隐私政策
最后更新：2026年5月5日
本隐私政策解释了 Quocia AI Private Limited（以“Quocia”、“我们”或“我们的”名义开展业务）在您使用我们的网站 www.quocia.com、我们的应用程序 app.quocia.com 以及任何相关产品和服务（统称为“服务”）时，如何收集、使用、共享和保护个人信息。
本政策是我们服务条款的一部分，并并入其中。我们对 Cookie 和类似技术的使用在我们的 Cookie 政策中单独说明。
如果您有任何疑问或希望行使本政策项下的任何权利，请通过 privacy@quocia.com 联系我们。
1. 概览
- 我们是谁
- Quocia AI Private Limited，在新加坡注册。我们为个人和企业提供人工智能辅助的社交媒体管理平台。
- 我们收集什么
- 帐户详细信息（电子邮件、姓名、密码）、您提供给我们的品牌和内容信息、由我们的支付提供商处理的付款元数据，以及标准的日志和设备信息。
- 我们不收集什么
- 敏感个人信息（如健康、生物识别或精确的政府身份证件数据）。我们不会从数据经纪商处购买个人信息。
- 我们如何使用它
- 用于提供和改进“服务”、交付您请求的 AI 生成输出、与您沟通、向您收取付费计划的费用、保持平台安全以及遵守法律。
- 我们与谁共享
- 少数根据我们指示行事的经过审查的服务提供商：托管和数据库（Google Cloud / Firebase）、支付（Stripe）、不使用客户数据进行训练的付费 API 层级的 AI 模型提供商（Google、OpenAI、Anthropic），以及用于电子邮件发送、社交媒体发布和联盟跟踪的提供商。我们不会出售您的个人信息。
- AI 训练
- 我们未授权我们的 AI 提供商使用您的内容来训练其通用模型。我们不会为了 AI 训练而向任何第三方出售或许可您的内容。
- 您的权利
- 根据您居住地的不同，您可能有权访问、更正、删除、迁移或限制我们对您个人信息的使用，并有权对特定处理提出异议。请发送电子邮件至 privacy@quocia.com。
当您创建帐户、设置品牌工作区、使用我们的功能、联系我们或订阅付费计划时，您会直接向我们提供信息。这可能包括：
- 帐户信息：姓名、电子邮件地址、密码（作为单向哈希存储）、个人资料图片、语言和联系偏好；
- 品牌和项目信息：品牌名称、行业、受众、语调和风格偏好、目标地点和语言、网站和社交帐户参考资料、自定义指令、提示词（prompts），以及您上传的资产（文本、图像、视频、音频、徽标）；
- 内容：社交媒体帖子、博客草稿、评论、日程安排以及您使用“服务”创建或导入的其他内容；
- 通信记录：您通过支持渠道、联系表格或调查问卷向我们发送的消息；
- 帐单信息：帐单收件人姓名、帐单地址、国家/地区、税号（如需），以及您信用卡的最后几位数字和到期时间。完整的信用卡详细信息由我们的支付提供商收集和存储，而不是由我们收集。
当您访问网站或使用应用程序时，我们及我们的服务提供商会收集有关您的设备和使用“服务”的技术信息，包括：
- 日志数据：IP 地址、从 IP 派生的近似位置、浏览器类型和版本、操作系统、设备标识符、引用页和退出页、时间戳以及您在“服务”中采取的操作；
- Cookie 和类似技术：详情请参阅我们的 Cookie 政策。
如果您使用第三方身份提供商（如 Google、Apple 或 Facebook）登录，我们会收到该提供商向我们释放的基本个人资料信息——通常是您的姓名、电子邮件和个人资料图片。如果您将社交平台连接到品牌工作区（如 Facebook、Instagram、LinkedIn 或 X），我们仅接收该平台针对所请求功能（例如，“发布帖子”或“读取洞察”）所需的访问权限。您与每个第三方提供商的关系受该提供商自身的条款管辖。
我们不会要求，也不会故意处理敏感个人信息，例如健康数据、生物识别标识符、政府身份证件号码或详细的财务帐号（上述有限的银行卡元数据除外）。
3. 我们如何使用您的信息
