Privacy Policy

Quire is operated by [Full name], trading as Quire, a sole trader based in the United Kingdom (correspondence address: [postal address]). We are the data controller for the personal data described here. Contact us about privacy at privacy@quire.report.

• • Account data — email address and display name you provide at sign-up.
• • Your Content — the reports and findings you create. Treat these as confidential client material; we do.
• • Billing data — subscription status and a Stripe customer reference. We never see or store your full card details; Stripe processes payments.
• • Technical data — minimal logs needed to operate and secure the service.

We process account and content data to perform our contract with you (providing the service), billing data to take payment and meet legal/accounting obligations, and technical data under our legitimate interest in keeping Quire secure and reliable. We do not sell your data and do not use Your Content to train AI models.

Data is stored in an EU region on Supabase (managed PostgreSQL) and served via Vercel; payments are handled by Stripe. These are our sub-processors. Row-level security isolates every account's data at the database layer — see the Security page.

Your reports and findings are stored in an EU region. Some of our sub-processors are based outside the UK and EEA (for example, our hosting and payment providers operate from the United States), so processing your data may involve a transfer abroad. Where that happens, the transfer is protected by the safeguards required under UK and EU GDPR — the UK International Data Transfer Addendum and the EU Standard Contractual Clauses contained in each provider's data processing agreement. You can ask us for the details at privacy@quire.report.

We keep your data while your account is active. When you delete your account, your profile, reports, and findings are removed from our live database. Backups and minimal billing records required by law are retained for a limited period and then deleted.

Under UK/EU GDPR you can access, correct, export, or delete your personal data, and object to or restrict certain processing. You can export your data and delete your account yourself from Settings, or email privacy@quire.report and we'll action requests within statutory timeframes. You may also complain to your data protection authority (in the UK, the ICO).

Quire uses only the cookies strictly necessary to keep you signed in (session/auth). We do not use advertising or cross-site tracking cookies, so no consent banner is required for them.