Privacy Policy

We only collect what you provide:

• —AI exposure calculator: company name, industry, employee count, country, and your email address.
• —Contact form and private-beta application: name, email, company, role, and the content of your message.
• —AI-Check wiki sample: see the dedicated Google Account Data section below.

We do not use cookies for advertising, analytics tracking, or cross-site profiling. The site uses Cloudflare Turnstile to block automated abuse on forms; Turnstile runs a JavaScript challenge and may set a short-lived challenge cookie, but does not track you across sites.

When you connect your Google account through AI-Check, Qorpera requests read-only access to:

• —Gmail messages, to identify communication patterns and recurring themes in how you and your team work.
• —Drive files, to extract structural information about the documents you regularly produce.
• —Calendar events, to understand how your time is allocated between meetings, focus blocks, and stakeholders.

We use Google data exclusively to generate the wiki pages we send back to you. Specifically:

• —Data is read once during the analysis and never re-read.
• —Pattern synthesis is performed by Anthropic’s Claude models on our behalf; raw content (emails, files) is processed during the run and discarded when the run completes.
• —Generated wiki pages and corpus summaries are retained for 90 days so you can re-read your report, then automatically deleted.
• —OAuth access tokens are encrypted with AES-256-GCM, used during the run, and discarded immediately after.
• —We do not retain any of your raw Google content after the analysis.
• —We do not use your Google data to develop, train, or improve generalised AI models.
• —We do not sell, transfer, or use your Google data for advertising purposes.
• —We do not allow humans to read your Google data, except as necessary for security investigations, to comply with applicable law, or for limited operations like aggregated, anonymised quality monitoring.

Qorpera’s use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Structured data is stored in Neon Postgres in Frankfurt, Germany (EU). Encrypted at rest with AES-256-GCM. Network traffic uses TLS 1.2+. We rely on a small number of sub-processors (listed below) to deliver the service; we do not sell, rent, or share your data for any other purpose.

We rely on the following sub-processors to operate the service:

• —Anthropic (US): runs the Claude models that synthesise patterns from your data during the AI-Check analysis.
• —Neon (Frankfurt, EU): hosts the encrypted Postgres database that stores analysis state and generated reports.
• —Resend (US): delivers transactional emails (your AI-Check report, contact-form notifications) to recipient inboxes globally.
• —Vercel (Frankfurt, EU): hosts the application and the serverless functions that handle requests and OAuth callbacks.
• —Cloudflare: provides the Turnstile bot-protection challenge on our forms.

Each sub-processor is bound by a data processing agreement under GDPR. Material changes are reflected in this policy.

Retention windows by data category:

• —AI exposure calculator inputs (company name, industry, etc.): up to 12 months, used to maintain industry benchmarks. You can ask us to delete sooner.
• —AI-Check wiki sample: synthesised pages and summaries are kept 90 days, then automatically deleted. Raw Google content is not retained.
• —Contact form and private-beta applications: kept until you ask us to delete them, or up to 24 months in the absence of follow-up activity.
• —Server logs: 30 days for debugging and security investigations, then deleted.

We may update this policy as the service evolves. Material changes are reflected in the “Last updated” date at the bottom. Continued use of the site after a material change constitutes acceptance of the updated policy.