Privacy Policy

1. Scope of this policy

1.1 What this policy covers

This policy explains what QORUS INC ("Qorus", "we", "us") does with personal information. In this policy, personal information means information that identifies, relates to, describes, or can reasonably be linked with a particular person or household. Some of the laws described in section 19 (Region-specific disclosures) use the term personal data for the same idea; where that policy quotes a statute, it uses the statute's term.

This policy covers the Qorus website at qorus.io, the Qorus mobile applications for iPhone and Android, the public Qorus Profile pages we host for our customers, and any Qorus web application you sign in to. Together, these are the Service.

Qorus offers the Service in the United States, Canada, and Latin America. We do not offer the Service to people in the European Union, the European Economic Area, or the United Kingdom.

1.2 What this policy does not cover

This policy does not cover what our customers do with information they collect using Qorus. If a Member saved your details into their catalog after meeting you, that Member decides what happens to those details. Section 9 (If someone added your details to Qorus) is written for you.

This policy also does not cover any third-party service you choose to connect to Qorus yourself. That service handles your information under its own terms.

2. Summary

This summary helps you find things. The numbered sections below it govern, and this summary never states anything they contradict.

• We collect what the Service needs in order to work: your account, the Qorus Profile you publish, the people you save, and your bookings. Section 5 (Information we collect) lists every category.
• We do not sell or share personal information, and we do not disclose it for advertising. The Qorus mobile applications contain no advertising, analytics, crash-reporting, or third-party tracking software.
• We do not create voiceprints. We transcribe voice notes and discard the recording. Section 7 (Voice notes and transcription) describes the whole path.
• We do not use your content, your contacts, your notes, or your recordings to train artificial intelligence models.
• The contacts you save belong to you. We hold them for you and we never market to them ourselves.
• Your Qorus Profile is public once you publish it. Section 10 (Your Qorus Profile is public) explains what that means.
• You can ask us for a copy of anything we hold about you, or ask us to correct or delete it, by writing to legal@qorus.io. Members can also delete their accounts from Account Settings in the Qorus application. Section 17 (Your rights and how to exercise them) tells you how, how long we take, and how to appeal if we say no.

3. The people this policy is about

Qorus involves three kinds of people, and the rest of this policy is clearer once they are named.

Where this policy says you, it means a Member, unless the section says otherwise.

4. When we decide, and when you decide

This distinction runs through the rest of the policy.

4.1 Your own account: we decide

Your name, your email address, your Qorus Profile, and how you use the Service. We decide why we hold that information and what we do with it, and we answer to you for it. In the language the laws use, we are the controller, the business, or the responsable.

4.2 What you put into Qorus about other people: you decide

The Contacts in your catalog, the notes and transcripts attached to them, the recipients of anything you send, and your clients' bookings. Those are yours. We process them to run the Service for you, on your instructions, and for no other purpose. In the language the laws use, we are your processor, service provider, or encargado.

To be concrete about what section 4.2 means: we do not sell Contact information, we do not market to your Contacts on our own behalf, we do not enrich your Contacts from outside sources, and we do not combine one Member's Contacts with another Member's Contacts.

5. Information we collect

This section is the Notice at Collection required by the California Consumer Privacy Act. It states every category of personal information we collect, where each category comes from, what we use it for, whether we sell or share it, and how long we keep it.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising. That is true of every category in the table below, so the table has no separate column for it.

Section 15 (How long we keep information) gives the full retention rules, including what happens to backups.

We do not collect sensitive personal information as the California Consumer Privacy Act defines it, and we do not use or disclose any category above for a purpose other than the one stated.

5.1 What we do not collect

Qorus is currently free to download and use. We do not collect payment-card information or other financial information through the Service. The Service has no paid memberships, paid upgrades, or in-app purchases.

The Qorus mobile applications contain no analytics, crash-reporting, advertising, or third-party tracking software. Nothing inside the application watches what you do and reports it to somebody else.

We do not ask for your device's address book. The applications do not request location permission and do not use your device's location services, so we never receive GPS or device location. Our servers can infer an approximate country or city from your IP address, which section 5 (Information we collect) discloses under Technical.

We do not collect your health data, and we do not collect information about your race, religion, politics, sex life, or union membership.

6. Camera, microphone, and photos

The applications ask for permission at the moment you first use the feature that needs it, never at launch.

• Camera, when you scan a QR code, capture a business card, or take a profile photo. When you capture a business card we keep the image, as section 5 (Information we collect) sets out.
• Microphone, when you record a voice note, and only while you are recording one. Qorus never records in the background and never while the application is closed.
• Photos, when you choose an image for your Qorus Profile. We receive the image you pick.

