Your account: name, email address, and anything you add to your profile (job title, phone, photo). Your password is stored only as a one-way hash.

Your workspace content: spaces, pages, page history, comments, whiteboards and the files you upload. Other people in your workspace can see this according to its permissions.

Usage inside QuillBase: which pages you open and roughly how long you spend on them, so workspace administrators can see what gets read. Security events such as sign-ins and permission changes are logged with your IP address and browser details.

Billing, for paid plans: your workspace's plan, invoices and Stripe customer reference. We never see or store full card numbers.

We count page views using our own analytics, hosted on our own servers. It is cookieless: it sets nothing on your device and does not follow you to other sites. It records the page you opened, roughly where in the world the request came from, and what kind of browser you used — never your name or your workspace content.

If your browser sends a Global Privacy Control signal, we don't load it at all and no page view is recorded.

The contact form on our website stores what you type — your name, email address, an optional company name, the kind of enquiry and your message — together with your IP address and browser details, so our support team can answer and so we can spot abuse of the form.

Your workspace content stays until you delete it or your workspace is closed. When a paid workspace lapses, it becomes read-only first, and the workspace and its content are deleted a month later.

Records of payments are the exception. Invoice records — who paid, how much, when, and the business details on the invoice — are kept for ten years after a workspace is deleted, because tax law requires us to be able to produce them. They are stored separately from your workspace and hold no page content.

Workspace data is stored in our PostgreSQL database. We use these services to run QuillBase:

• Amazon Web Services (S3) — Stores images, video and audio you upload.
• Amazon Web Services (SES) — Sends account email: sign-up codes, invitations, password resets, and notifications such as when someone mentions you.
• Stripe — Takes payment for paid plans. Card details go to Stripe directly and never reach QuillBase.
• Google Fonts — Serves the app's typefaces. Your browser requests them from Google, which receives your IP address.

We don't sell your data and we don't share it for advertising. QuillBase has no third-party analytics and no advertising pixels — the page-view counting described above runs on our own servers, and nothing about you is sent to an analytics company.

We use no tracking or advertising cookies. The only cookies QuillBase sets are the strictly necessary ones that keep you signed in. They can't be read by scripts on the page, are only sent over a secure connection, and are cleared when you sign out.

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information. We don't sell or share it today, and the signal will also apply to anything we add in future.

Two things happen immediately, so the signal does something rather than merely being acknowledged: our page-view counting is switched off for your visit, and our servers confirm receipt of the signal on every response. You can check that yourself — a request carrying Sec-GPC: 1 comes back withX-GPC-Honored: 1.

You can update your profile at any time. To get a copy of your data, correct it, or delete your account, contact your workspace administrator. They manage members and content for the workspace.

If you live in Texas, the Texas Data Privacy and Security Act gives you the right to know what we hold about you, to get a copy of it, to correct it, to have it deleted, and to opt out of its sale or of targeted advertising. We do neither of those last two. You can also appeal if we refuse a request, and we will tell you how if that ever happens.

If you live in California, the CCPA and CPRA give you the same rights to know, correct, delete and opt out, and the right not to be treated differently for using them. Sending a Global Privacy Control signal counts as exercising the opt-out, and we honour it as described above.

A direct privacy contact address will be published here.