我们出于以下目的处理个人信息：
- 提供“服务”：创建和验证您的帐户，交付 AI 生成的输出，安排并将您的内容发布到连接平台（Connected Platforms），管理品牌工作区和团队协作；
- 处理付款：向您收取付费计划的费用，管理订阅和 Q-Credits 购买，防止欺诈；
- 与您沟通：响应支持请求，发送服务公告（如政策变更或停机通知），以及在您同意或法律允许的情况下发送营销电子邮件；
- 改进“服务”：了解功能的使用情况、调试、衡量性能并开发新功能。在合理的情况下，我们将聚合数据或去标识化数据用于这些目的；
- 保持“服务”安全：检测并防止欺诈、滥用、帐户接管和违反我们的服务条款的行为；
- 遵守法律：响应相关机构的合法请求，执行我们的条款，并保护我们、用户以及公众的权利。
3.1 我们不会使用您的内容训练 AI
为了生成您所要求的输出，我们会将相关的输入（如您的简报、提示词和资产）发送给作为我们处理者（processors）的第三方 AI 提供商。我们仅在他们的付费 API 层级专门使用这些提供商，根据相关条款，不允许他们使用您的输入或我们的输出来训练其通用模型。我们不会为了训练 AI 模型而向任何第三方出售、许可或以其他方式转让您的内容，并且 Quocia 本身也不会使用您的内容训练 AI 模型。
4. 处理的法律依据 (欧洲经济区 / 英国)
如果您位于欧洲经济区、英国或瑞士，我们将依据《通用数据保护条例》(GDPR) 或英国 GDPR 规定的以下一项或多项法律依据：
- 履行合同：在向您提供“服务”所必需的情况下进行处理；
- 合法利益：用于保持“服务”安全、调试、改进功能以及发送与服务相关的通信，前提是这些利益未被您的基本权利所凌驾；
- 同意：针对营销电子邮件、可选 Cookie 以及我们请求您同意的任何其他处理。您可以随时撤回同意；
- 法定义务：法律要求我们保留或披露信息的情况；
- 重要利益：在极少数情况下，为保护个人的生命或安全所必需的处理。
5. 与第三方共享
5.1 服务提供商
我们与经过审查的服务提供商共享个人信息，这些提供商根据我们的指示行事，并受要求他们保护数据的合同约束。我们与以下类别的提供商合作。随着我们技术栈的调整，此列表可能会随时间发生变化。
- 托管、数据库、存储和身份验证
- Google Cloud / Firebase (Google LLC)，我们的主要基础设施提供商。
- 支付
- Stripe, Inc.，用于处理订阅计费和一次性购买。
- AI 模型提供商
- Google（Gemini 及相关模型）、OpenAI 和 Anthropic。这些提供商代表我们在企业版/付费 API 层级处理我们发送给他们的输入，相关条款禁止将您的输入或我们的输出用于通用模型训练。
- 社交媒体平台集成
- 一个专业的提供商，负责连接您授权的社交平台帐户，并在您的指示下代表您发布内容。
- 电子邮件发送和验证
- 用于发送交易和营销电子邮件（如帐户、帐单和支持电子邮件）并在注册前验证电子邮件地址是否可送达的提供商。
- 联盟和推荐跟踪
- 如果您是通过我们的某个合作伙伴的推荐链接访问的，我们会使用联盟跟踪提供商来记录该合作伙伴，以便我们向他们分配佣金。
- 分析和运营工具
- 在激活状态下，帮助我们了解和改进使用情况的网络和产品分析提供商。有关当前使用的内容，请参阅我们的 Cookie 政策。
当您将社交媒体平台连接到品牌工作区时，即表示您指示我们代表您将您选择的内容发送到该平台。内容发布后，连接平台将根据其自身的隐私政策处理该内容。
5.3 法律和安全披露
当我们基于善意认为披露对于以下目的属必要时，我们可能会共享信息：(a) 遵守法律、法规、法院命令或有效的法律请求；(b) 保护 Quocia、我们的用户或其他人的权利、财产或安全；(c) 检测、防止或解决欺诈、安全或技术问题；或 (d) 执行我们的协议。
5.4 业务转让
如果 Quocia 参与合并、收购、融资、重组或资产出售，个人信息可能会被转移给继任实体。如果个人信息的所有权或使用发生严重影响其权利的任何变更，我们将通知受影响的用户。
