Effective date: 02.05.2025

This Privacy Policy explains how Qore Chat ("Qore", "we", "our", or "us") collects, uses, and protects information when you visit clickqore.com or use our products and services (the Services). By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

Who we are

For users in the EEA/UK, Qore is the data controller of your personal data processed under this Policy. You can contact us at support@clickqore.com.

Information we collect

We collect the following categories of data:

• Account & Contact Data. Email address and, if provided, your name or profile details.
• Authentication Data. Credentials or tokens issued by us or third‑party identity providers.
• Billing & Payment Data. Limited billing details you supply. Payment card data is processed by certified payment processors; we do not store full card numbers on our servers.
• Usage Data. IP address, device and browser information, timestamps, referring pages, and interaction logs needed to operate, secure, and improve the Services.
• Cookies and Similar Technologies. Small files used for session management, preferences, security, and analytics. You can control cookies through your browser settings.
• Prompt Content. Queries, instructions, and other inputs you send to the AI via the Services, as well as the outputs returned to you.
• Support Communications. Messages you send us (e.g., requests, bug reports, feedback) and related metadata.

How we use your information

We process data to:

• Provide the Services and fulfill our contract with you.
• Operate, maintain, and improve functionality, performance, and user experience.
• Respond to support requests and communicate about service updates and security notices.
• Monitor, detect, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce terms, including accounting, taxation, and regulatory requirements.
• Analytics and service quality. We may analyze aggregated or de‑identified usage patterns to understand adoption and reliability.

We do not use your prompts to train foundation or third‑party advertising models. We do not sell your personal data and we do not share it with third parties for their marketing purposes.

Legal bases (EEA/UK)

Where GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract necessity – to provide the Services you request.
• Legitimate interests – to secure and improve the Services, prevent abuse, and communicate essential changes (balanced against your rights).
• Consent – for optional features such as certain cookies or marketing communications.
• Legal obligation – to meet compliance, court orders, or regulatory requirements.

Data retention

• Account data is retained while your account is active and for a reasonable period thereafter (normally up to 24 months).
• Usage logs are kept for security and reliability, typically 90 days unless a longer period is required for investigations or legal duties.
• Prompt content is processed transiently to deliver results. Where stored for reliability and abuse prevention, it is decoupled from direct identifiers and deleted within 30 days, typically much sooner, unless we must retain it to investigate abuse or comply with law.
• We may retain aggregated or de‑identified data that cannot reasonably be linked back to you.

Data security

We apply administrative, technical, and physical safeguards, including encryption in transit, role‑based access controls, least‑privilege practices, logging, and ongoing monitoring. No system can be 100% secure; we maintain incident response processes and will notify you and/or authorities of material breaches as required by law.

Payments, PSD2 and SCA

If you make payments, transactions may be subject to the EU Revised Payment Services Directive (PSD2) and Strong Customer Authentication (SCA).

• We partner with certified payment providers that implement SCA (e.g., two‑factor or multifactor methods such as biometrics, one‑time passwords, or hardware tokens).
• Payments are processed only through providers that comply with PSD2.
• Your payment data is handled by third‑party processors and is not stored on Qore servers.

Third‑party providers

We use service providers (e.g., hosting, analytics, email delivery, payment processing, customer support). They act under contracts that require appropriate confidentiality, security, and data‑protection commitments and may process limited data to perform their services for us. Where helpful, we maintain an up‑to‑date list of subprocessors at clickqore.com/legal/subprocessors.

International transfers

If data is transferred outside your jurisdiction, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms, and we assess the risk of the destination country’s laws where required.

Your rights

Depending on your location, you may have the right to:

• Access the data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (right to be forgotten).
• Restrict or object to certain processing.
• Data portability – receive your data in a structured, commonly used format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority. In the EEA, you can find your authority at edpb.europa.eu; in the UK, contact the ICO.

We will respond to verified requests within applicable timeframes. We may ask for information to verify your identity.

Children’s privacy

Our Services are not directed to children under the age of 18 (or the age of digital consent in your country, which is typically 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact support@clickqore.com.

Communications preferences

You can opt out of non‑essential emails by using the unsubscribe link in the message. We may still send you transactional or security notices.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Effective date” above and, where legally required, provide prominent notice or seek your consent. Please review this Policy periodically.

Contact us

If you have questions or privacy‑related requests, contact us at:
Email: support@clickqore.com
If you contact us, please include enough information to verify your identity and understand your request.