Every one of these permissions is optional. You can refuse any of them and keep using Qorus, and you can revoke any of them at any time in your device settings. Without the camera you can type a Contact in by hand. Without the microphone you can write a note instead of speaking it. Without photos you keep the profile image you already have.

The applications do not access your device's contact list and do not use your device's location services.

7. Voice notes and transcription

7.1 What happens when you record one

You press record and the application captures audio. The audio is transmitted to our servers, and from there to Groq, which runs the Whisper speech recognition model and returns text. The text then goes to Anthropic's Claude, running inside Amazon Web Services, which reads the contact details out of it: a name, a company, a phone number. Only those extracted details are saved to your account. The result attaches to the Contact you were working on, and you can read, edit, or delete it.

7.2 The recording is not retained

The audio exists only for as long as the transcription takes. It passes through our servers in memory: we do not write it to our database and we do not write it to our file storage. Our speech recognition provider is configured for zero data retention, so it does not keep a copy either. What remains afterward is the transcript, attached to the Contact record, until you delete it.

7.3 We do not create voiceprints

We do not identify or distinguish speakers. We do not label who is talking. We do not use voice to verify anybody's identity. We do not create or store a voiceprint, a biometric template, or any other identifier derived from the physical characteristics of your voice. We use no voice-biometrics or speaker-identification service or library. We never sell, lease, trade, or otherwise profit from a biometric identifier, because we never create one.

7.4 Recording other people is your responsibility

In several places, including California, Illinois, Pennsylvania, and Washington, recording a private conversation without the consent of everybody in it is a criminal offense, and the person recorded can sue without proving any harm. If you record anyone other than yourself, you must obtain that person's permission first. Section 9 of our Terms of Use (Voice notes) requires it.

8. The contacts you save

The catalog holds information about people who never signed up for Qorus, so it has its own rules.

When you scan a business card, dictate a Contact, accept a Get Contact exchange, or receive a form submission, we store what was captured, the date, anything you add afterward, and any place you record yourself. Where you captured a business card, we also store the image of the card itself.

That information is yours. We hold it for you and act on your instructions. Concretely:

• We do not sell it, rent it, or trade it.
• We do not add those people to any Qorus mailing list.
• We do not enrich it with data bought from anybody else.
• We do not combine one Member's catalog with another Member's catalog.
• We do not use it to train models.

Because the information is yours, the responsibility for it is yours. Section 8 of our Terms of Use (The contacts you save) requires you to have a lawful basis for holding each person's details, to have collected them fairly, and to answer those people when they ask you about them.

9. If someone added your details to Qorus

This section is for you if you are not a Qorus Member and somebody saved your details after meeting you.

A Member can store your name, email address, phone number, company, the date you met, any place they record, notes, a photograph of a business card you gave them, and a transcript of a voice note they recorded about the conversation.

The Member decides what happens to that information. They chose to save it and they choose what to do with it. We hold it for them.

We do not sell it, we do not market to you, we do not add you to anything of ours, and we do not build a profile of you from it.

9.1 How to have it changed or removed

Contact the Member directly if you know who they are. They hold the record and can act fastest.

If you do not know who they are, or they do not respond, write to legal@qorus.io with whatever detail you can give us. We will look for the record, pass your request to the Member, and act on it ourselves where we are permitted or required to. If we cannot find a match, we will tell you.

You do not need a Qorus account to ask, and we will never require you to create one.

10. Your Qorus Profile is public

Anybody with the link or the QR code can open a published Qorus Profile. There is no login in front of it, and search engines can find it.

Everything you put on it is public: your photo, your job title, your phone number, your links. Once somebody has opened it or saved it, we cannot reach that copy.

When a Visitor opens your Qorus Profile, we record the visit so we can show you your metrics. That means the time, which QR type or link brought them, and the country or city their IP address suggests. We do not record a Visitor's precise location and we do not identify a Visitor.

You can unpublish or delete your Qorus Profile at any time, which stops the link resolving. That does not reach screenshots or saved copies other people already have.

11. How we use information

Turning marketing off does not stop important service messages, such as security alerts and notices of changes to this policy.

11.1 Automated decision-making

We do not make any decision about you by automated means that produces a legal effect or a similarly significant effect. The Service uses automated processing to read contact details out of a transcript, as section 7 (Voice notes and transcription) describes, and that processing produces a draft contact record you can edit or delete.

12. How we share information

We use other companies to run parts of Qorus. Each one acts on our behalf and under contract, receives only what it needs in order to do its job, processes it solely to return a result to us, and is not permitted to use it for its own purposes.

That prohibition includes training. The companies that transcribe your voice notes and read the contact details out of them are barred by their agreements with us from using what we send to train or fine-tune any model, and we have given none of them permission to do so.

That table covers the providers that hold information for us. Where you connect Qorus to another service yourself, that service receives whatever you send it, under its own terms.

