Privacy Policy
Last updated:
1) Who We Are and Scope
This Privacy Policy explains how Quetext Software LLC (“Quetext,” “we,” “us,” “our”) collects, uses, shares, stores, transfers, and otherwise processes information - including Personal Data and User Content - in connection with our websites, applications, APIs, and services (collectively, the “Services”). This Policy also explains our use of data for AI training, evaluation, and model improvement, as well as our approach to external licensing of Aggregated and Derived Data.
This Policy applies globally to all users of the Services, consistent with applicable law. Where local law requires additional disclosures or grants additional rights, we include them below.
The Services include the Quetext website and web application, our browser extensions, our APIs, and the Quetext add-on for Google Workspace. Section 20 sets out additional terms for Google User Data obtained through the Google Workspace add-on and governs where it conflicts with any other part of this Policy.
2) Key Definitions
Personal Data means any information relating to an identified or identifiable natural person (e.g., name, email, IP address, device identifiers, cookie IDs, online identifiers).
User Content means text, documents, files, images, feedback, and any other materials you submit, upload, paste, or otherwise make available through the Services.
Service Usage Data means device, event, diagnostic, telemetry, clickstream, and interaction data generated by your use of the Services (e.g., pages viewed, features used, time on page, referrers, crash logs, performance metrics, advertising identifiers).
Aggregated Data means information that has been combined and de-identified such that it cannot reasonably be used to identify a specific individual.
Derived Data means insights, statistics, features, embeddings, weights, or other outputs generated by processing Personal Data, User Content, or Service Usage Data.
AI Systems means machine-learning or artificial-intelligence models, pipelines, and evaluators used by Quetext or our vendors/partners.
Processing means any operation performed on Personal Data
(e.g., collection, storage, analysis, sharing, deletion).Google User Data means any content or information Quetext obtains through the Quetext add-on for Google Workspace, including content accessed through Google Workspace APIs, text you paste into the add-on, and file or message titles.
3) Information We Collect
3.1 Information You Provide
We collect information that you provide directly to us, such as:
Account and profile details (e.g., name, email address, password or SSO identifier, role or industry).
Billing and transaction information processed by PCI-compliant providers
(Quetext does not store full card numbers).- User Content you submit or generate within the Services.
Support and feedback communications, including requests, survey responses, and emails or chat messages with our team.
Content you choose to check through the Google Workspace add-on (see Section 20).
3.2 Information Collected Automatically
When you use the Services, certain information is collected automatically to operate and secure our systems. This includes:
Device and network data such as IP address (which may be truncated or hashed), device IDs, operating system, browser type and version, screen resolution, locale, and referring URLs.
Service usage and interaction data such as pages viewed, session duration, clickstream events, error/crash logs, and other diagnostic metrics (e.g., word count, score, report identifier).
Analytics and advertising identifiers, cookies, or similar technologies that help us understand how the Services are used and detect abuse.
We combine this information with other data you provide or that we obtain from trusted partners to analyze usage trends and improve performance.
For details on how we use and share this information, see Section 4 (How We Use Information) and Section 6 (AI Training, Evaluation, and Data Licensing).
3.3 Information from Third Parties
We may receive limited data from: payment processors, fraud-prevention and security providers, analytics and A/B testing vendors, cloud and hosting services, and AI vendors that assist us in operating and improving the Services. Where these parties process data on our behalf, they act as processors under written agreements.
4) How We Use Information
We use Personal Data, User Content, and Service Usage Data in accordance with applicable law and our legitimate interests to:
Provide and operate the Services - create and manage accounts, authenticate users, process transactions, and deliver core features such as plagiarism detection and content analysis.
Secure and maintain the Services - prevent fraud and abuse, detect and respond to incidents, and maintain system integrity through logging and auditing.
Communicate with you - provide support, send transactional messages, product updates, and required legal notices.
Comply with law and enforce agreements - satisfy legal obligations, resolve disputes, and enforce our Terms of Service.
