Privacy policy

What we collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We never see or store your Google password.

When you sign in with your mobile number, we store that number and the email address you confirm afterwards. The sign-in code is sent by text message through an Indian SMS provider, which receives only the number and the code.

When you use the console, we store the business idea you describe, your answers to the follow-up questions, and the assessment our system generates for you.

When you ask us to call you or send an enquiry or request form, we store the contact details you provide — your name, email, phone number, and message.

How we use it

Your information is used for one purpose: providing the Questico service — generating your AI assessment, preparing your consultative brief and working preview, and contacting you about the call or request you made.

We do not sell your data. We do not share it with advertisers. We do not send marketing emails you haven't asked for.

AI processing

To generate your questions, assessment, and working preview, the idea and answers you submit are processed by third-party large-language-model providers through an API. This content is transmitted securely and used only to produce your results. We do not permit our providers to use your content for training their models.

Children's photos (Kids Playbook storybooks)

A storybook is made only after a parent or legal guardian confirms they are one, and agrees to the photo being used to make that book.

The child's photo is used only to draw that child in that one book: an AI model checks that it clearly shows one child and nothing unsuitable, and the image model uses it as the reference for the cover drawing. Both receive it through our AI gateway, OpenRouter.

The photo is never written to our database or file storage. It is held in our server's memory only while the pictures are drawn, and discarded the moment they are done, usually within three minutes, whether or not the book is finished. It is shrunk in your browser (or, in the Android app, on your phone) before it is sent, which also removes its location data.

The finished drawings and story (not the photo) are kept for 3 days if the book is not bought, and for 7 days after purchase so the PDF can be downloaded again; then they are deleted. Email us to have them deleted sooner.

Where your data lives

Your data is stored in a Supabase (PostgreSQL) database hosted in the AWS Mumbai region (ap-south-1), protected by row-level security so that only you and Questico's administrators can access your records. Our application runs on Vercel and Render.

The Android app

The app collects the same information as the website, for the same purposes, plus two things that help us keep it working:

• Crash reports: if the app crashes, it sends a report to Sentry, our crash-reporting service — the error, the screen you were on, the app version, the phone model and the Android version. It never includes your name, email, phone number or anything you typed.
• Usage counts: the app counts which screens and steps are used, so we can improve it. It sends a random identifier made on your phone (not linked to your account), the app version, the name of the step and when it happened — never your name, email, phone number or anything you type. Counts are deleted after 90 days. You can turn them off in the app under Account → Share usage counts.

Files you buy in the app are downloaded to your phone and opened in apps you choose.

Cookies and sessions

We use browser storage only to keep you signed in (your authentication session). We do not use advertising or cross-site tracking cookies.

Third-party services

We rely on the following services to operate, each receiving only what it needs:

• Google — sign-in authentication
• An Indian SMS provider registered with TRAI — sign-in codes, if you sign in with your mobile number
• Supabase — database and authentication infrastructure
• Razorpay — payments; your card or UPI details go to Razorpay, never to us
• Sentry — crash reports from the Android app
• Vercel and Render — application hosting
• LLM API providers — generating your assessment and preview content
• Image-generation API providers, through OpenRouter — drawing the pictures you order

Retention and deletion

We keep your inquiries and assessments so you can return to them in your console.

You can delete your account yourself at any time, on the Delete your account page (questico.site/delete-account) or in the app. Deletion removes your sign-in, profile and everything you made, straight away. A site you own alone goes offline and is deleted after 30 days; one you share passes to your partner. For paid orders, Indian tax law requires us to keep the payment record (amount, date, payment reference, and any business name and GSTIN given for the invoice) for as long as the law requires, with your contact details removed.

You can also email us to delete your account or any part of your data, and we will do it within 7 days.

Contact

Questico.site is run by Questico AI Solutions LLP (LLPIN ADD-0544), registered office: Plot No 108A and 93A, Upper Ground Floor, Pratap Nagar, Hari Nagar (West Delhi), Hari Nagar Police Station, New Delhi, West Delhi – 110064, Delhi, India.

For any privacy question or request, write to contact@questico.site. This policy is governed by the laws of India.