← Back to Qu-Ay

Privacy Policy

Last updated: 6 September 2026

This Privacy Policy explains what information Qu-Ay ("Qu-Ay," "we," "us") collects when you use the Service, and how it's used. Qu-Ay is currently run by a small, informal partnership based in Australia, not through a registered business; this section will be updated if that changes.

1. What we collect

When you request an audit, we collect the email address and store URL you submit, and your IP address (used only for abuse prevention and rate limiting). We don't require an account and don't collect payment details beyond what our payment processor handles directly.

2. How we use it

We use this information to run the audit you requested, email you the resulting report, and prevent abuse of the Service (for example, rate-limiting repeated requests from one network). We don't sell your information or use it for advertising.

3. Third-party providers

Running an audit means your submitted URL and the resulting page content/screenshots are processed by a small number of third-party service providers on our behalf, including:

  • An AI service provider, to classify the site and generate the report's findings.
  • A cloud-based browser automation service, used to visit and interact with the Target Site.
  • A transactional email service, to send the PDF report to the email address you provide.

Each provider processes data under its own privacy policy and terms, and only for the purpose of providing the Service to you. We can provide the names of these providers on request — contact us at admin@quay.agency.

4. Retention

Audit job status is held in memory only for the duration of the audit and is automatically cleared shortly after (currently within 30 minutes). We do not maintain a database of past audits or reports. The report itself is delivered to you by email; a copy may remain in your email provider's and our email-delivery provider's systems under their own retention practices.

5. Data incidentally captured from the Target Site

Because the audit browses and interacts with the Target Site's live pages, screenshots and page content captured during testing may incidentally include information present on that site (product data, page text, publicly visible content). We don't intentionally capture private customer data belonging to the Target Site, but you should only submit sites you own or are authorized to test, in part for this reason — see our Terms of Service.

6. Your rights

You can request access to, correction of, or deletion of your information by contacting admin@quay.agency. Given our current size, we may fall under the small-business exemption to the Australian Privacy Act 1988, but we aim to handle your information consistently with the Australian Privacy Principles regardless. If you're in the EU/UK or a jurisdiction with its own privacy law (GDPR, CCPA, or similar), you may have additional rights there too — contact us to exercise them.

7. Security

We take reasonable technical and organizational measures to protect the information described above, but no method of transmission or storage is completely secure.

8. Cookies and tracking

The Service does not currently use cookies or analytics beyond what's strictly necessary to operate the site. If that changes, this policy will be updated accordingly.

9. Children

The Service is not directed to, and should not be used by, children.

10. Changes to this policy

We may update this policy from time to time; the "last updated" date above will reflect the latest revision.

11. Contact

Questions about this policy: admin@quay.agency.