Privacy Policy
Effective October 30, 2026
This Privacy Policy explains how QIT (“QIT”, “we”, “us”) collects, uses and shares personal data when you visit qit.energy, create an account, or use the QIT API, console and compute products (the “Services”). It also explains the choices and rights available to you.
When customers submit content to the Services that contains personal data, QIT processes that content as a processor (or service provider) on the customer’s behalf under our Data Processing Addendum. In that case the customer’s own privacy notice governs, and questions should be directed to the customer.
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, business email, company, role, hashed password or SSO identifier | You |
| Billing data | Billing address, tax ID, invoices, payment status. Card details are handled by our payment processor; we do not store full card numbers. | You, payment processor |
| Usage data | API keys used, request metadata (timestamps, model, task type, latency, tokens, compute seconds, status codes), console activity | Automatically |
| Customer Content | Prompts, files, model weights, containers and generated outputs | You (processed on your behalf) |
| Device and log data | IP address, browser type, operating system, referring URL, pages visited | Automatically |
| Communications | Support requests, sales enquiries, feedback, survey responses | You |
2. How we use data
- To provide, operate and maintain the Services, including routing requests, metering usage and delivering outputs.
- To bill you, prevent fraud and enforce our Terms and Acceptable Use Policy.
- To secure the Services, detect abuse and investigate incidents.
- To provide support and communicate with you about your account, changes to the Services and, where permitted, product updates.
- To understand aggregate usage and improve performance, capacity planning and reliability.
- To comply with legal obligations and respond to lawful requests.
We never use Customer Content to train models. We do not sell personal data, and we do not share it for cross-context behavioural advertising.
3. Legal bases (EEA, UK and Switzerland)
We process personal data on the basis of: performance of a contract (providing the Services you signed up for); legitimate interests (securing and improving the Services, preventing abuse, B2B communications), balanced against your rights; compliance with legal obligations (tax, accounting, lawful requests); and consent where required (for example, optional marketing emails), which you can withdraw at any time.
4. Retention
- Customer Content: inputs are processed transiently to generate outputs. Generated outputs are stored for up to 30 days so you can retrieve them, then deleted. With Zero Data Retention enabled, request content is not stored after the response is delivered.
- Usage and request metadata: up to 24 months for billing, security and support.
- Account and billing data: for the life of your account and up to 7 years afterwards where required by tax and accounting law.
- Website logs: up to 90 days.
5. How we share data
We share personal data only as needed with:
- Service providers that host infrastructure, deliver content, process payments, send email and provide support tools, under contracts that restrict their use of data.
- Model providers, when you call a third-party Model: the request content is sent to that provider solely to generate the output.
- Authorities, when required by law or to protect the rights, property or safety of QIT, our users or others.
- Successors in a merger, acquisition or sale of assets, subject to this Policy.
6. International transfers
We operate in the United States and the European Union. When personal data is transferred outside the EEA, UK or Switzerland, we rely on adequacy decisions or the European Commission’s Standard Contractual Clauses (and the UK Addendum), together with supplementary measures where appropriate. Customers can choose EU or US data residency for compute workloads.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data; to object to or restrict certain processing; to withdraw consent; and to lodge a complaint with your data protection authority. California residents have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA/CPRA.
To exercise your rights, email hello@qit.energy. We will verify your request and respond within the time required by law (typically 30 days). You may use an authorised agent where the law allows.
8. Security
We use administrative, technical and physical safeguards to protect personal data, including encryption in transit and at rest, access controls and monitoring. See Security for details. No system is perfectly secure, and we cannot guarantee absolute security.
9. Cookies
We use only strictly necessary cookies and similar technologies. See our Cookie Policy.
10. Children
The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes
We may update this Policy. We will post the new version here with a new effective date and notify you of material changes by email or in the console.
12. Contact
QIT · hello@qit.energy