We also disclose information where the law requires it, where we need to in order to establish or defend a legal claim, or to protect somebody from harm. If Qorus is ever sold or merged, information moves with the business, and this policy continues to apply until we tell you otherwise.

Any parent, subsidiary, or other related company of ours with access to your information provides the same or equal protection of it as this policy describes.

No disclosure in this section is a sale or a share as the California Consumer Privacy Act defines those terms.

13. What we never do

• We have never sold or rented personal information, and we do not sell or rent it.
• We do not share personal information for advertising, and we do not use your content to build advertising profiles.
• The applications contain no advertising, no advertising identifiers, and no third-party analytics, tracking, or crash-reporting software.
• We do not use your content, your Contacts, your notes, or your voice recordings to train artificial intelligence models, ours or anybody else's.
• We do not create voiceprints or any other biometric identifier.
• We do not read your Contacts, notes, or transcripts to improve the Service.
• We do not require you to have an account in order to ask us about information we hold about you.
• We do not treat you differently for exercising any right in this policy.

14. Tracking technologies and your choices

14.1 Cookies

Our website uses the cookies it needs in order to work: remembering your preferences, and keeping your session going where you sign in. You can refuse or delete cookies in your browser, though refusing the ones that carry a session will stop you signing in.

14.2 Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale and sharing of personal information, and we honor it. We do not sell or share personal information in any case, so the signal does not change what we do.

14.3 Do Not Track

Browsers send a "Do Not Track" signal that has never had an agreed meaning. We do not respond to it. We respond to Global Privacy Control, as section 14.2 describes.

14.4 Tracking across other sites

We do not allow third parties to collect personal information about your activity across different websites through the Service, and no third party does so.

15. How long we keep information

Section 5 (Information we collect) gives the retention period for each category at the point of collection. The table below repeats those periods together and adds the rules that apply across all of them.

Where a period is not fixed, the rule we apply is the length of time the account is open, plus the shortest period after that which lets us meet a legal obligation, defend a claim, or stop fraud.

Deleted information can persist in backups for a period after deletion, and we remove it as those backups are replaced.

16. Security

Information sent between you and Qorus is encrypted in transit, and it is encrypted at rest in our databases and in our file storage. Access inside the company is limited to the people who need it in order to do their jobs.

No system is perfectly secure. If a breach affects your information and the law requires us to tell you, we will tell you, along with what happened and what to do about it.

17. Your rights and how to exercise them

17.1 What you can ask for

Wherever you live, you can ask us to do all of the following. We apply one standard to everybody rather than a different standard per state.

• Show you what we hold about you, where we got it, why we have it, and who we gave it to.
• Correct anything that is wrong.
• Delete it. Section 18 (Deleting your account and your information) describes what goes and what stays.
• Give you a copy in a form you can take somewhere else.
• Stop us using it for a purpose, including any decision made by automated means, and have a person look again.
• Withdraw consent where we relied on it.
• Appeal a decision, as section 17.4 describes.

17.2 How to ask

Write to legal@qorus.io. You do not need an account to ask.

We may need to confirm your identity before we hand over or delete anything, and we will ask for the least information we can. We never ask for identification in order to opt you out of something. Somebody can act for you with your written permission, and we will not make you resubmit the request yourself afterward.

17.3 How long we take

We will respond within 45 days. If we need longer, we will tell you within those 45 days, explain why, and take no more than a further 45 days.

Some laws set a shorter deadline, and we work to the one that applies to you: 5 business days for a correction in Argentina, 10 business days for a query in Colombia and for an objection in Peru, 15 days in Brazil, 20 days in Mexico, and 30 days in Canada.

17.4 If we say no

If we refuse a request, we will tell you why and how to appeal.

To appeal, reply to our decision or write to legal@qorus.io with the word "appeal" and tell us why you disagree. A person who was not involved in the original decision will review it. We will tell you the outcome of an appeal within 45 days, in writing, with our reasons. If we deny the appeal, we will also give you a method for contacting your state Attorney General or the regulator listed in section 23 (How to reach us).

18. Deleting your account and your information

You may delete your account at any time by selecting Account Settings → Delete Account in the Qorus application. You may also write to legal@qorus.io or support@qorus.io from the address on your account if you need assistance. We complete assisted deletion requests within 24 to 48 business hours.

18.1 What goes

Your account and login. Your Qorus Profile, which stops resolving at its public link and QR code. Your contact catalog, including the personal information of the third parties you saved into it. The images of any business cards you scanned. The transcripts of your voice notes. The photos you uploaded. Your notes and tags. The content of anything you built to send.

We delete this information rather than deactivating it or anonymizing it, and we do not keep a copy of it for marketing or analytics.