Process technical and usage information - use automatically collected data (IP address ranges, device fingerprints, browser details, telemetry, diagnostic metrics, and similar signals) to deliver functionality, detect abuse, perform analytics, personalize experiences, and improve our AI Systems and Services.
We may convert this information into Aggregated, De-identified, or Pseudonymized Data and use it for research, analytics, product development, model training, evaluation, and other lawful commercial purposes (including data-licensing programs described in Section 6). Before sharing technical identifiers externally, Quetext ensures contractual safeguards and purpose limits consistent with Section 6.2.
Research, analytics, and product improvement - train, fine-tune, evaluate, and debug our AI Systems; generate Aggregated and Derived Data; and enhance accuracy, features, and performance.
Commercial licensing of Aggregated and Derived Data - create and provide de-identified or pseudonymized datasets, analytics, and AI model outputs that may be licensed to trusted third parties under confidentiality and data-protection agreements (see Section 6 for details).
Marketing and engagement - send product news and offers as permitted by law. You may opt out of marketing emails at any time; service or security notifications are still required.
Google User Data is used only as described in Section 20. The purposes in this Section relating to AI training, research, analytics, personalization, commercial licensing, and marketing do not apply to it.
5) Legal Bases (GDPR/UK GDPR)
Where the EU/UK GDPR applies, our legal bases include:
Contract (Art. 6(1)(b)) – to provide the Services, including running checks you request through the Google Workspace add-on.
Legal obligation (Art. 6(1)(c)) – to comply with law.
Legitimate interests (Art. 6(1)(f)) – to operate, secure, and improve the Services and AI Systems;
to generate and use Aggregated/Derived Data; to prevent fraud and misuse.Consent (Art. 6(1)(a)) – where required by law
(e.g., certain regional marketing or cookie/analytics uses).
You may object to processing based on legitimate interests; where feasible, we will honor your request (see Your Rights, Section 15).
6) AI Training, Evaluation, and Data Licensing
6.1 Default Participation; Opt-Out
We may include User Content and Service Usage Data in Quetext’s AI Systems training, fine-tuning, evaluation, and quality-assurance workflows, based on our legitimate interests or, where required by law, your consent.
You may opt-out of future inclusion of your User Content and Personal Data in AI training/evaluation by emailing [email protected] with subject “AI Opt-Out.” We will implement your opt-out on a go-forward basis within a reasonable time.
Opt-out does not apply to:
Aggregated/De-identified data
Derived Data generated before the opt-out is processed
Models already trained - for technical reasons, trained models cannot feasibly be “untrained.”
This Section 6.1 does not apply to Google User Data. See Section 20 (Google Workspace Add-on and Google User Data).
6.2 External Licensing
We may license Aggregated and De-identified Data, and models, statistics, and analytics that do not identify any individual, to third parties under written confidentiality and data-protection obligations that prohibit re-identification. We do not sell or license Personal Data, including pseudonymized identifiers such as IP addresses or device fingerprints.
This Section 6.2 does not apply to Google User Data. Quetext does not license, sell, or otherwise make Google User Data available to third parties, including as part of Aggregated, De-identified, Pseudonymized, or Derived Data. See Section 20 (Google Workspace Add-on and Google User Data).
6.3 Ownership
Quetext exclusively owns all right, title, and interest in and to the Aggregated Data, Derived Data, improvements to the Services, and the AI Systems we create or improve using your data. This Section does not transfer ownership of your User Content, which remains yours.
6.4 User Representations and Warranties (Risk Allocation)
You represent and warrant that you own or have all rights to the User Content you submit, that it does not infringe third-party rights, and that you grant us all licenses necessary to perform the processing described in this Policy and our Terms of Service.
7) Cookies, SDKs, and Similar Technologies
We use cookies/SDKs for authentication, preferences, analytics, performance, security, and where permitted, personalization/advertising. You can manage cookies through your browser and (where applicable) a regional consent management tool. Disabling certain cookies may impair core functionality.
Do Not Track (DNT)/GPC: Browser DNT signals are not standardized; our Services may not respond to them. We treat Global Privacy Control (GPC) signals as a valid request to opt out of sale/sharing for that browser.
