Privacy Policy
Last updated: May 7, 2026
This Privacy Policy describes how we collect, use, and protect your personal information when you use QoA AI (“Service”, “we”, “us”, or “our”) at https://qoa.ai.
1. Information Collection
We may collect the following types of information:
- Personal identification information: name, email address
- Account information: login credentials, authentication data
- Payment information: billing contact details, transaction identifiers, payment status, subscription status, invoices, tax information where required, and limited payment metadata processed by our merchant-of-record and payment providers. We do not store your full card number or full payment account credentials.
- Usage data: access times, pages viewed, features used
- Uploaded content: prompts, images, videos, reference assets, generated outputs, and other materials you submit or create for processing as part of the service
- Support and review communications: messages, attachments, order details, and other information you provide when contacting support, requesting a refund, or responding to a safety or billing review
- Device and technical data: IP address, browser type, device identifiers, approximate location derived from IP address, log data, and security signals used to operate and protect the service
2. Information Use
We use the collected information to:
- Provide, operate, and maintain our services
- Process transactions and send related information
- Improve and personalize our services
- Communicate with you, including customer support
- Send promotional communications (with your consent)
- Detect and prevent fraud or abuse
- Enforce our Terms of Service, acceptable use rules, and content safety policies
- Review refund, cancellation, chargeback, and billing support requests
- Comply with tax, accounting, sanctions screening, lawful requests, and other legal obligations
3. Data Storage and Security
3.1 Data Retention
We retain your personal data only for as long as needed:
Submitted Content: Materials you upload may be temporarily stored for processing, history display, troubleshooting, safety, or compliance purposes, and removed according to operational retention rules unless explicitly retained by your settings or account configuration.
Account Data: Retained until your account is deleted or you request erasure, subject to legal or operational retention obligations.
Billing and Support Records: Retained as needed for accounting, tax, merchant-of-record review, fraud prevention, dispute handling, refund processing, and legal compliance.
3.2 Security Measures
We implement appropriate technical and organizational safeguards:
Encryption: Sensitive data is encrypted during transmission and where appropriate at rest.
Secure Infrastructure: Data is stored on secure infrastructure with controlled access and monitoring.
Routine Audits: We regularly assess our systems to address vulnerabilities and misuse.
3.3 In Case of a Data Breach
Immediate Mitigation: We will act promptly to secure our systems and determine the scope of any incident.
Notification: If affected, you will be informed in line with applicable legal requirements.
Regulatory Reporting: We comply with relevant data protection obligations where required.
4. Cookies
We use cookies and similar technologies to track website activity and store certain information. You can control the use of cookies in your browser settings.
5. Third-Party Services
We use the following third-party services:
- Merchant-of-record and payment providers: To securely process checkout, subscriptions, invoices, taxes, refunds, payment disputes, and payment compliance reviews. Their respective privacy policies govern their processing of your payment information.
- Analytics providers: To understand how users interact with our service
- Cloud infrastructure providers: To host and deliver our service
- AI infrastructure and model providers: To process prompts, uploaded assets, generated media requests, and related metadata needed to provide image and video generation, editing, and transformation workflows
- Customer support and communication providers: To send transactional messages, respond to support requests, and maintain support records
These third parties may collect and process your information according to their own privacy policies.
We do not sell your personal information. We do not use your uploaded content or generated outputs to train our own foundation models unless we separately ask for your consent.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Submitted content follows the retention approach described in the Data Storage and Security section.
We may retain limited records after account deletion when necessary to complete refunds, resolve disputes, prevent abuse, satisfy tax or accounting obligations, or comply with applicable law.
7. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
To exercise these rights, please contact us at support@qoa.ai.
8. Policy Updates
We may update our privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.
9. Contact Us
If you have any questions about this privacy policy, please contact us at support@qoa.ai.