18.2 What stays, and why

Deleted information can persist in backups for a period after deletion, and we remove it as those backups are replaced.

Deleting your account does not withdraw information you already sent to somebody else, remove copies of your Qorus Profile that other people saved, or cancel bookings your clients have already made.

19. Region-specific disclosures

19.1 California

Your rights under the California Consumer Privacy Act are the rights listed in section 17.1 (What you can ask for), together with the right to opt out of the sale or sharing of personal information and the right to limit the use of sensitive personal information.

• The categories of personal information we collect, the categories of sources, the purposes, and the retention period for each are in section 5 (Information we collect), which is our Notice at Collection.
• The categories of third parties who receive personal information are in section 12 (How we share information).
• We did not sell or share any personal information in the last twelve months, and we do not collect sensitive personal information, so no "Do Not Sell or Share My Personal Information" link and no "Limit the Use of My Sensitive Personal Information" link is required.
• We do not disclose personal information to third parties for their own direct marketing, so there is nothing to request under the Shine the Light law.

Under California Civil Code section 1789.3, you may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or (800) 952-5210.

19.2 Other United States states

If your state has a comprehensive privacy law, you have the rights in section 17.1 (What you can ask for), the response times in section 17.3 (How long we take), and the appeal path in section 17.4 (If we say no). If we deny your appeal, you may complain to your state Attorney General.

Nevada residents may send a verified opt-out-of-sale request to legal@qorus.io. We do not sell personal information. Rhode Island residents: the categories we collect are listed in section 5 (Information we collect), and we do not sell personal information to any third party.

19.3 Canada

We handle personal information in accordance with PIPEDA. Your information is stored and processed outside Canada, in the United States, and it is therefore subject to United States law, including lawful access by United States authorities. You can complain to the Office of the Privacy Commissioner of Canada.

Quebec. You also have the right to data portability, the right to be told about and to contest a decision made only by automated means, the right to ask us to stop disseminating information about you or to de-index it, and the right to complain to the Commission d'accès à l'information.

19.4 Brazil

We process personal data in accordance with the LGPD. Your rights under Article 18 are confirmation that processing exists; access; correction of incomplete, inaccurate, or out-of-date data; anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed unlawfully; portability to another provider; deletion of data processed with your consent; information about the public and private bodies your data has been shared with; information about the consequences of refusing consent; and withdrawal of consent. You can complain to the ANPD.

19.5 Mexico and elsewhere in Latin America

We process personal data in accordance with local law. You can exercise your access, rectification, cancellation, and objection rights by writing to legal@qorus.io. Residents of Mexico can complain to the competent national authority, residents of Colombia to the Superintendencia de Industria y Comercio, residents of Argentina to the Agencia de Acceso a la Información Pública, and residents of Peru and Chile to their respective data protection authorities.

20. Where your information is held

QORUS INC operates from the United States, and your information is stored in the United States. Our databases and our file storage are both in United States regions. We handle your information, and so do the providers named in section 12 (How we share information).

If you live outside the United States, this means your information is transferred to and processed in the United States. The laws of the United States are not the same as the laws where you live, and United States courts and authorities could in principle reach your information. We remain accountable for it wherever it sits.

We require comparable protection from everyone who handles it for us. Every provider in section 12 is under a contract that requires it to protect your information to the standard this policy describes, to use it only to do the job we gave it, and to use it for nothing of its own.

21. Children

The Service is for adults. Section 1 of our Terms of Use (Acceptance of these terms and eligibility) requires every Member to be at least 18 years old, and we do not permit anyone under 18 to create an account.

We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it. If you believe a person under 18 has given us information, write to legal@qorus.io and we will delete it.

Because the Service is for adults and we do not direct it to children, we do not process the personal information of a known child, we do not sell or share the personal information of a person under 16, and we do not use the personal information of a person under 16 for targeted advertising or profiling.

22. Changes to this policy

We review this policy at least once a year, and whenever we add a third-party service, collect a new field, open a new marketing channel, enter a new jurisdiction, materially change our data practices, or add or change a feature that uses artificial intelligence.

When this policy changes, we will update the version number and both dates at the top and record the change in section 24 (Version history).

If a change materially affects you, we will tell you by email or in the application before it takes effect. Where the law requires your agreement, we will ask for it rather than assume it. We will not apply a change retroactively to information we have already collected without telling you first.

23. How to reach us

QORUS INC

• Privacy point of contact, for privacy questions, requests, complaints, and appeals: legal@qorus.io
• Everything else: support@qorus.io

If we have not resolved something to your satisfaction, you can complain to your regulator: the California Privacy Protection Agency or your state Attorney General in the United States; the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information in Quebec; the ANPD in Brazil; or the competent authority where you live.

24. Version history