or analytics services. On public pages, Google Analytics loads only after analytics consent; TikTok and Meta pixels load only after marketing consent. Reddit advertising measurement follows the optional marketing-cookie choice on public marketing pages, excluding the chat homepage, account, Studio and checkout. These services can process page visits, device and browser information, IP addresses and cookie identifiers to measure visits and advertising. Paddle's checkout loads when you open checkout.
After your general statistics-cookie consent, Qleerly records public page paths (without query strings), referring domain, device class, page activity and plan-button clicks. We use this to understand visits, where people stop and whether a visit leads to a useful product action or a verified subscription payment. We do not collect page text, chat or form contents, full referrer URLs, IP addresses or session recordings in this statistics database.
Two optional, first-party, HttpOnly statistics cookies are used: qiv identifies a consenting browser for up to 7 days; qis identifies a session that ends after 30 minutes of inactivity. For verified signed-in accounts, sessions may be linked to the internal account ID to match confirmed subscription payments. Raw statistics older than 30 days are removed by hourly cleanup. Do Not Track is respected. You can withdraw statistics consent at Cookie settings; collection stops and statistics associated with the current browser identifier are deleted. This does not delete necessary account, security or billing records.
Existing server access logs are separate. The admin dashboard can show aggregate public-page request counts from these logs; requests are not counted as unique people.
With statistics-cookie consent, HeyCatch measures page visits, navigation and product interactions. For signed-in users who consent, we link activity to an internal account ID and send email, plan and signup date, plus confirmed registration and subscription or payment outcomes. Captured page text and element attributes are masked to keep conversations and form content out of analytics. You can withdraw statistics-cookie consent in Cookie settings; server-side reporting also checks the recorded consent choice.
| Processor or recipient category | What they handle |
|---|---|
| HeyCatch | Consented usage analytics, account identity properties and confirmed business outcomes described above. |
| AI-processing service providers for request routing, language-model processing and text extraction | Your messages and relevant selected project excerpts to generate an answer; PDF bytes for text extraction |
| Resend | Your email address, to deliver sign-in links |
| Paddle | Payment, as merchant of record. Paddle is the seller on your receipt |
| Google Analytics | Public-page visit measurement after analytics consent. |
| Advertising measurement on public marketing pages only after separate Reddit consent. Reddit may receive page URLs, referrers, public page metadata, browser/device information, IP addresses and cookie identifiers. The Reddit pixel is excluded from our chat homepage, account, Studio and checkout pages. We do not provide it with chat messages, email addresses, phone numbers or payment details. Reddit privacy policy. | |
| TikTok and Meta | Advertising measurement on public pages after marketing consent, including page visits, browser/device information and cookie identifiers. Their privacy policies also apply: TikTok and Meta. |
Qleerly uses external AI-processing service providers to route requests, generate answers and extract text from supported PDFs. These services have their own data policies, and some providers may retain requests or use them for model training. Qleerly does not currently limit processing to providers that promise zero data retention. For information about the services involved in processing your data, contact sales@qleerly.ai.
Do not send information to Qleerly that you would not want processed by a third-party model provider.
If you are in the EU or UK you can ask for a copy of your data, ask for it to be corrected, or ask for your account and its data to be deleted. Write to sales@qleerly.ai and we will act within one month.
You can also complain to a supervisory authority. Ours is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), and you may instead complain to the authority in the country where you live.
Qleerly uses necessary account cookies and the optional statistics cookies described above. The necessary cookies are not used for advertising or
for tracking across other sites. qs keeps you signed in.
qa is a random id that counts your free answers so the limit
works without an account. Clearing them signs you out and resets that count.
Optional analytics cookies (Google Analytics), marketing cookies (TikTok and Meta) and Reddit advertising measurement are disabled until you choose their respective categories. An earlier TikTok/Meta choice does not enable Reddit. Use Cookie preferences in the account menu or at the top of this Privacy page to accept, reject or withdraw consent. No sign-in is required. Your choice is stored locally for up to 180 days. Withdrawing stops these scripts on reload and removes known first-party measurement cookies; third-party cookies are controlled by your browser and those providers. Our integration sends TikTok a page-view event, not chat messages or payment details. Private account and Studio pages do not load these tags. Email marketing consent in checkout is a separate choice.
If this policy changes in a way that affects you, the date at the top changes and we tell account holders by email.