Privacy Policy

1. Introduction

MyQS Ltd ("MyQS", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the MyQS platform at myqs.ai ("Service").

MyQS Ltd is a company registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

By using our Service, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your name and email address
• Company name, address, and contact details (optional)
• Password (stored in hashed form; we never store plaintext passwords)

2.2 Uploaded Content

When you use the Service, we store:

• Construction drawings you upload (PDF, DXF, and image files)
• Project names, descriptions, and associated metadata
• AI-generated BOQs, documents, and analysis results
• Company logos and branding assets you upload

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number or payment card details on our servers. Stripe may collect your card number, expiry date, and billing address. Please refer to Stripe's Privacy Policy for details on how they handle your payment data.

2.4 Usage Data

We automatically collect certain information about how you use the Service, including pages visited, features used, timestamps of actions, browser type, and device information. This data helps us improve the Service and diagnose technical issues.

3. How We Use Your Information

We use your information for the following purposes:

• Providing the Service: Processing your drawings with AI, generating BOQs and construction documents, and managing your projects.
• Account management: Authenticating your identity, managing your subscription, and processing payments.
• Communication: Sending account-related emails such as password resets, subscription confirmations, and important service updates.
• Service improvement: Analysing usage patterns to improve features, performance, and reliability.
• Legal compliance: Meeting our obligations under applicable laws and regulations.

We process your personal data on the following legal bases under UK GDPR: performance of a contract (providing the Service), legitimate interests (improving the Service and ensuring security), and compliance with legal obligations.

4. Data Storage & Security

We take the security of your data seriously. Your data is stored and protected as follows:

• Database: Your account data, project information, and AI-generated content are stored in a PostgreSQL database hosted by Neon, with encryption at rest and in transit.
• Application hosting: The Service is hosted on Vercel with HTTPS encryption for all connections.
• Passwords: All passwords are hashed using industry-standard algorithms. We never store or have access to your plaintext password.
• Access controls: Access to production systems is restricted to authorised personnel only.

While we implement appropriate technical and organisational measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to operate MyQS. Each service may process your data as described below:

• Stripe (payment processing): Handles subscription billing and payment card processing. Stripe is PCI DSS Level 1 certified. See Stripe's Privacy Policy.
• Anthropic (Claude AI) (AI analysis): Your uploaded construction drawings and project descriptions are sent to Anthropic's Claude API for AI-powered analysis, including dimension extraction, BOQ generation, and document creation. Anthropic processes this data to provide AI responses and may retain it in accordance with their data processing terms. See Anthropic's Privacy Policy.
• Resend (email delivery): Used to send transactional emails such as password resets and account notifications. Your email address is shared with Resend for this purpose. See Resend's Privacy Policy.
• Neon (database hosting): Provides the PostgreSQL database infrastructure where your account and project data is stored. See Neon's Privacy Policy.
• Vercel (application hosting): Hosts the MyQS web application and handles incoming web requests. See Vercel's Privacy Policy.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data: Retained for the duration of your account and for up to 30 days after account deletion to allow for recovery.
• Uploaded drawings and project data: Retained for as long as your account is active. Deleted upon account closure and after the recovery period.
• Payment records: Retained for up to 7 years as required by UK tax and accounting regulations.
• Usage logs: Retained for up to 12 months for service improvement and security monitoring purposes.

7. Your Rights (GDPR)

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
• Right to erasure: You can request that we delete your personal data, subject to our legal obligations to retain certain records.
• Right to data portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
• Right to object: You can object to our processing of your data where we rely on legitimate interests as the legal basis.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at hello@myqs.ai. We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

MyQS uses minimal cookies that are strictly necessary for the operation of the Service:

• Authentication session cookie: Used to keep you signed in to your account. This cookie is essential for the Service to function and expires when you sign out or after a period of inactivity.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not engage in cross-site tracking or sell your data to advertisers.

9. International Data Transfers

Some of our third-party service providers (including Vercel, Anthropic, and Stripe) may process your data outside the United Kingdom. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner, or transfers to countries with an adequate level of data protection as determined by the UK government.

10. Children's Privacy

MyQS is a professional tool designed for use by construction industry professionals. The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by email or through a prominent notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.