8) Disclosures and Sharing
We do not “sell” Personal Data as commonly understood. Under CPRA, “sale” or “sharing” can include certain analytics/advertising disclosures. Where applicable, we provide mechanisms to opt out of “sale”/“sharing.”
We disclose information to:
Processors (cloud hosting, storage, analytics, A/B testing, error/crash monitoring, communications, customer support, payment processing, security) bound by written agreements to process only on our instructions and to maintain appropriate confidentiality and security.
AI vendors/partners engaged to host, train, evaluate, or deploy AI Systems for us, acting as processors or service providers under contract.
Affiliates (for internal administration and consistent processing purposes).
Business transfers (merger, acquisition, asset sale).
Legal compliance (to comply with law, enforce agreements, protect rights, safety, or integrity of the Services).
9) International Data Transfers
We may transfer Personal Data internationally (including to the United States). Where required by law, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), and transfer impact assessments, and we implement additional safeguards as appropriate.
10) Security
We maintain administrative, technical, and organizational safeguards appropriate to the nature of the data and risks involved (e.g., access controls, encryption in transit, network segmentation, monitoring, vulnerability management, employee confidentiality). No system is perfectly secure; we will notify users and/or regulators of personal-data breaches as required by law.
11) Data Retention
We retain Personal Data only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and for the other purposes described in Section 4. We may retain Aggregated and Derived Data indefinitely.
Google User Data is retained only as described in Section 20 and is not retained for AI training, research, or licensing.
12) Children’s Data
The Services are not directed to children under 13 (or other age as required by local law). We do not knowingly collect Personal Data from children. If we learn we have done so, we will delete it as required. Where schools or educators provide the Services to students, we rely on the school to obtain any parental consent required by law (including COPPA), and process student data only to provide the Services to the school. In the EEA/UK, users under the applicable age of digital consent may use the Services only with parental authorization.
13) Automated Decision-Making & Profiling (GDPR/UK GDPR)
Where we use automated processing that produces legal or similarly significant effects, we will provide information about the logic involved, the significance and envisaged consequences, and your rights to human review and to contest the decision, as required by law. For general analytics, personalization, quality assurance, and security, we rely on legitimate interests.
14) Your Choices (Communications)
Essential notices (service, security, legal) are required.
You may opt out of marketing emails at any time via in-email links or by contacting us.
AI Opt-Out: See Section 6.1.
15) Your Privacy Rights
15.1 EEA/UK/Switzerland
You may access, rectify, erase, restrict, or port your Personal Data, and object to processing based on legitimate interests, including certain AI-related processing. Where we rely on consent, you may withdraw it at any time without affecting prior processing. You also have the right to lodge a complaint with your supervisory authority.
15.2 California (CCPA/CPRA)
California residents have the right to know/access, correct, delete, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not discriminate against you for exercising your rights. You may use authorized agents subject to verification. We do not use or disclose sensitive personal information for purposes that would require offering a right to limit.
15.3 Brazil (LGPD), Canada (PIPEDA), Australia (APPs) and Others
Where applicable, you have access, correction, and deletion rights, and may lodge complaints with local data-protection authorities.
Residents of Virginia, Colorado, Connecticut, Texas, Oregon and other U.S. states with comprehensive privacy laws may have the right to access, correct, delete and obtain a copy of their Personal Data, and to opt out of targeted advertising, sale and certain profiling. If we decline your request, you may appeal by emailing [email protected] with the subject “Privacy Request Appeal,” and we will respond within the time required by law.
15.4 Exercising Your Rights
Submit requests at [email protected] or [email protected]. We will verify your identity and respond within the timeframe required by law. For California requests, use the subject “CCPA/CPRA Request.” For EU/UK requests, use “GDPR Request.”
Response timeframes: 45 days under CCPA/US state laws and one month under GDPR, each extendable as permitted.
16) Additional Disclosures for California Residents
Categories collected: identifiers, commercial data, internet/network activity, geolocation (approximate), inferences, and similar data types described in Section 3.
