Legal

Privacy policy for Quezzi.

This policy explains how Quezzi collects, uses, stores, and protects personal information across the SMS service.

Key Points

  • We collect only what's needed to provide the service
  • We never sell your data to third parties
  • We don't use your data for advertising
  • SMS messages are not end-to-end encrypted
  • You control your data and can delete it anytime

By using Quezzi, you agree to this Privacy Policy.

Effective Date: December 1, 2025
Last Updated: November 2025

Contact Information

For legal correspondence or postal mail, please email us to request the appropriate mailing address.

1. Who We Are

Quezzi is an SMS-based AI assistant service operated by Quezzi Pty Ltd, a registered company based in New South Wales, Australia (postcode 2450).

2. Information We Collect

2.1 Information You Provide Directly

  • Phone Number: Used for account authentication, billing, and SMS communication.
  • Messages & Conversations: Text messages you send, AI responses, and conversation history.
  • Payment Information: Billing name and card details (processed securely by Stripe; we never store full card info).
  • Account Preferences: Subscription plan, usage, balance, notification preferences.
  • General Location (Optional): City/region you provide; used for location-relevant responses. No GPS tracking.

2.2 Information Collected Automatically

  • Usage Data: Timestamps, message counts, service interactions.
  • Technical Data: Mobile carrier info, SMS delivery status, geographic region.
  • Device & Network Info: We do NOT collect device identifiers, IP addresses, or location data beyond your phone number.

2.3 Information We Do NOT Collect

  • GPS location data
  • Contact lists or phone book data
  • Photos, videos, or media files
  • Other apps on your device
  • Browsing history
  • Social media profiles

3. How We Use Your Information

3.1 To Provide the Service

  • Deliver SMS messages and generate AI responses
  • Search the web for current info when needed
  • Maintain conversation context
  • Provide location-relevant info
  • Personalise responses
  • Process payments
  • Track usage against plan limits

3.2 To Improve the Service

  • Analyse conversation patterns
  • Identify issues/errors in AI responses
  • Enhance features based on usage
  • Test new capabilities

3.3 To Communicate with You

  • Service notifications
  • Support messages
  • Important updates

3.4 For Safety & Compliance

  • Detect/prevent abuse, fraud, unauthorised access
  • Comply with legal obligations
  • Enforce Terms of Use and Acceptable Use Policy

4. How We Share Your Information

4.1 Third-Party Service Providers

  • OpenAI (AI Response Generation): Message content and history sent to OpenAI. Privacy Policy
  • Google (Web Search): Search queries sent to Google. Privacy Policy
  • Twilio (SMS Delivery - US & Canada): Phone number, message content, delivery timestamps. Privacy Policy
  • Mobile Message (SMS Delivery - Australia): Phone number, message content, delivery timestamps. Privacy Policy
  • Stripe (Payment Processing): Billing name, card info, transaction amounts. Privacy Policy
  • Service Infrastructure & Automation: All data processed by our infrastructure, stored in Australia, protected by contract and law.
  • Disclosure if required by law (subpoenas, court orders, law enforcement, national security)
  • We notify you unless prohibited by law

4.3 Business Transfers

  • If Quezzi is acquired/merged, your info may transfer to the new entity (with notification and policy continuity)

4.4 What We DO NOT Share

  • We do NOT sell your info, share with advertisers, use for marketing, provide to data brokers, or share with social media platforms

5. Data Security & Protection

5.1 Security Measures

  • HTTPS/TLS encryption for all API communications
  • Encryption at rest for stored data
  • Secure payment processing (PCI-DSS-compliant Stripe)
  • Limited employee access (need-to-know)
  • Multi-factor authentication
  • Regular security audits and monitoring
  • Secure cloud hosting, regular updates, automated backups

5.2 SMS Security Limitations

  • SMS passes through carrier networks in plain text
  • Potential interception by carriers, governments, or attackers
  • Vulnerable to SIM swapping and carrier-level attacks

SMS is suitable for casual questions and general info, not confidential data. For sensitive communications, use end-to-end encrypted platforms.

