Privacy Policy
Our privacy policy and how we use your data
Privacy Policy
Last Updated: May 14, 2024
Queli j.d.o.o. ("Queli," "we," "our" or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard information when you visit https://queli.ai or use our AI-powered survey and interview platform (the "Service"). By accessing or using the Service, you agree to the practices described below.
1. Who We Are & How to Contact Us
Controller: Queli j.d.o.o.
Address: Bukovačka cesta 250A, 10000 Zagreb, Croatia
Email: office@queli.ai
You may contact us at any time with privacy questions or to exercise your data-protection rights (see Section 10).
2. The Data We Collect & Our Role
Queli acts in two capacities:
- Processor – for Survey Content that you or your respondents submit; you remain the controller.
- Controller – for Account Data and Usage Data we need to run and secure the Service.
| Category | What it includes | Source |
|---|---|---|
| Account Data | Business email address, password hash (never the plain text password) | You |
| Survey Content | Any questions, answers, files or transcripts that you or your respondents place into the Service | You / survey participants |
| Usage Data | Log files generated automatically when you interact with the Service (IP address, browser, device type, timestamps, error logs) | Generated automatically |
Mandatory vs Optional: The Account email is required to create and maintain your contract with us. All other data categories are optional; however, the Service may not function as intended without them.
You control Survey Content and can delete it at any time in the Service UI or by emailing office@queli.ai.
3. How & Why We Use Your Data
| Purpose | Data categories | Legal basis* |
|---|---|---|
| Provide, maintain & secure the Service | Account, Survey, Usage | Performance of contract (Art 6-1-b GDPR) |
| Communicate about the Service & account | Account | Legitimate interests to keep you informed (Art 6-1-f) |
| Improve stability & diagnose issues | Usage | Legitimate interests to debug & optimize (Art 6-1-f) |
| Comply with legal obligations & defend claims | Account, Usage | Legal obligation / legitimate interests |
| Process Survey Content on Customer's behalf | Survey | Customer's legal basis as controller (typically contract or legitimate interests) |
*If you are located outside the EEA/UK, equivalent local legal grounds apply.
4. Cookies & Similar Technologies
We use cookies and similar technologies to operate and secure the Service. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
Essential session cookies are placed to keep you signed in and secure the Service. You can disable cookies in your browser, but some functionality may not work properly.
5. How We Share Your Data
We disclose personal data only:
- To service providers that help us operate the Service (e.g., EU-based cloud infrastructure, email delivery, payment processing). Each provider acts under written instruction and is listed in the Data Processing Addendum ("DPA") executed with customers.
- If you request it (for example, when activating an integration).
- When required by law or to protect rights, property or safety.
We do not sell or rent personal data.
6. International Transfers
Customer Content is stored on EU-based cloud infrastructure (currently Amazon Web Services). Where we or our processors transfer personal data outside the EEA/UK, we rely on the European Commission's Standard Contractual Clauses, the UK Addendum or another valid mechanism, together with appropriate safeguards.
7. Retention
| Data category | Typical retention period |
|---|---|
| Survey Content | Until you delete it or 90 days after your subscription ends |
| Account Data | While the account is active plus 7 years for tax and bookkeeping purposes |
| Usage Logs | 12 months for security & troubleshooting |
Back-ups may persist for up to 30 days beyond these periods.
8. Security
We host the Service in the European Union on ISO 27001-certified cloud infrastructure (currently AWS). Technical and organisational measures include:
- TLS 1.3 encryption in transit & AES-256 at rest;
- Role-based access control and multi-factor authentication for employees;
- Regular vulnerability scanning and penetration testing; and
- Least-privilege network segmentation.
If we become aware of a personal-data breach, we will notify affected customers without undue delay and within 72 hours of confirmation, and will cooperate with Customer to meet any controller notification duties.
9. AI & Automated Processing
Our AI components are limited to speech-to-text transcription of audio or video files you provide. We do not analyze survey content for other purposes, profile individuals, or make automated decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR.
Queli is actively monitoring the forthcoming EU Artificial Intelligence Act (AI Act) and will update the Service, our DPA, and this Privacy Policy to ensure full compliance before the Act becomes applicable.
10. Your Rights
You may have the following rights (subject to conditions): access, rectification, deletion, restriction, portability, and objection. You may also withdraw consent where processing is based on consent.
We respond to rights requests within one (1) month as required by Article 12(3) GDPR. You may submit a request by emailing office@queli.ai; we may ask for proof of identity.
You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP — azop.hr) or with your local supervisory authority in the EEA/UK.
11. Children
The Service is intended for business users and is not directed at children under 16. We do not knowingly collect data from children. If you believe we have, contact us so we can delete it.
12. Changes to This Policy
We may update this Policy occasionally. Material changes will be emailed to account owners and posted on the website at least 30 days before they take effect. Continued use of the Service after that date constitutes acceptance.
13. Additional Information
For information about:
- Cookies: See our Cookie Policy
- Terms of use: See our Terms of Service
Contact
Email: office@queli.ai
Post: Queli j.d.o.o., Bukovačka cesta 250A, 10000 Zagreb, Croatia