5.5 我们不会出售个人信息
我们不会为了金钱报酬出售个人信息，也不会按照美国各州隐私法的定义为跨上下文行为广告（cross-context behavioural advertising）而“共享”个人信息。如果发生改变，我们将更新本政策，并提供法律要求的选择退出权（opt out）。
6. Cookie 和类似技术
我们使用 Cookie 和类似技术来保持您的登录状态、记住您的偏好（如您的语言）、保持“服务”的安全，并在您同意的情况下衡量“服务”的使用情况。有关 Cookie 的完整列表、其用途以及如何控制它们，请参阅我们的 Cookie 政策。
7. 社交登录
如果您使用第三方身份提供商登录，我们将接收该提供商选择释放的基本个人资料信息（通常是您的姓名、电子邮件和个人资料图片）。我们仅按本政策所述使用这些信息。我们无法控制身份提供商在其端处理数据的方式；请查看他们的隐私政策并在他们那里调整您的设置。
8. 国际数据传输
Quocia 总部位于新加坡。“服务”使用由 Google Cloud / Firebase 和 Amazon Web Services 提供的云基础设施运营，主要处理活动在美国以及这些提供商运营的其他地区进行。我们的一些服务提供商和 AI 处理者也位于美国或其他国家/地区。
当我们在跨境传输个人信息时，我们将依赖适用法律要求的适当保护措施。对于来自欧洲经济区、英国或瑞士的传输，我们依赖欧盟委员会与我们的处理者签订的标准合同条款（以及适用的英国附录）。这些保护措施的副本可应要求提供。
9. 数据保留
我们仅在本政策所述目的所需或法律要求的时间内保留个人信息：
- 帐户信息在您的帐户处于活动状态时保留，并在关闭后保留一段合理的时间；
- 品牌和内容数据在相关品牌工作区存在时保留，并在工作区删除后的一段合理时间内被删除（或匿名化），受制于我们的备份周期；
- 帐单记录根据我们管辖区税务和会计法律的要求保留（通常长达 7 年）；
- 日志和安全记录根据我们的安全需求保留一段有限的时间。
当我们不再需要您的个人信息时，我们会将其删除或使其不可逆转地去标识化，除非该信息保存在例行备份中，在这种情况下，它将与活动处理隔离，直到备份过期。
10. 我们如何保障您的信息安全
我们结合使用组织和技术保护措施来保护个人信息，包括加密传输 (HTTPS/TLS)、在我们的云提供商处静态加密存储、基于角色的访问控制、审计日志记录以及定期审查访问权限。付款数据由我们的支付提供商处理，从不完整存储在我们的服务器上。
没有任何系统是完全安全的。虽然我们努力保护您的信息，但我们无法保证绝对的安全性。请使用强度高的唯一密码，在可用时启用双因素身份验证，如果您怀疑您的帐户已被泄露，请通过 privacy@quocia.com 通知我们。
11. 儿童的隐私
本“服务”不针对 18 岁以下的人群，我们也不会故意收集 18 岁以下人群的个人信息。如果您发现有不满 18 岁的人向我们提供了个人信息，请通过 privacy@quocia.com 联系我们，我们将停用该帐户并采取合理步骤删除该信息。
12. 您的隐私权
根据您所在的位置，您可能拥有与您的个人信息相关的权利，包括以下权利：
- 访问我们持有的关于您的个人信息；
- 更正不准确或不完整的信息；
- 删除您的个人信息（“删除权”）；
- 限制或反对特定处理；
- 以可移植格式获取您的信息副本（“数据可携权”）；
- 在我们依赖同意的情况下，随时撤回同意；
- 向您的数据保护机构提出投诉。
您可以通过帐户设置自行行使大部分此类权利（查看您的数据、更新您的个人资料、更改密码、删除帐户）。对于任何其他请求，请发送电子邮件至 privacy@quocia.com。我们将在适用法律规定的时间内予以回复，并可能在采取行动前需要验证您的身份。
13. 欧洲经济区、英国和瑞士
