1. Who We Are

This Privacy Policy explains how Qattal ("Qattal", "we", "us", "our") collects, uses, and shares personal data when you use our websites, web app, browser extension, and related services (the "Service").

Controller. For users outside the EU/EEA/UK, Qattal is the controller of your personal data under this Policy. If we later target EU/UK users, this Policy will apply in those regions as well and we will appoint representatives where legally required.
Contact. Email: privacy@qattal.com Address: Qattal, 21, Agbeke Plaza, Akala Express, Ibadan, Oyo State, Nigeria Data Protection Officer. Not appointed at this time. We will update this Policy if that changes.

2. Scope

This Policy applies when you: create an account; use the web app or extension; upload or import content (e.g., images, videos, links); or interact with our support, marketing, or analytics tools.

3. Data We Collect

Account  Profile: Name, email, password (hashed), preferences (e.g., theme), settings.
Usage  Device: Log data (timestamps, IP, user agent), device identifiers, pages viewed, actions taken, diagnostics, and crash logs.
Content  Metadata. Files you upload/import and associated metadata: filenames, sizes, formats, source URL and timestamp (when saved via the extension), and AI-generated metadata (e.g., hidden style notes, descriptions, categories, tags). We run automated moderation; pornographic content is rejected and not stored (we may retain minimal logs of the attempt for security/fraud prevention).
Cookies/Tracking: We use cookies and similar technologies for authentication, preferences, and analytics

4. Why We Process Data (Legal Bases)

Contract: Provide and operate the Service; process uploads/imports; enable search and retrieval; customer support.
Legitimate Interests: Secure and improve the Service; prevent abuse; measure and analyze performance; develop new features (balanced against your rights).
Consent: For optional analytics/marketing cookies in regions where consent is required. You may withdraw consent at any time. Legal Obligation: Comply with applicable laws and respond to lawful requests.

5. How We Use Data

- Provide, maintain, and personalize the Service.
- Generate non-public AI metadata to improve indexing/search.
- Detect and block prohibited content and abuse; reject pornographic uploads.
- Communicate about changes, security, and support.
- Analyze usage to improve reliability and features.
- Enforce our Terms of Service.

6. Sharing

We share personal data with: (i) service providers under contracts and confidentiality; (ii) legal/compliance recipients when required by law or to protect rights and safety; and (iii) corporate transaction counterparts subject to safeguards. We do not sell personal data and do not share personal data for cross-context behavioral advertising without providing required opt-outs.

7. Subprocessors (Core Providers)

We currently rely on the following:

- Stages/Infrastructure: Google Cloud Platform (Google Cloud Storage).
- AI processing: Google AI (Gemini APIs).
- Analytics: PostHog.
- Error/uptime monitoring: Better Stack.

8. International Transfers

Your data may be processed in countries that may not have the same level of data protection as your home country. We use appropriate safeguards such as Standard Contractual Clauses (and any required country addenda) and technical/organizational measures.

9. Retention

We retain personal data only as long as necessary for the purposes above. When you delete an item, it moves to Recently Deleted for 30 days and is then permanently deleted. We may retain minimal logs as needed for security, fraud prevention, dispute resolution, or legal obligations. Backups are retained for a limited period before purge.

10. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict/oppose processing, and data portability; to withdraw consent; and to lodge a complaint with a supervisory authority. To exercise rights, contact privacy@qattal.com. We may verify your identity and may deny manifestly unfounded or excessive requests as permitted by law.

11. Security

We use administrators, technics, and physical safeguards (encryption in transit and at rest, access controls, logging, backups). No method is 100% secure; you are responsible for using strong passwords and keeping credentials confidential.

12. Children

The Service is not directed to children under 13 (or higher age where required by local law). We do not knowingly collect personal data from children.

13. Changes

We may update this Policy. Material changes will be notified via the Service or email. Continued use after the effective date signifies acceptance.

14. Contact

Privacy questions or requests: privacy@qattal.com
General support: support@qattal.com