Privacy Policy — QualityOS

1. Overview

QualityOS ("we," "us," or "our") operates the quality management platform at qcrelease.com. This policy explains what information we collect, how we use it, and your rights regarding your data. We take data privacy seriously — your quality data belongs to you.

2. Information We Collect

Account Information

When you sign up, we collect your name, email address, company name, and password (hashed). This is used to create and manage your account.

Quality Management Data

Data you enter into QualityOS — lot records, test results, COA documents, OOS investigations — is stored on your behalf. We do not analyze or share this data.

Usage and Log Data

We collect server logs, error reports, and usage patterns (e.g., pages visited, actions taken) to operate and improve the service. This data is aggregated and not tied to individual records.

Billing Information

Payment processing is handled by Stripe. We do not store credit card numbers. We receive billing metadata (plan, subscription status, customer ID) from Stripe.

3. How We Use Your Information

To provide, operate, and maintain the QualityOS platform
To send transactional emails (account confirmation, password reset, billing notifications)
To respond to support requests
To detect and prevent fraud or abuse
To comply with legal obligations

We do not sell your data. We do not use your quality data for advertising or machine learning.

4. Data Sharing

We share data only with:

Supabase — Database and file storage (hosted on AWS infrastructure)
Stripe — Payment processing
Resend — Transactional email delivery
Vercel — Application hosting

All sub-processors are under data processing agreements. We do not share your data with any other third parties without your explicit consent, except as required by law.

5. Data Retention

Active account data is retained as long as your subscription is active. If you cancel, data is retained for 30 days before permanent deletion. Trial accounts that do not convert are deleted 30 days after trial expiration. You may request immediate deletion at legal@qcrelease.com.

6. Security

We use row-level security (RLS) to ensure organizations can only access their own data. All data is encrypted in transit via TLS and at rest. Access to production systems is restricted to authorized personnel only. We conduct regular security reviews.

7. Cookies

We use session cookies to maintain your login state. These are essential for the platform to function and cannot be disabled. We do not use advertising or tracking cookies.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Object to or restrict certain processing

To exercise any of these rights, email us at legal@qcrelease.com. We will respond within 30 days.

9. GDPR and CCPA

For users in the EU/EEA, we act as a data processor for quality management data and a data controller for account data. For California residents, we do not sell personal information as defined by the CCPA. Contact us to exercise your rights under either regulation.

10. Children's Privacy

QualityOS is a B2B platform intended for use by businesses. We do not knowingly collect data from individuals under 18 years of age.

11. Changes to This Policy

We may update this policy periodically. We will notify you by email or in-app notice at least 30 days before material changes take effect. The effective date at the top of this page reflects the most recent version.

12. Contact

Privacy questions or requests: legal@qcrelease.com