如果您在欧洲经济区、英国或瑞士，《通用数据保护条例》(GDPR)、英国 GDPR 或瑞士《联邦数据保护法》将适用于您的信息。Quocia 是与您的帐户和使用“服务”相关的被处理个人信息的控制者 (controller)。我们依赖的法律依据在第 4 节中列出。您可以向当地的数据保护机构提出投诉；在瑞士则为联邦数据保护和信息专员。
14. 加利福尼亚州居民 (CCPA / CPRA)
如果您是加利福尼亚州居民，您根据经《加州隐私权法》修订的《加州消费者隐私法》享有权利，包括有权了解我们收集了哪些个人信息以及我们如何使用这些信息、有权删除个人信息、有权更正不准确的信息、有权选择退出 (opt out) 出售或“共享”个人信息的行为，以及行使权利不受歧视的权利。
过去 12 个月中我们收集的个人信息类别在第 2 节中说明。我们不会为了金钱报酬出售个人信息，也不会为跨上下文行为广告共享个人信息。要行使您的权利，请发送电子邮件至 privacy@quocia.com。您可以使用授权代理人；我们可能会要求代理人验证其权限。
15. 弗吉尼亚州和其他美国各州隐私法
如果您是弗吉尼亚州、科罗拉多州、康涅狄格州、犹他州或其他具有综合隐私法的美国各州的居民，您可能拥有与上述类似的权利，包括有权确认处理、访问、更正、删除、获取可移植格式的副本，以及选择退出定向广告、个人数据出售或产生法律效力或类似重大影响的自动化决策（profiling）。我们目前不参与任何此类活动。要行使您的权利，请发送电子邮件至 privacy@quocia.com。如果我们拒绝了一项请求，您可以通过回复我们的答复来提出申诉；我们将在您所在州法律规定的时间内回复您的申诉。
16. 新加坡居民 (PDPA)
如果您在新加坡，2012 年《个人数据保护法》(PDPA) 适用于我们对您个人数据的处理。您可以撤回对我们处理的同意、请求访问和更正我们持有的关于您的个人数据，并在有任何疑虑时通过 privacy@quocia.com 联系我们的数据保护官。您也可以向新加坡个人数据保护委员会提出投诉。
17. 加拿大居民
如果您在加拿大，联邦《个人信息保护和电子文件法》(PIPEDA) 及适用的省级法律适用于您。在受法律或合同限制并提前合理通知的情况下，您可以随时撤回您的同意。要行使您的权利，请联系 privacy@quocia.com。
18. “请勿追踪”信号
某些浏览器会发送“请勿追踪”(Do Not Track) 信号。对于网站应如何响应这些信号，目前业界尚未达成共识。我们目前根据同意横幅中设置的 Cookie 偏好一致地对待所有用户；我们不单独响应“请勿追踪”信号。
19. 本政策的变更
我们可能会不时更新本隐私政策。最新版本始终可通过 www.quocia.com/privacy 获取，其顶部会标明“最后更新”日期。重大变更将通过电子邮件或显眼的应用程序内通知传达。如果在变更生效后您继续使用本“服务”，即表示您接受修订后的政策。
如有关于隐私的疑问、请求或投诉，请联系我们的数据保护官：
Quocia AI Private Limited
收件人：数据保护官 (Data Protection Officer)
60 Paya Lebar Road, #07-54 Paya Lebar Square
Singapore 409051
电子邮件：privacy@quocia.com
Privacy Policy
Last updated: May 5, 2026
This Privacy Policy explains how Quocia AI Private Limited (doing business as "Quocia", "we", "us", or "our") collects, uses, shares, and protects personal information when you use our website at www.quocia.com, our application at app.quocia.com, and any related products and services (together, the "Services").