5.3 Emergency Use Warning

  • We cannot contact emergency services for you
  • Do not use Quezzi for medical emergencies, mental health crises, threats, crime, or any situation requiring immediate help

5.4 No Guarantee of Perfect Security

We implement reasonable security measures, but no system is 100% secure. We cannot guarantee absolute protection, prevention of all breaches, or complete security of SMS transmissions. You use Quezzi at your own risk. We will notify you promptly of any data breach affecting your information.

6. Data Retention & Deletion

6.1 How Long We Keep Your Data

  • Conversation history: Retained while your account is active
  • Usage data: Retained for billing/service purposes
  • Payment records: Retained for 7 years (financial/tax requirements)
  • After account deletion: Personal data deleted within 30 days; phone numbers retained for fraud prevention; anonymised/aggregated data may be kept for analytics; deleted data may persist in backups for up to 30 days

6.2 Third-Party Retention

  • OpenAI: 30 days for abuse monitoring
  • Google: Retains search queries per their policies
  • Twilio/Mobile Message: SMS logs retained per telecom regulations
  • Stripe: Payment data retained per financial regulations (typically 7 years)

6.3 How to Delete Your Account

  • Log into your account at quezzi.com/identity/account/login and select account deletion
  • Personal data removed within 30 days; some data may be retained longer (see above)
  • Third-party providers retain data per their policies

7. Your Privacy Rights

7.1 Rights for All Users

  • Access: Request a copy of your personal data
  • Correction: Request corrections
  • Deletion: Request deletion (subject to legal retention)
  • Portability: Request a copy of your conversation history
  • Objection: Object to certain processing

7.2 Additional Rights for Australian Users

  • Right to complain to OAIC
  • Right to request info about overseas data transfers
  • Right to anonymity/pseudonymity where practicable

7.3 Additional Rights for US & Canada Users

  • California Residents (CCPA/CPRA): Right to know, opt-out, non-discrimination
  • Other US States: Similar rights under state laws
  • Canadian Users (PIPEDA): Right to access, correct, withdraw consent, contact Privacy Commissioner

7.4 How to Exercise Your Rights

  • Email [email protected] with your phone number, request, and details
  • We aim to respond within 30 days; may verify identity

8. Children's Privacy

8.1 Age Requirements

  • Minimum age: 13 years old
  • No data knowingly collected from children under 13
  • Accounts by users under 13 terminated immediately
  • Users must meet minimum age in their jurisdiction
  • Parental/legal guardian consent required
  • Consent verified via credit card (must match parent/guardian)

8.3 Parental Account Requirements

  • Parent/guardian must create and maintain account
  • Responsible for all activity, financial liability, and supervision
  • Indemnify Quezzi against claims from minor's use
  • Acknowledge AI responses may not always be appropriate for minors

8.4 Age Verification

  • We may verify user age at any time
  • False age declarations result in termination (no refunds)
  • Minor accounts lacking consent: data deleted within 30 days

8.5 Children Under 13

  • No personal info knowingly collected from children under 13 without parental consent
  • If you believe a child under 13 has provided info, contact [email protected]; info will be deleted upon verification

8.6 Parental Rights for Minors (13-17)

  • Parents/guardians may review, request deletion, refuse further collection, or withdraw consent
  • Contact [email protected] with verification, child's phone number, and request

9. International Data Transfers

9.1 Where Your Data Is Processed

  • Primary storage: Australia
  • Service providers: OpenAI (USA), Google (USA/global), Twilio (USA/global), Mobile Message (Australia), Stripe (USA/regional)

9.2 Data Transfer Safeguards

  • We ensure providers comply with privacy protections similar to Australian Privacy Act 1988 (Cth)
  • Due diligence and regular review of provider practices

By using Quezzi, you consent to the international transfer of your data as described above.

10. Cookies & Tracking Technologies

10.1 Our Service (SMS)

  • Quezzi's SMS service does NOT use cookies, web beacons, tracking pixels, or analytics scripts
  • SMS messaging does not support these technologies