quid

Privacy Policy

Last updated October 5, 2026

This policy explains what personal information Quid collects, why, and what you can do about it. Quid is operated by Jisun Eum, South Korea, who is responsible for your personal information (contact: lashertaeyang@gmail.com).

When an organization uses Quid, the organization decides who joins its workspace and what is shared there. For content inside a workspace, we process data on the organization’s behalf.

What we collect

  • Account details: your name, email address, optional display name, profile picture, time zone, and a securely hashed password (we never store the password itself). If you sign in with Google, we receive your Google account ID, name and verified email address.
  • Content: messages, files, reactions, channel and meeting details, and meeting transcripts. Transcripts exist only when a participant turns on captions for their own voice.
  • Billing: plan, seat count and subscription status. Payment details are collected by PayPal; we never see or store full card or bank details.
  • Technical data: IP address and browser information for active sign-in sessions, security and audit logs, and online status.

What we don’t do

  • We don’t sell personal information or use it for advertising.
  • We don’t use third-party analytics or ad trackers.
  • Calls and meetings aren’t recorded by our servers. Recordings are saved only on the device of the host who starts them.

How we use it

  • to provide the Service: deliver messages, run calls and meetings, and send notifications;
  • to send service emails such as verification, invitations, notifications you’ve enabled, and billing notices;
  • to keep Quid secure, prevent abuse, and keep audit records for workspace admins;
  • to process subscriptions and comply with legal obligations.

Who we share it with

We use these service providers, only for the purposes above:

  • Google Cloud (hosting, database and file storage), in the Seoul region (asia-northeast3), Republic of Korea;
  • Cloudflare (delivers the website at our pages.dev address), which passes requests and responses, including your IP address, between your browser and our servers;
  • Brevo (sending emails), which receives your email address and the email content;
  • PayPal (payments), which receives billing details for paying customers under its own privacy policy.
  • Google, if you choose “Continue with Google” to sign in;
  • Your browser’s speech service, if you turn on captions. Chrome sends audio to Google and Edge to Microsoft to turn your speech into text.

If you connect an AI app such as Claude to Quid, information you ask it to read is sent to that app under your own account with its provider. Connected apps can only see what you can see, and you can disconnect them at any time in Settings → Connected apps. We may also disclose information when the law requires it.

Cookies and local storage

We use one essential cookie to keep you signed in, and a short-lived cookie during Google sign-in. Your browser also stores small preferences like your theme. We don’t use advertising or tracking cookies.

How long we keep it

  • Account and workspace content: until you or your organization delete it, or close the account or workspace.
  • Sign-in sessions: until you sign out or they expire (30 days of inactivity). Expired credentials are deleted automatically.
  • Database backups: kept for 7 days.
  • Billing records: as long as tax and accounting laws require.

Security

Connections use HTTPS. Passwords are hashed with argon2id, session and access tokens are stored only as hashes, and integration credentials are encrypted. Access inside workspaces follows roles and channel membership.

Your rights

Under Korea’s Personal Information Protection Act, the GDPR and similar laws, you can ask to access, correct, delete or export your personal information, or object to or restrict how we process it. You can change most details yourself in Settings, or email lashertaeyang@gmail.com. We’ll respond within 10 days. If something inside a workspace is about you, we may refer you to that workspace’s administrators. You also have the right to complain to your data protection authority, such as the Personal Information Protection Commission in Korea.

Children

Quid isn’t intended for children under 14, and we don’t knowingly collect their personal information.

Changes

If we make material changes to this policy, we’ll notify account holders by email before they take effect. See also our Terms of Service.