This policy is part of, and incorporated into, our Terms of Service. Our use of cookies and similar technologies is described separately in our Cookies Policy.
If you have questions or wish to exercise any of your rights under this policy, contact us at privacy@quocia.com.
1. Summary at a glance
- Who we are
- Quocia AI Private Limited, registered in Singapore. We provide an AI-assisted social media management platform for individuals and businesses.
- What we collect
- Account details (email, name, password), the brand and content information you give us, payment metadata processed by our payment provider, and standard log and device information.
- What we don't collect
- Sensitive personal information (such as health, biometric, or precise government-ID data). We do not buy personal information from data brokers.
- How we use it
- To provide and improve the Services, to deliver AI-generated output you request, to communicate with you, to bill you for paid plans, to keep the platform secure, and to comply with the law.
- Who we share with
- A small list of vetted service providers acting on our instructions: hosting and database (Google Cloud / Firebase), payments (Stripe), AI model providers (Google, OpenAI, Anthropic) on paid API tiers that do not train on customer data, plus providers for email delivery, social media posting, and affiliate tracking. We do not sell your personal information.
- AI training
- We do not authorise our AI providers to use your content to train their general-purpose models. We do not sell or license your content to any third party for AI training.
- Your rights
- Depending on where you live, you may have rights to access, correct, delete, port, or restrict our use of your personal information, and to object to certain processing. Email privacy@quocia.com.
You give us information directly when you create an account, set up a brand workspace, use our features, contact us, or subscribe to a paid plan. This may include:
- Account information: name, email address, password (stored as a one-way hash), profile picture, language and contact preferences;
- Brand and project information: brand name, industry, audience, voice and style preferences, target locations and languages, website and social-account references, custom instructions, prompts, and assets you upload (text, images, video, audio, logos);
- Content: social media posts, blog drafts, comments, schedules, and other content you create or import using the Services;
- Communications: messages you send us through support channels, contact forms, or surveys;
- Billing information: billing name, billing address, country, tax ID where required, and the last digits and expiry of your card. Full card details are collected and stored by our payment provider, not by us.
When you visit the website or use the application, we and our service providers collect technical information about your device and use of the Services, including:
- Log data: IP address, approximate location derived from IP, browser type and version, operating system, device identifiers, referring and exit pages, timestamps, and the actions you take in the Services;
- Cookies and similar technologies: see our Cookies Policy for details.
If you sign in using a third-party identity provider (such as Google, Apple, or Facebook), we receive the basic profile information that provider releases to us — typically your name, email, and profile picture. If you connect a social platform to a brand workspace (such as Facebook, Instagram, LinkedIn, or X), we receive only the access permissions that platform requires for the requested feature (for example, "publish posts" or "read insights"). Your relationship with each third-party provider is governed by that provider's own terms.
We do not ask for, and we do not knowingly process, sensitive personal information such as health data, biometric identifiers, government identification numbers, or detailed financial account numbers (other than the limited card metadata described above).
3. How We Use Your Information
We process personal information for the following purposes:
- To provide the Services: create and authenticate your account, deliver AI-generated output, schedule and post your content to Connected Platforms, manage brand workspaces and team collaboration;
- To process payments: bill you for paid plans, manage subscriptions and Q-Credits purchases, prevent fraud;
- To communicate with you: respond to support requests, send service announcements (such as policy changes or outage notices), and, with your consent or where lawfully permitted, send marketing emails;
- To improve the Services: understand how features are used, debug, measure performance, and develop new features. Where reasonable, we use aggregated or de-identified data for these purposes;
- To keep the Services secure: detect and prevent fraud, abuse, account takeover, and violations of our Terms of Service;
- To comply with the law: respond to lawful requests from authorities, enforce our terms, and protect our rights and the rights of users and the public.
3.1 We do not train AI on your content
To generate the output you ask for, we send the relevant inputs (such as your brief, prompts, and assets) to third-party AI providers acting as our processors. We use these providers exclusively on their paid API tiers, under terms that do not allow them to use your inputs or our outputs to train their general-purpose models. We do not sell, license, or otherwise transfer your content to any third party for the purpose of training AI models, and Quocia itself does not train AI models on your content.
