Privacy policy

Who is responsible

QNews is a product of QuantoSei. Contact: qnews@quantosei.com.

What we collect

• QNews account: email address, name, the password as a salted scrypt hash (never the password itself), your Google account id if you sign in with Google, and the times of email verification and last sign-in.
• Sign-in sessions: a hashed session token, the IP address and browser user agent at sign-in. Sessions expire after 30 days.
• API keys: the key name, its first characters and a hash of the key; the full key is shown only once.
• API usage logs: for every API call, the account, key, endpoint, method, result status, request and content units, IP address, user agent and time. Used for quotas, the usage shown on your dashboard and abuse prevention.
• Free trials (EditorLoop setup wizard): email address, site address, site name (used as the account name), plugin version, the integration that asked, the time you gave consent, and a keyed hash of your IP address (the IP address itself is not stored). Kept to allow one trial per email address and per site.
• Payments: Polar processes your payment details; we never see or store card numbers. Polar sends us payment notifications with your name, email address, billing address, the product, the amounts and the subscription status, which we store to run billing and keep records. PayPal does the same for subscriptions paid through PayPal.
• Contact form: your name, email address, company and message.
• Activity records: account and billing actions (for example a trial started or a plan change requested) with the related details.
• Web server logs: our web server records each request's IP address, time, requested page, referrer and browser user agent.

Cookies

We use two cookies: qnews_session keeps you signed in (30 days, not readable by scripts) and qnews_oauth_state protects Google sign-in (10 minutes, only when you use Google sign-in). There are no advertising or analytics cookies and no third-party trackers on our pages. The dashboard loads PayPal's script only when the PayPal checkout is in use.

Why we use it

To provide the services you signed up for: your account, API access and quotas, trials, billing, support, and the security of the services. We do not sell your data or use it for advertising.

Who receives it

• Polar (polar.sh): payments, receipts and the customer portal.
• PayPal: only for subscriptions paid through PayPal.
• Google: only if you choose Google sign-in.
• Emails (verification, password reset, trial and support messages) are sent from our own mail server.
• QNews fetches news from Google News and publishers' websites; no personal data is sent to them.

How long we keep it

• Sign-in sessions: 30 days. Email verification links: 24 hours (72 hours for trials). Password reset links: 1 hour.
• Trial records, with the IP address only as a keyed hash, are kept to enforce one trial per email address and per site.
• Account data, API usage logs, contact messages and payment records are kept while your account exists and as needed for billing records.

Your choices and rights

You can see and change your account details on the dashboard and revoke API keys at any time. To get a copy of your data, correct it or delete your account, email qnews@quantosei.com.