Privacy Policy

1. Introduction

RetainQ, a product of Webriy ("we", "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our customer retention platform.

2. Information We Collect

Account Information

When you sign up, we collect your email address and workspace name. If you use Google Sign-In, we receive your name and email from Google.

Customer Data (Your End Users)

When your end users interact with RetainQ flows, we collect: email addresses (if you enable email collection), cancellation reason selections, offer responses, feedback text, and session metadata. This data is stored in your workspace and is not shared across workspaces.

Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited for security and analytics purposes.

3. How We Use Your Information

• To provide and maintain the RetainQ platform
• To send email notifications when customers interact with your flows (via AWS SES)
• To deliver webhook payloads to URLs you configure
• To power AI Churn Intelligence analysis on your session data
• To protect against abuse (Google reCAPTCHA v3, rate limiting)
• To communicate service updates and respond to support requests

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) with row-level security (RLS) enforcing workspace isolation. API keys are hashed with SHA-256. Webhook endpoints are protected against SSRF attacks. Authentication is secured with Google reCAPTCHA v3. Rate limiting is enforced via Upstash Redis.

5. Third-Party Services

We use the following third-party services to operate RetainQ:

• Supabase - Database and authentication
• AWS SES - Email delivery for notifications
• Upstash Redis - Rate limiting
• Google reCAPTCHA v3 - Bot protection on authentication
• Vercel - Application hosting

Each of these providers has their own privacy policy governing their handling of data.

6. Data Sharing

We do not sell, rent, or share your personal data or your customers' data with third parties for marketing purposes. We share data only with the third-party service providers listed above, strictly for operating the Service.

7. Data Retention

Your data is retained for as long as your account is active. Upon account deletion, we will delete your workspace data within 30 days. Server logs are retained for up to 90 days for security purposes.

8. Your Rights

You have the right to:

• Access, export, or delete your data at any time (CSV export available for customers and feedback)
• Delete your account and all associated data
• Request information about what data we hold about you
• Opt out of non-essential communications

9. Children's Privacy

RetainQ is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or dashboard notice.

11. Contact

For privacy-related questions, contact us at info@retainq.com.

RetainQ is a product of Webriy.