1. Who we are
Quriosly is a survey and form builder operated by AI Innovation Technologies Inc., a Delaware corporation doing business as Quriosly ("Quriosly", "we", "us", or "our"). This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website at quriosly.com and our products (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described in this policy. If you don't agree, please don't use the Service.
2. Information we collect
We collect three categories of information:
2.1 Information you provide
When you create an account, we collect your name, email address, and authentication credentials. When you use the Service, we collect the surveys, forms, and content you create, along with the responses your respondents submit through them.
If you contact us through our contact form or by email, we collect the information you choose to share, including any details about your role, company, or use case.
2.2 Information collected automatically
We automatically collect certain information when you visit, use, or navigate the Service. This includes:
- Log data: IP address, browser type, browser version, the pages you visit, the time and date of your visit, time spent on those pages
- Device information: hardware model, operating system, unique device identifiers
- Usage data: feature interactions, button clicks, navigation paths, error events, performance metrics
This information helps us operate, secure, and improve the Service. It is collected through standard web logs and product analytics.
2.3 Information from third parties
If you sign in with Google, we receive your name, email address, and profile photo from Google through OAuth.
If you pay for a subscription, our payment processor (Stripe) provides us with confirmation of payment and basic billing information. We never receive or store your full credit card details. Stripe handles card data directly and is independently certified to PCI DSS Level 1.
3. How we use information
We use the information we collect for the following purposes:
- To provide, maintain, and improve the Service
- To process your account, billing, and subscriptions
- To communicate with you about the Service, updates, and support
- To send transactional emails (account verifications, billing receipts, password resets)
- To detect, prevent, and respond to fraud, abuse, and security incidents
- To analyze how the Service is used so we can improve it
- To comply with legal obligations
We do not sell your personal information. We do not use your survey content or response data to train our AI models. The AI features in the Service operate by sending your inputs to our AI model provider (Anthropic) for processing in real time, and Anthropic does not retain or train on this content under our agreement with them.
5. Sub-processors
We rely on trusted third-party service providers to operate the Service. These sub-processors process personal information on our behalf and are bound by contracts requiring them to protect that information.
We update this list when sub-processors change. Material changes are communicated in advance through email or in-product notifications. The current list is also maintained at our DPA at quriosly.com/legal/dpa.
6. Data retention
We retain personal information for as long as necessary to provide the Service and as required by law.
When you delete your account, we retain your account data, surveys, forms, and responses for 30 days in case you change your mind. After 30 days, this data is permanently deleted from our active systems. Backup copies containing your data are purged within 90 days of account deletion.
Anonymized usage analytics may be retained longer, since they cannot be linked back to you after account deletion.
If you wish to delete your data sooner than 30 days, contact us at privacy@quriosly.com.
7. Security
We use industry-standard security practices to protect your information:
- Encryption in transit using TLS 1.2 or higher
- Encryption at rest for stored data
- Access controls limiting employee access to a need-to-know basis
- Logging and monitoring of access to production systems
- Regular security reviews of our infrastructure and dependencies
- Bug bounty and responsible disclosure process at security@quriosly.com
No method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If you believe your account or our systems have been compromised, contact us immediately at security@quriosly.com.
9. International users
Quriosly is operated from the United States. At this time, we focus on serving United States users. Our infrastructure, sub-processors, and business operations are based in the United States.
If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.
We are working on the necessary safeguards (Standard Contractual Clauses, transfer impact assessments) for European Union and United Kingdom users. Until those safeguards are in place and announced through this Privacy Policy, EU and UK users should review this section carefully and consider whether the Service is appropriate for their needs.
10. Your rights and choices
Subject to applicable law, you have the following rights regarding your personal information:
- Access: request a copy of the information we hold about you
- Correction: request that we correct inaccurate or incomplete information
- Deletion: request that we delete your information (subject to legal retention obligations)
- Portability: request a copy of your information in a machine-readable format
- Objection: object to certain types of processing
- Withdrawal of consent: where processing is based on consent, withdraw it at any time
Most of these rights are exercisable directly through your account settings. Account deletion is available in Settings, and a full data export is available on request. For requests we can't fulfill through self-service, contact us at privacy@quriosly.com and we will respond within 30 days.
10.1 California residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise your rights, contact us at privacy@quriosly.com.
11. Children's privacy
The Service is not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, contact us at privacy@quriosly.com and we will delete the information.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through an in-product notice before the changes take effect. The "Last updated" date at the top of this policy reflects the most recent revision.
Continued use of the Service after the effective date of an updated policy constitutes your acceptance of the updated terms. If you do not agree, please discontinue use of the Service.
13. Contact us
If you have questions about this Privacy Policy or our handling of your information, contact us:
c/o United States Corporation Agents, Inc.
131 Continental Drive
Newark, DE 19713
United States