Privacy policy

What we collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We never see or store your Google password.

When you use the console, we store the business idea you describe, your answers to the follow-up questions, and the assessment our system generates for you.

When you request a discovery call or submit the enquiry form, we store the contact details you provide — your name, email, phone number, and message.

How we use it

Your information is used for one purpose: providing the Questico service — generating your AI assessment, preparing your consultative brief and working preview, and contacting you about the discovery call you requested.

We do not sell your data. We do not share it with advertisers. We do not send marketing emails you haven't asked for.

AI processing

To generate your questions, assessment, and working preview, the idea and answers you submit are processed by third-party large-language-model providers through an API. This content is transmitted securely and used only to produce your results. We do not permit our providers to use your content for training their models.

Children's photos (Kids Playbook storybooks)

A storybook is made only after a parent or legal guardian confirms they are one, and agrees to the photo being used to make that book.

The child's photo is used only to draw that child in that one book: an AI model checks that it clearly shows one child and nothing unsuitable, and the image model uses it as the reference for the cover drawing. Both receive it through our AI gateway, OpenRouter.

The photo is never written to our database or file storage. It is held in our server's memory only while the pictures are drawn, and discarded the moment they are done, usually within three minutes, whether or not the book is finished. It is shrunk in your browser before it is sent, which also removes its location data.

The finished drawings and story (not the photo) are kept for 3 days if the book is not bought, and for 7 days after purchase so the PDF can be downloaded again; then they are deleted. Email us to have them deleted sooner.

Where your data lives

Your data is stored in a Supabase (PostgreSQL) database hosted in the AWS Mumbai region (ap-south-1), protected by row-level security so that only you and Questico's administrators can access your records. Our application runs on Vercel and Render.

Cookies and sessions

We use browser storage only to keep you signed in (your authentication session). We do not use advertising or cross-site tracking cookies.

Third-party services

We rely on the following services to operate, each receiving only what it needs:

• Google — sign-in authentication
• Supabase — database and authentication infrastructure
• Vercel and Render — application hosting
• LLM API providers — generating your assessment and preview content
• Image-generation API providers, through OpenRouter — drawing the pictures you order
• Cal.com — scheduling, if you choose to book through the calendar link

Retention and deletion

We keep your inquiries and assessments so you can return to them in your console. If you would like your account or any of your data deleted, email us and we will remove it within 7 days.

Contact

For any privacy question or request, write to contact@questico.site. This policy is governed by the laws of India.