Your Data. Your Control.

This page tells you what we collect. It tells you how we use it. It tells you your rights. No legal jargon — just the facts.

Last updated: August 14, 2026Contact: legal@qcyphertech.com

What Data We Collect

From you: Your name, email, phone, business address, and payment info.

From your customers: Their names, emails, phone numbers, and service history. This lives in your CRM.

Usage data: How you use the app. This means logins, which features you use, your IP address, and your browser type.

Automatic data: Login cookies and basic usage stats.

Your customer data belongs to you. We don't sell it. We don't share it. We don't use it for marketing. We only touch it to run the service you pay for.

How We Use Your Data

  • Provide the CRM, website, and scheduling tools
  • Send billing invoices and receipts
  • Send service notifications (review requests, payment reminders)
  • Improve our product (usage analytics, error tracking)
  • Comply with the law

What we don't do:

  • We don't sell or share your business data
  • We don't use customer data for targeted advertising
  • We don't train AI models on your data without consent

AI & Automated Decision-Making

We use AI in two places:

1. Monthly Customer Report (AI-generated)

  • What it does: sums up your bookings, review scores, and customer activity
  • Data used: your CRM records — contacts, notes, finished jobs
  • Why it helps: gives you tips to grow your business
  • Turn it off: use Settings. You'll stop getting the monthly summary.

2. Automatic Review Requests

  • What it does: texts or emails a review request once a job is done
  • Data used: the job's completion date, plus the customer's email or phone
  • Why it helps: gets you more online reviews
  • Turn it off: use Automation settings. Or turn it off for just one customer.

Third-Party Services (Who We Share With)

SupabaseOur database. Stores your CRM data and logins. Encrypted and independently audited.
VercelHosts our website. Stores site content and basic stats. Makes pages load fast.
Cal.comRuns our scheduling. Stores bookings and open time slots.
TelnyxSends texts and calls. Stores text logs, used for reviews and payment reminders.
ResendSends email. Stores email addresses and send logs, used for invoices and alerts.
Stripe / HelcimHandles payments. Stores billing info and past charges. Meets card-industry security rules.
Google Business ProfileYour public listing. You choose what it shows.
We don't sell your data to advertisers. We don't sell it to data brokers. The services above only touch your data to run QCypher's features.

Data Retention & Deletion

  • Audit logs: kept 90 days, then deleted automatically
  • Backups: kept 7–30 days by Supabase
  • Billing records: kept 5 years, as tax law requires
  • Customer data: deleted 30 days after you close your account

You can export all your data as a CSV file anytime. Ask us to delete your account, and it's gone for good in 30 days.

Your Rights (GDPR & CCPA)

You have the right to:

  • Access — get a copy of all your data
  • Correct — fix wrong information
  • Delete — ask us to delete it (gone for good after 30 days)
  • Export — download your data as a CSV file
  • Opt out — turn off AI reports or review requests

To use these rights, email legal@qcyphertech.com. We reply within 30 days.

Cookies & Tracking

We use very few cookies. They're only for login. We don't track you with ad pixels. We don't use third-party analytics. Google Business Profile and Stripe may set their own cookies — check their own privacy pages for that.

Security

Your data is locked with encryption, both while it travels and while it sits in our database. Only approved staff can access it, based on their role. We log every access, and we delete old logs after 90 days.

See our full Security page for more.

Children's Privacy

QCypher is not for anyone under 18. We don't knowingly collect data from kids. If we find out we did, we delete it right away.

Changes to This Policy

We update this page once a year, or sooner if our practices change. We'll email you about any big changes.

Contact

Questions about your data? Email legal@qcyphertech.com.

We reply within 5 business days.