Privacy policy

Data we collect

Account data: name, email, password (stored encrypted), passkeys, two-step verification settings, and language and appearance preferences.

Organization data: name, logo, stamp and authorized signature if you add them.

Work content: contracts, documents, attachments and conversations with the assistant, and the details of parties you enter, such as names and emails.

Usage data: the audit log in your account, and the IP address, browser type and server logs needed for security and fixing faults.

Payment data: payments go through a licensed payment provider, and we do not store card numbers.

Why we use it

To provide the service: creating your account, drafting and reviewing your contracts, sending them to parties and alerting you to dates. To protect accounts and prevent misuse, to send service messages such as email confirmation and alerts, and to meet legal and accounting obligations.

We do not sell your data, and we do not use your contracts for advertising.

Artificial intelligence

To carry out your request we send only the text needed (such as your description of the contract or a clause) to the AI model provider OpenAI, which processes it under its terms that do not use API data to train its models by default. We do not train any model on your content.

Who we share data with

We share data with service providers working for us, and only as needed: hosting and database (Laravel Cloud), network protection and routing (Cloudflare), email delivery (Resend), AI models (OpenAI), and the payment provider once subscriptions open.

When you send a contract to another party, that party sees the contract text and the details of yours it contains. We may disclose data when a competent authority requires it under the regulations.

Where data is stored

Data is currently stored on our hosting provider's servers in the European Union (Frankfurt, Germany), and some of the providers above process data outside the Kingdom. We follow the rules for transferring personal data outside the Kingdom, and we may move hosting into the Kingdom in future.

How we protect it

The connection is encrypted, access to each contract is limited to its owner and the people they invite, sign-in supports two-step verification and passkeys, and important actions are recorded with who did them.

How long we keep it

We keep your data while your account exists. When you ask to delete your account, we delete your data or make it unidentifiable, except what we must keep by law, such as accounting records, which we keep only for the required period.

Your rights

You have the right to know how your data is processed, to access it and get a copy, to correct and update it, to ask for its destruction when it is no longer needed, and to withdraw consent where consent is the basis. Write to support@oqda.app and we will reply within the legal period.

Cookies

Inside the platform we use only essential cookies for sign-in, session security, and your language and appearance. The landing page sets no cookies, and its appearance choice is kept only on your device.

Changes to this policy

We may update this policy, and we will tell you about material changes by email or in the platform before they take effect.