Sources: you, your devices, processors/service providers.
Purposes: as set out in Section 4 (including AI training/evaluation, analytics, security).
Disclosures: to processors, affiliates, AI vendors, and as otherwise described in Section 8.
Sale/Share: We do not sell Personal Data for money; some analytics/ads may be considered a “sale”/“sharing” under CPRA. You can opt out where applicable.
17) Changes to This Policy; Retroactive Applicability
We may update this Policy from time to time. We will change the “Effective Date” and provide additional notice where required by law. To the extent permitted by law, updates will apply to data collected before the effective date as well as after. For material changes, we will provide advance notice. Where required by law, and always for Google User Data, we will obtain your consent before using previously collected data in a materially different way.
18) Governing Law; Venue
This Policy is governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws principles. Exclusive jurisdiction and venue lie in the state or federal courts located in Delaware.
(Contractual dispute resolution, arbitration, and class-action waiver terms, if any, appear in the Terms of Service.) This does not deprive you of protections under the mandatory laws of your country of residence.
19) Contact; Representatives
Email (privacy matters, rights requests, AI opt-out): [email protected]
Legal inquiries: [email protected]
Postal address: Quetext Software LLC, 251 Little Falls Drive, Wilmington, DE 19808, USA
20) Google Workspace Add-on and Google User Data
This section applies to Google User Data (defined in Section 2).
What we access. The add-on accesses only the content you choose to check: the Google Doc, Sheet or Slides file you currently have open, or the text or cells you have selected in it. When you open a match, the add-on may select the matching text in that file so you can find it; it never edits the file.
The add-on does not access your other documents, emails, files, contacts or calendar, and does not read your Google account email address or profile to sign you in to Quetext.
How we use it. We use this content only to run the plagiarism check or AI-content detection you request and to show you the resulting report. Content is sent to Quetext only when you click “Check plagiarism” or “Detect AI-generated content.” We send the text being checked and the file or message title, which becomes the report title. We may also use it to maintain the security of the Services.
No AI training, licensing or advertising. We do not use content or data obtained through Google Workspace APIs to develop, improve or train generalized or non-personalized AI or machine-learning models, including Quetext’s own AI-detection and plagiarism-detection models. We do not sell this data, license it, include it in Aggregated or Derived Data that is shared or licensed externally, or use it for advertising. Sections 6.1 and 6.2 of this Policy do not apply to it.
AI detection runs on our own model. AI-content detection for the add-on is performed by Quetext's own, self-hosted detection model, which runs in Quetext's own cloud infrastructure. Google User Data is processed there only to produce your result and is never sent to a third-party AI or machine-learning provider, and it is never used to train, fine-tune or improve that model or any other model. Plagiarism checks do not use any AI service: we compare short excerpts of your text against web search results and our own index.
Sharing. We share Google User Data only (a) with service providers that process it on our behalf to deliver the check you requested, under written obligations prohibiting any other use, including AI training; (b) to comply with applicable law; (c) for security purposes such as investigating abuse; or (d) as part of a merger, acquisition, or sale of assets, only after obtaining your explicit prior consent.
Human access. Our personnel do not read this content unless you give us your affirmative agreement for specific content (for example, in a support request), it is necessary for security purposes such as investigating abuse, or it is required by law.
We will not use Google User Data for any purpose not described in this section without first notifying you and obtaining your consent.
Storage and deletion. Reports created from the add-on are stored in your Quetext account like any other report. You can delete a report at any time from your account, and you can ask us to delete your data by emailing [email protected]. Your Quetext sign-in token is stored privately for your Google account and is revoked when you select “Disconnect” in the add-on.
Google’s Limited Use policy. Quetext’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Annex A - AI Disclosures (Transparency Add-On)
Opt-Out mechanics (Section 6.1); cannot “untrain” previously trained models.
Processing is conducted with de-identification and data-minimization where feasible.
No re-identification: We use contractual and technical measures prohibiting recipients from re-identifying Aggregated/De-identified data.
We maintain records of AI opt-outs and apply them on a go-forward basis.