Privacy Policy

1. Introduction

Qern ("Qern," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit qern.net, use one of our platforms, or otherwise interact with our services.

Our services include QAIM (identity and access management), Nexus (data hub and integration engine), Qpedia (collaborative knowledge base), Qguard (browser-based governance and redaction for enterprise AI use), and Qpost (high-throughput, Mailgun-compatible email infrastructure) — collectively, the "Services."

2. Information We Collect

2.1 Information you provide to us

We collect information you give us directly, such as when you register for an account, subscribe to a Service, request support, or contact us. This may include your name, email address, organization, role, billing details, and authentication credentials.

2.2 Information collected automatically

When you use our Services we automatically collect technical information, including IP address, browser and device details, pages visited, and usage patterns. We use cookies and similar technologies for this purpose; you can manage cookie preferences in your browser.

2.3 Information from third parties

We may receive information about you from identity verification providers, payment processors, and other third parties, consistent with applicable law.

2.4 Service-specific data

Each Service processes data specific to its function. QAIM handles authentication tokens and identity federation data. Nexus processes data pipeline configurations and routed payloads. Qpedia stores the content you create and share. Qguard inspects text locally in your browser to redact sensitive information before it reaches a third-party AI model. Qpost processes sender domains, message metadata, and delivery logs. We only use this data to deliver the Service you've subscribed to.

3. How We Use Your Information

We use collected information to provide, maintain, and improve our Services; process transactions; respond to support requests; monitor and analyze usage to improve the product experience; detect and prevent fraud or security incidents; comply with legal obligations; and, where permitted, send you product updates you can opt out of at any time.

4. Legal Bases for Processing

Where required by law (such as under GDPR or similar frameworks), we process personal information based on performance of a contract with you, your consent (which you may withdraw at any time), our legitimate interests in operating and improving the Services, and compliance with legal obligations.

5. How We Share Your Information

We do not sell your personal information. We may share it with:

Service providers who support our infrastructure, such as cloud hosting, payment processing, email delivery, and analytics providers, all under contractual confidentiality obligations.

Legal authorities when required by law or to protect the rights, property, or safety of Qern, our users, or the public.

Successors in connection with a merger, acquisition, or sale of assets.

Third parties when you have given us explicit consent to share your data.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where this occurs, we use appropriate safeguards recognized under applicable data protection law.

7. Data Security

We use technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, regular security monitoring, and incident response procedures. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, meet legal obligations, and resolve disputes. When no longer needed, data is securely deleted or anonymized.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, restrict or object to processing, and withdraw consent. To exercise these rights, contact us at privacy@qern.net. We may need to verify your identity before acting on your request.

10. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

11. Third-Party Links and Services

Our Services may link to or integrate with third-party websites and tools. This Privacy Policy does not apply to those third parties, and we encourage you to review their own privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where required by law we will provide additional notice. Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

Questions about this Privacy Policy or our data practices can be directed to privacy@qern.net.