Privacy Policy

Who We Are

UrQ is operated by:

Sigwin d.o.o.
Potočka ulica 16
Križevci, 48260
Croatia

For privacy-related questions, contact us at: legal@urq.app

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address — from your identity provider (currently Google, with more providers planned)

• Profile picture — if provided by your identity provider

• Authentication tokens — to access your connected services on your behalf, to provide the service. When asking for permissions on your behalf, special care was taken to ask for least privilege necessary.

Document References

When you connect documents to UrQ:

• Document ID and title — we store a reference to your Google Docs so you can access them in UrQ

• We do not store document content — your scripts and text remain in Google Docs

Organization Data

If you create or join an organization:

• Organization name and settings — such as display color

• Membership information — which users belong to which organizations, and in which role

Technical Data

We automatically collect:

• Basic analytics — page views, feature usage, and performance metrics via Cloudflare Web Analytics (privacy-focused, no cookies used), used to improve the service

• Device information — browser type, operating system, for troubleshooting and compatibility

Payment Information

If you subscribe to a paid plan:

• Subscription status — whether you have an active subscription

• Stripe customer ID — to link your account to your subscription

We do not store your payment card details. All payment processing is handled by Stripe. See Stripe's Privacy Policy.

Information We Do NOT Collect

• Voice/audio data — Speech recognition happens entirely in your browser. Depending on your settings, your browser may send audio to its vendor (e.g., Google for Chrome), but we never receive or store audio data.

• Document content — We only store document IDs and titles, not the actual text of your scripts.

• Sensitive personal information — We do not collect racial/ethnic origin, political opinions, religious beliefs, health data, or similar sensitive categories.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Specifically:

• We do not use algorithms to determine your access to the Service or its features

• We do not profile users for automated pricing or service differentiation

• Any significant decisions about your account (such as termination for Terms of Service violations) involve human review

We use Stripe's fraud detection tools to prevent payment fraud, but these do not make decisions about your account status — they only help identify potentially fraudulent transactions for review.

How We Use Your Information

We use your information to:

• Provide the Service — authenticate you, display your documents, manage organizations

• Process payments — manage your subscription through Stripe

• Improve the Service — understand how features are used to make UrQ better

• Communicate with you — respond to support requests, send service-related notices

• Ensure security — detect and prevent fraud or abuse

Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance — to provide you with the Service you signed up for

• Legitimate interests — to improve and secure the Service, provided this doesn't override your rights

• Consent — where required, such as for optional features

Who We Share Your Information With

We share data only with service providers necessary to operate UrQ:

Within Organizations: If you join an organization, other members can see your name and profile picture (not your email address) and any documents you share with that organization.

We do not sell your personal information. We do not share your data with advertisers or data brokers.

International Data Transfers

Our servers are hosted on Cloudflare's global edge network, which means requests may be processed near your location. However, our primary database is located in the European Union, while the application is hosted on Cloudflare's global edge network.

When your data is transferred to service providers located outside the European Economic Area (such as Cloudflare and Stripe in the United States), these transfers are protected by:

• Cloudflare's certification under the EU-US Data Privacy Framework

• Stripe's certification under the EU-US Data Privacy Framework

• Standard Contractual Clauses (SCCs) as a supplementary safeguard

• Data Processing Agreements with all third-party processors

Data Retention

• Account data — kept while your account is active

• After account deletion — your data is deleted immediately from our active systems; backups are purged within 30 days

• Payment records — retained for 11 years as required by Croatian tax and accounting laws

• Analytics data — Cloudflare Web Analytics does not store personal data; only aggregate statistics are collected

Your Rights

Depending on your location, you may have the right to:

• Access your personal data

• Correct inaccurate data

• Delete your data ("right to be forgotten")

• Export your data in a portable, machine-readable format (JSON)

• Object to certain processing

• Withdraw consent where processing is based on consent

To exercise these rights: Visit urq.app/app/account/data or email legal@urq.app.

We will respond to requests within one month as required by law. For complex requests, we may extend this by up to two additional months, in which case we will notify you within the first month.

For EU/UK Residents

If you believe we're processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority:

• EU: Your member state's data protection authority. In Croatia, this is the Croatian Personal Data Protection Agency (AZOP).

• UK: The Information Commissioner's Office (ICO).

For US Residents

Depending on your state, you may have additional rights under laws like the California Consumer Privacy Act (CCPA). We honor these rights for all users regardless of location.

Children's Privacy

UrQ is not available to users under 18 years of age. We do not knowingly collect data from users under 18 years of age. If you believe a child has created an account, please contact us immediately so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Sending you an email notification

• Posting a notice in the app

• Updating the "Last updated" date above

Your continued use of UrQ after changes take effect constitutes acceptance of the updated policy.

Governing Law

This Privacy Policy is governed by the laws of Croatia.

Cookie Policy

For information about cookies and similar technologies, please see our Cookie Policy.

Contact Us

For any privacy-related questions or concerns:

Email: legal@urq.app

Mail:
Sigwin d.o.o.
Potočka ulica 16
Križevci, 48260
Croatia