4. Legal Bases for Processing (EEA / UK)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on one or more of the following legal bases under the GDPR or UK GDPR:
- Performance of a contract: where processing is necessary to provide the Services to you;
- Legitimate interests: to keep the Services secure, to debug, to improve features, and to send service-related communications, where these interests are not overridden by your fundamental rights;
- Consent: for marketing emails, optional cookies, and any other processing for which we ask your consent. You can withdraw consent at any time;
- Legal obligation: where we are required by law to retain or disclose information;
- Vital interests: in rare cases where processing is necessary to protect the life or safety of a person.
5. Sharing With Third Parties
5.1 Service providers
We share personal information with vetted service providers that act on our instructions and that are bound by contracts requiring them to safeguard the data. We work with the following categories of providers. The list may change over time as we adjust our stack.
- Hosting, database, storage, and authentication
- Google Cloud / Firebase (Google LLC), our primary infrastructure provider.
- Payments
- Stripe, Inc., to process subscription billing and one-off purchases.
- AI model providers
- Google (Gemini and related models), OpenAI, and Anthropic. These providers process the inputs we send them on our behalf, on enterprise / paid API tiers under terms that prevent the use of your inputs or our outputs for general-purpose model training.
- Social media platform integrations
- A specialised provider that connects your authorised social platform accounts and publishes content on your behalf when you direct us to.
- Email delivery and validation
- Providers used to send transactional and marketing emails (such as account, billing, and support emails) and to verify, before signup, that an email address is deliverable.
- Affiliate and referral tracking
- If you arrived through a referral link from one of our partners, we use an affiliate-tracking provider to record the partner so we can credit them.
- Analytics and operational tooling
- Where active, web and product analytics providers that help us understand and improve usage. See the Cookies Policy for what is currently in use.
When you connect a social media platform to a brand workspace, you direct us to send the content you choose to that platform on your behalf. Once content is posted, the Connected Platform processes it under its own privacy policy.
5.3 Legal and safety disclosures
We may share information when we believe in good faith that disclosure is necessary to: (a) comply with a law, regulation, court order, or valid legal request; (b) protect the rights, property, or safety of Quocia, our users, or others; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our agreements.
5.4 Business transfers
If Quocia is involved in a merger, acquisition, financing, reorganisation, or sale of assets, personal information may be transferred to the successor entity. We will notify affected users of any change in ownership or use of personal information that materially affects their rights.
5.5 We do not sell personal information
We do not sell personal information for monetary consideration, and we do not "share" personal information for cross-context behavioural advertising as those terms are defined under U.S. state privacy laws. If this changes, we will update this policy and offer you the opt-out rights required by law.
6. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences (such as your language), keep the Services secure, and — where you consent — to measure how the Services are used. The full list of cookies, their purpose, and how to control them is in our Cookies Policy.
7. Social Logins
If you sign in with a third-party identity provider, we receive the basic profile information that provider chooses to release (typically your name, email, and profile picture). We use this only as described in this policy. We do not control how the identity provider processes data on its side; review their privacy policy and adjust your settings with them.
8. International Data Transfers
Quocia is based in Singapore. The Services are operated using cloud infrastructure provided by Google Cloud / Firebase and Amazon Web Services, with primary processing in the United States and other regions where those providers operate. Some of our service providers and AI processors are also based in the United States or other countries.
Where we transfer personal information across borders, we rely on appropriate safeguards as required by applicable law. For transfers from the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) with our processors. Copies of these safeguards are available on request.
9. Data Retention
We retain personal information only for as long as we need it for the purposes described in this policy or as required by law:
- Account information is retained while your account is active and for a reasonable period after closure;
- Brand and content data is retained while the relevant brand workspace exists and is deleted (or anonymised) within a reasonable period after deletion of the workspace, subject to our backup cycles;
- Billing records are retained for as long as required by tax and accounting law in our jurisdiction (typically up to 7 years);
- Logs and security records are retained for limited periods consistent with our security needs.
