Privacy Policy

Effective Date: March 17, 2026 | Last Updated: March 17, 2026

Introduction

QAIL AI, Inc. (“QAIL AI”, “we”, “our”, or “us”), a Delaware corporation headquartered at 3400 Cottage Way, Ste G2 #28646, Sacramento, CA 95825, is the data controller responsible for your personal data. We respect your privacy and are committed to protecting your personal data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable privacy regulations.

This privacy policy explains how we collect, use, share, and safeguard your information when you visit our website (qail.ai) or use our services. We may update this policy from time to time; when we do, we will revise the “Last Updated” date above and, for material changes, notify you via email or a prominent notice on our website.

Information We Collect

We may collect the following categories of information:

• Personal Information / Identifiers: Name, email address, phone number, company name, job title, and IP address — collected when you contact us, sign up for our services, or subscribe to our newsletter.
• Usage Data / Internet Activity: Information about how you use our website and services, including browser type, operating system, pages visited, time spent on pages, referring URLs, and other analytics data.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
• Business / Commercial Information: Information related to your business and marketing campaigns when you use our services, such as lead data, ad spend ranges, and campaign performance metrics.
• Device and Geolocation Data: Device identifiers, approximate geolocation derived from your IP address, and browser fingerprint data used for fraud detection.

Lawful Basis for Processing (GDPR)

Under the GDPR, we process your personal data on one or more of the following legal bases:

• Consent (Art. 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as subscribing to our newsletter or accepting non-essential cookies.
• Contractual Necessity (Art. 6(1)(b)): Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract — for example, providing our lead verification services.
• Legitimate Interests (Art. 6(1)(f)): Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests. This includes fraud prevention, improving our services, website analytics, and direct marketing to existing customers.
• Legal Obligation (Art. 6(1)(c)): Where processing is necessary to comply with a legal obligation, such as tax reporting or responding to lawful requests from authorities.

How We Use Your Information

We use your information for the following purposes:

• To provide, maintain, and improve our services
• To process and fulfill your requests and respond to inquiries
• To communicate with you about our services, updates, and promotional offers
• To personalize your experience and deliver content relevant to your interests
• To analyze usage patterns and improve our website and services
• To protect against, identify, and prevent fraud and other unlawful activity
• To comply with legal obligations
• To conduct automated lead quality analysis and scoring (see “Automated Decision-Making” below)

How We Share Your Information

We may share your information with the following categories of recipients:

• Service Providers: Third-party vendors who provide services on our behalf, such as cloud hosting (e.g., AWS), analytics (e.g., Google Analytics), customer relationship management, and email delivery. These providers are contractually bound to use your data only for the purposes we specify.
• Advertising Partners: We use Google Ads conversion tracking, which may involve sharing certain identifiers with Google. Under the CCPA/CPRA, this may constitute “sharing” of personal information for cross-context behavioral advertising. You may opt out of this (see “Your California Privacy Rights” below).
• Business Partners: With your consent, we may share your information with business partners who offer related services.
• Legal Requirements: When required by law, to protect our rights, or in response to a valid legal process such as a subpoena or court order.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case you will be notified of any change in ownership or uses of your personal data.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Contact form submissions: Retained for up to 24 months from the date of submission, unless a business relationship is established.
• Customer account data: Retained for the duration of the business relationship and up to 36 months after termination.
• Website analytics data: Aggregated and anonymized data may be retained indefinitely; identifiable analytics data (e.g., IP-linked) is retained for up to 14 months.
• Marketing communications data: Retained until you withdraw consent or unsubscribe.
• Legal/compliance records: Retained as required by applicable law (typically 5–7 years for financial and tax records).

When personal data is no longer needed, we securely delete or anonymize it.

International Data Transfers

QAIL AI is based in the United States. If you are located outside the United States (including in the European Economic Area, United Kingdom, or Switzerland), your personal data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For transfers of personal data from the EEA, UK, or Switzerland to the US, we rely on the following safeguards:

• Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses with our service providers and partners to ensure adequate protection for your data.
• EU-US Data Privacy Framework: Where applicable, we rely on our service providers’ participation in the EU-US Data Privacy Framework.

You may request a copy of the safeguards we use by contacting us at privacy@qail.ai.

Automated Decision-Making and Profiling

QAIL AI uses automated systems to analyze and score leads submitted through our customers’ forms. This automated processing evaluates factors such as email deliverability, phone number validity, device behavior patterns, and buyer intent signals to determine lead quality.

This automated processing may result in a lead being flagged as low-quality or fraudulent, which could mean the lead is not forwarded to the customer’s sales team. If you believe you have been incorrectly flagged, you have the right to request human review of the decision, express your point of view, and contest the outcome. To do so, please contact us at privacy@qail.ai.

Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, regular security assessments, and employee training. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights Under GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR:

• Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): You may request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): You may request that we delete your personal data, subject to certain legal exceptions.
• Right to Restriction (Art. 18): You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent (Art. 7(3)): Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

To exercise any of these rights, please contact us at privacy@qail.ai. We will respond to your request within 30 days.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

Categories of Personal Information

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers: Name, email address, phone number, IP address, company name.
• Commercial Information: Records of services purchased or considered, ad spend ranges.
• Internet or Other Electronic Network Activity: Browsing history on our website, interactions with our services, referring URLs.
• Geolocation Data: Approximate location derived from IP address.
• Professional or Employment-Related Information: Job title, company name.
• Inferences: Lead quality scores and fraud risk assessments drawn from the above categories.

Sale and Sharing of Personal Information

We do not sell your personal information in the traditional sense. However, our use of Google Ads conversion tracking and similar advertising technologies may constitute “sharing” of personal information (such as device identifiers and online activity) for cross-context behavioral advertising under the CCPA/CPRA. You have the right to opt out of this sharing.

To submit an opt-out request online, visit our Do Not Sell or Share request form.

Your CCPA/CPRA Rights

As a California resident, you have the right to:

• Right to Know: Request the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. You can exercise this right by clicking the “Do Not Sell or Share My Personal Information” link in the footer of our website, or by contacting us at privacy@qail.ai.
• Right to Limit Use of Sensitive Personal Information: If applicable, you can limit our use of sensitive personal information to what is necessary to provide the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a different quality of service because you exercise your privacy rights.

How to Submit a Request

You or your authorized agent may submit a verifiable consumer request by:

• Emailing us at privacy@qail.ai
• Calling us at (510) 592-7712

We will verify your identity before processing your request by matching information you provide against data we have on file. If you use an authorized agent, we may require proof of authorization (e.g., a signed written permission or power of attorney).

We will respond to verifiable requests within 45 days. If we need additional time (up to 90 days total), we will notify you of the extension and the reason.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. You can manage your cookie preferences through our cookie consent banner, which appears when you first visit our website. You may change your preferences at any time by clicking “Cookie Settings” in the footer. For more information, please see our Cookie Policy.

Children’s Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe a child has provided us with personal data, please contact us at privacy@qail.ai.

Data Protection Officer

For questions or concerns about our data protection practices, you may contact our data protection representative at:

Email: privacy@qail.ai
Address: 3400 Cottage Way, Ste G2 #28646, Sacramento, CA 95825
Phone: (510) 592-7712

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@qail.ai
Address: 3400 Cottage Way, Ste G2 #28646, Sacramento, CA 95825
Phone: (510) 592-7712