Effective Date: January 9, 2026

1. Introduction

Welcome to Inqry AI ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our contextual RAG platform and services (the "Service").

Data Controller: Snapcircle Limited, The Gates, Beacon South Quarter, Dublin 18, Ireland.

2. Roles: Controller vs. Processor

Account and billing data: We act as a data controller for information about your organization, billing, and account administration.
Customer content and end-user data: When you upload documents or collect chat data on behalf of your organization, we act as a data processor and process that data on your behalf. You control what data is uploaded and how it is used in your workspace.

If you require a Data Processing Agreement (DPA), contact us at privacy@inqry.ai.

3. Information We Collect

We collect the following types of information:

Account Information: Name, email address, password hash, and profile image when you register.
Usage Data: Information about how you use our service, including chat logs, knowledge base contents, and feature usage.
Technical Data: IP addresses (anonymized where possible), browser type, device information, and diagnostic logs.
Billing Data: Payment status, invoices, and billing history (payment details are handled by Stripe).
Support Data: Messages you send to support and related diagnostic information.
Cookies: Essential session cookies and, with consent, analytics cookies. See our Cookie Policy.

4. Sources of Data

We collect data:

Directly from you when you sign up, configure the Service, or contact support.
From your end users when they interact with your Inqry widget (if you enable that collection).
From service providers (e.g., payment confirmation from Stripe).
Automatically through usage and diagnostic logs.

5. How We Use Your Data

We process your data for the following legal bases:

Contractual Necessity: To provide the Service you signed up for.
Legitimate Interests: To improve product quality, prevent fraud, and ensure security.
Consent: For optional marketing communications or non-essential cookies.

6. Subprocessors and Third Parties

We use trusted third-party service providers (subprocessors) to deliver our services. These include:

OpenRouter, OpenAI, Anthropic & Google (Gemini): LLM inference and embeddings.
Voyage AI: Search result reranking.
Stripe: Payment processing.
Hetzner Cloud & Vercel: Hosting and infrastructure.
Neon, Qdrant Cloud & Redis Cloud: Database and caching services.

For a complete list, see our Subprocessors page.

7. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction. We use appropriate safeguards, such as:

EU-US Data Privacy Framework (DPF): For providers certified under the DPF (e.g., Vercel).
Standard Contractual Clauses (SCCs): For US-based providers where DPF is not applicable (e.g., OpenRouter).

8. Automated Processing and AI

Our Service uses AI to answer questions and automate workflows. We do not use automated decision-making that produces legal or similarly significant effects without human involvement. If you believe a decision affected you, contact us at privacy@inqry.ai.

9. Data Retention

We retain personal data only for as long as necessary to provide our services or as required by law.

Chat logs: retained for 90 days by default (unless your plan or settings specify otherwise).
User account data: retained until account deletion.
Billing records: retained as required by tax and accounting laws.
Backups: retained for a limited period for disaster recovery.

10. Security

We use industry-standard security practices, including encryption in transit, access controls, and monitoring. No system is 100% secure, but we continuously improve our safeguards.

11. Your Rights (GDPR/UK)

If you are located in the European Economic Area (EEA) or the UK, you have certain data protection rights:

Right to Access: Request copies of your personal data.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data under certain conditions.
Right to Restrict Processing: Limit how we process your data.
Right to Object to Processing: Object to processing based on legitimate interests.
Right to Data Portability: Receive your data in a portable format.

To exercise these rights, contact us at privacy@inqry.ai.

12. US State Privacy Rights

If you are a resident of certain US states (e.g., California, Colorado, Connecticut, Virginia, Utah), you may have rights to access, delete, correct, or opt out of certain processing. We do not sell your personal information and do not share it for cross-context behavioral advertising. To exercise your rights, contact privacy@inqry.ai.

13. Children’s Privacy

The Service is not directed to children under 13 (or under 16 where applicable), and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@inqry.ai and we will delete it.

14. Cookies

We use cookies to enhance your experience. You can choose to accept or decline cookies. Please see our Cookie Policy for more information.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact privacy@inqry.ai.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you believe your rights have been violated.