When we no longer need your personal information, we delete it or render it irreversibly de-identified, except where it is held in routine backups, in which case it is isolated from active processing until the backup expires.
10. How We Keep Your Information Safe
We use a combination of organisational and technical safeguards to protect personal information, including encrypted transport (HTTPS/TLS), encrypted storage at rest with our cloud providers, role-based access controls, audit logging, and regular review of access privileges. Payment data is handled by our payment provider and never stored on our servers in full.
No system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. Please use a strong, unique password, enable two-factor authentication where available, and notify us at privacy@quocia.com if you suspect that your account has been compromised.
11. Children's Privacy
The Services are not intended for, and we do not knowingly collect personal information from, anyone under 18. If you become aware that a person under 18 has given us personal information, contact us at privacy@quocia.com and we will deactivate the account and take reasonable steps to delete the information.
12. Your Privacy Rights
Depending on your location, you may have rights regarding your personal information, including the right to:
- Access the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your personal information ("right to erasure");
- Restrict or object to certain processing;
- Receive a copy of your information in a portable format ("data portability");
- Withdraw consent at any time, where we rely on consent;
- Lodge a complaint with your data protection authority.
You can exercise most of these rights yourself from your account settings (review your data, update your profile, change your password, delete your account). For any other request, email privacy@quocia.com. We will respond within the time required by applicable law and may need to verify your identity before acting.
13. EEA, United Kingdom, and Switzerland
If you are in the EEA, the United Kingdom, or Switzerland, the General Data Protection Regulation, the UK GDPR, or the Swiss Federal Act on Data Protection apply to your information. Quocia acts as the controller of personal information processed in connection with your account and use of the Services. The legal bases on which we rely are set out in Section 4. You may lodge a complaint with your local data protection authority; in Switzerland, the Federal Data Protection and Information Commissioner.
14. California Residents (CCPA / CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know what personal information we collect and how we use it, the right to delete personal information, the right to correct inaccurate information, the right to opt out of the sale or "sharing" of personal information, and the right not to be discriminated against for exercising your rights.
The categories of personal information we have collected in the past 12 months are described in Section 2. We do not sell personal information for monetary consideration and do not share personal information for cross-context behavioural advertising. To exercise your rights, email privacy@quocia.com. You may use an authorised agent; we may ask the agent to verify their authority.
15. Virginia and Other U.S. State Privacy Laws
If you are a resident of Virginia, Colorado, Connecticut, Utah, or another U.S. state with a comprehensive privacy law, you may have rights similar to those described above, including the right to confirm processing, access, correct, delete, obtain a copy in a portable format, and opt out of targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects. We do not engage in any of those activities at this time. To exercise your rights, email privacy@quocia.com. If we decline a request, you may appeal by replying to our response; we will respond to appeals within the time required by your state's law.
16. Singapore Residents (PDPA)
If you are in Singapore, the Personal Data Protection Act 2012 (PDPA) applies to our handling of your personal data. You may withdraw your consent to our processing, request access to and correction of personal data we hold about you, and contact our Data Protection Officer at privacy@quocia.com with any concern. You may also lodge a complaint with the Personal Data Protection Commission Singapore.
17. Canadian Residents
If you are in Canada, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws apply. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To exercise your rights, contact privacy@quocia.com.
18. Do-Not-Track Signals
Some browsers transmit a "Do Not Track" signal. There is no industry consensus on how websites should respond. We currently treat all users consistently with the cookie preferences set in our consent banner; we do not separately respond to Do-Not-Track signals.
19. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available at www.quocia.com/privacy with the "Last updated" date at the top. Material changes will be communicated by email or by a prominent in-app notice. Your continued use of the Services after a change becomes effective indicates your acceptance of the revised policy.
For privacy questions, requests, or complaints, contact our Data Protection Officer at:
Quocia AI Private Limited
Attn: Data Protection Officer
60 Paya Lebar Road, #07-54 Paya Lebar Square
Singapore 409051
Email: privacy@quocia.com