Privacy Policy

Draft — not yet reviewed by counsel. This policy describes how Quire works during the invite-only beta. It is not final and will be revised before general availability. Items marked [TODO] must be completed before launch.

Who we are

Quire is a shared reading space where a group reads one book together, each member owning a copy. In this policy, "Quire", "we", and "us" mean [TODO: legal entity name], [TODO: registered address].

Questions about privacy go to [TODO: privacy@quire.example].

What we collect

Waitlist

If you join the waitlist, we store your email address, the page you signed up from, and the time you signed up, so we can invite you to the beta.

Your account

Sign-in is handled by Supabase Auth. When you create an account we store your email address, a display name, and the sign-in method you use (email and password, or Google). Passwords are stored by Supabase Auth as salted hashes; we never see them. If you sign in with Google, we receive your name, email address, and profile picture from Google.

Your copies

One member of a room uploads a copy of the book (a text-based PDF during the beta); others may upload their own edition. We store the file, the text we extract from it, and the information we use to line it up with the room: chapter titles, text passages, and search indexes. A copy you upload is shared only inside its room, with members who confirm they own the book. People outside the room cannot open, download, or search it.

What you create in rooms

Rooms you create or join, your membership and role, invite links, your reading position (chapter and percentage), highlights, notes, thread and chat messages, YouTube links you add as companion videos, your questions to Quill and its answers, and study sets (quizzes and flashcards).

Technical and usage data

IP address, browser and device type, pages visited, error reports, and request logs. We use this to keep Quire secure and working and to understand which features are used.

How we use it

To run Quire: show your rooms, sync reading positions, deliver messages, and answer your questions with Quill.
To keep it safe: prevent abuse, enforce usage limits, and respond to copyright notices.
To contact you: about your beta invite, your account, or changes to Quire. During the beta we do not send marketing email beyond the invite and beta updates.
To fix and improve it: diagnose errors and understand aggregate usage.

Who sees your content

Only you see your private notes and your Quill conversations.
Members who confirm they own the book can read the copy you upload to that room.
Members of a room see what you post there: highlights (including the short quote you highlighted), thread and chat messages, your display name, your reading position, and any Quill answer you choose to share with the room.
Nobody outside a room can see it. Rooms are private and joined by invite link; there is no public directory.

Quill and AI processing

When you ask Quill a question, we send your question and the passages from the copy you read that are needed to answer it, limited to your reading position, to Anthropic, which provides the Claude model behind Quill.

To find relevant passages, we send the text of your copy in chunks to Voyage AI, which turns it into numerical representations (embeddings) that we store in our database for search.

We do not use your content to train AI models, and we do not allow our AI providers to train on it. [TODO: confirm against the executed Anthropic and Voyage AI commercial terms, including Voyage AI's data-use opt-out.]

Service providers

We do not sell your personal information. We share it only with providers that run parts of Quire for us, and only as needed to provide the service:

Supabase: sign-in, database, and file storage for your copies.
Anthropic: generates Quill's answers (Claude).
Voyage AI: creates search embeddings from the text of your copy.
Vercel: hosts this website and the Quire web app.
[TODO: API host]: hosts the Quire API, background jobs, and Redis.
Sentry: error reporting.
PostHog: product analytics.
Arcjet: bot and abuse protection on this website.
Resend: sends email, such as beta invites.

Redis holds short-lived data such as background job queues and realtime connection state. It is not used for long-term storage.

We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or reorganization of the business.

[TODO: list where each provider stores data and the transfer mechanism used for transfers outside your country.]

Cookies

We use cookies that are needed to keep you signed in, and analytics cookies to understand how Quire is used. [TODO: cookie inventory and consent approach for the regions where Quire is offered.]

How long we keep it

Room content (your uploaded copies, highlights, notes, messages, and study sets) is kept until you delete it or your account is deleted.
Your account is kept until you ask us to delete it.
Waitlist entries are kept until you are invited or ask to be removed.
Logs and error reports are kept for [TODO: retention period].
Backups are kept for [TODO: backup retention period] and then overwritten.

When you delete something, it is removed from the live service; copies in backups expire on the schedule above.

Your choices and rights

Delete: remove a copy, highlight, or message in the app, or ask us to delete your account and everything in it.
Access and export: ask us for a copy of your data. Self-serve export is planned but not yet available during the beta.
Correct: update your display name in the app, or ask us to correct other information.
Leave the waitlist: ask us to remove your email at any time.

Depending on where you live, you may have further rights, such as objecting to processing or complaining to a data protection authority. To make a request, email [TODO: privacy@quire.example].

Security

Data is encrypted in transit, access to production systems is limited, and uploaded copies are stored privately and served only to their owner. No system is perfectly secure; tell us at [TODO: security@quire.example] if you find a problem.

Children

Quire is not intended for children under [TODO: minimum age, e.g. 13 or 16 depending on region], and we do not knowingly collect their information.

Changes

We will update this policy as Quire changes and change the date at the top of this page. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.