Privacy Policy

Rekall-IQ is a secure, multi-tenant SaaS platform that allows organisations to upload approved company documents and provide their staff with an AI assistant that answers questions based strictly on the context of those uploaded documents.

We may collect several categories of information to provide the service:

• Account Information: Names, email addresses, passwords, and related authentication details. All auth data is securely handled by Supabase Auth.
• Workspace Information: Organisation name, workspace slug, configurations, billing plan labels, and team role assignments.
• Uploaded Content: Text files, PDFs, or other documents uploaded by authorised Workspace Admins for retrieval-augmented question answering.
• Chat Information: Questions asked by users, responses generated, user feedback ratings, and session histories.
• Usage and Analytics: Aggregated indicators such as total document count, query volumes, knowledge gaps, and workspace activity timestamps.
• Technical Information: Device metadata, browser user-agents, IP addresses, and application log files when accessing the platform.

We process the information we collect to:

• Provide, maintain, and support the Rekall-IQ platform.
• Authenticate users and enforce role-based access permissions.
• Process uploaded documents asynchronously through our background workers.
• Generate context-specific answers from customer documents and display source citations.
• Provide private user chat history and session logs.
• Monitor system reliability, diagnose performance issues, and protect against security incidents or abuse.

Rekall-IQ utilises advanced language models to generate embeddings and retrieve accurate answers. Specifically:

• Uploaded documents are parsed, chunked, and sent to the Google Gemini API to produce vector embeddings and formulate answers to user queries.
• No Model Training: We do not intentionally use customer-provided document contents or private chat histories to train Google Gemini public models or any third-party foundation models.
• AI processing is scoped to retrieve context exclusively from the specific organisation's workspace. Third-party provider terms of service may apply.

We work with trusted third-party providers to host infrastructure and process data:

• Vercel: For frontend hosting, static site deployment, and API route serverless execution.
• Supabase: For user authentication, relational application database hosting (PostgreSQL), and document file storage.
• Qdrant Cloud: For hosting the isolated vector database containing document chunk embeddings.
• Google Gemini API: For producing embeddings and generating AI question-answering responses.
• Inngest: For managing background job queues and asynchronous document processing tasks.

We do not sell, rent, or lease your data. We share data only in the following circumstances:

• With infrastructure processors listed in Section 5 strictly to provide the SaaS service.
• To comply with valid legal processes, law enforcement requests, or applicable statutory laws.
• To protect and defend the rights, safety, and security of Rekall-IQ, our users, and the public.
• With the explicit consent or direction of the customer organisation.

We retain data according to the following guidelines:

• Account and Workspace data are retained while the user profile or workspace remains active.
• Uploaded documents are stored until deleted by a Workspace Admin, or until the organisation workspace is closed.
• Chat history is stored to provide users with session history and is maintained until a user deletes a session or when the account is closed.
• System logs are retained for operational, auditing, and debugging purposes for a limited time.

authorised Workspace Admins have the ability to delete uploaded documents from the dashboard. Once deleted, the raw document is removed from Supabase Storage and corresponding vector chunks are removed from Qdrant. Users can request total deletion of their profile by contacting us at the address below.

We take reasonable technical and administrative measures designed to protect information from loss, theft, and unauthorised access. For a detailed breakdown of our security controls, please review our Security & Data Protection page.

Our service providers (such as Supabase, Vercel, Google Gemini, and Qdrant) maintain datacenters in various regions. Consequently, your data may be transferred to or processed in jurisdictions outside of your home country.

Depending on your location, you may have rights regarding access, correction, deletion, restriction, or objection to the processing of your personal information. Please contact us to submit your request.

Rekall-IQ is designed for professional business use and is not directed at children under the age of 13 (or the legal age in your jurisdiction). We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised date. We encourage you to review this policy periodically.

For any questions, requests, or concerns regarding your privacy, please reach out to us at: