In short
- We only ask for what we need: for the waitlist, your email and what you want to build.
- Your project is sent to AI models only to the extent each task needs it.
- Dictation runs on your computer: the audio doesn't leave it to dictate.
- We measure the site anonymously and without cookies. App usage statistics only if you turn them on.
- If you write to support, an AI assistant sorts your message and may draft the reply; anything important is reviewed by a person.
- We never sell your data. You can ask to see, correct or delete it whenever you want.
01Who the controller is
The controller of your data is Atlas Asenjo Zegarra, with tax ID (NIF) 60382649J and address at Sant Andreu, 08030 Barcelona (Spain).
For any privacy question, write to us at hello@qwanter.com.
02What data we process
If you join the waitlist
- Your email address.
- What you want to build (a website, an app, a store…), if you tell us.
- Who invited you, if you arrived through someone else's link, to calculate your spot.
If you use Qwanter
- Account: your email and your account settings.
- Projects: what you type or dictate in the chat, the project's files and code, and the artifacts in the
qwanter/folder (brief, brand guide, decisions, memory). - Usage and credits: which tasks you run and how many credits they cost, to show you the cost and charge you correctly.
- Services you connect, like GitHub or Supabase: the permissions you authorize and what's needed to work with them.
Voice and dictation
By default, dictation uses Whisper on your computer: no audio is sent to Qwanter's servers to dictate.
You can use your operating system's speech recognition instead. In that case, the audio may be processed on Apple or Microsoft servers, under their own terms.
When you visit this website
Technical data about the visit (such as the IP address and browser), which the hosting needs to serve the page. To measure visits we use our own anonymous, cookie-free analytics: the page, where you came from, the language, the device type and your approximate country, without storing your IP address. More detail in the cookie policy.
When you download the app
We count each download with the country (worked out from your IP address at that moment, without storing it), the operating system and the version. We don't know who downloads.
Inside the app
- Updates: the app checks whether there's a new version. This is necessary for it to work and to fix security issues.
- Usage statistics, only if you turn them on at first launch (you can change it in Settings): categories such as the type of project, the plan, the environment and the credits used. Never the content of your projects, your code or your messages.
If you write to us
Your email, your message and any attachments. If you have an account, we link them to it so we can help you better.
03Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Waitlist and emails about the beta | Your consent, which you can withdraw at any time. |
| Anonymous count of visits and downloads, without cookies or stored IP addresses | Our legitimate interest in knowing how many people use the site and from which countries. It doesn't identify you. |
| App usage statistics | Your consent when you turn them on, which you can withdraw in Settings. |
| Handling your support messages, with AI assistance | The contract, if you're a user; otherwise, our legitimate interest in replying to you. |
| Service emails: confirmations, invitations and replies | The contract or your request. |
| News and marketing emails | Your consent. Every email includes an unsubscribe link. |
| Providing the service | Performance of the contract you accept by using Qwanter. |
| Credits and billing | The contract and our legal tax obligations. |
| Security and abuse prevention | Our legitimate interest in protecting the service and the people who use it. |
04AI models
Qwanter works with third-party AI models, which we integrate and manage. You don't have to bring your own keys.
- Anthropic for text and code: the Core chat, Build and Design.
- OpenAI to generate images and to transcribe what you say when you talk with the orb.
- ElevenLabs for the voice the orb answers with.
Each task sends the model only the context it needs: your message, the project's approved artifacts and the files it's working with. Keys and .env files are never sent.
One of the Anthropic models we may use, the top-tier one, doesn't offer zero data retention: Anthropic may keep what's sent to it for a period, under its terms.
Pending: each provider's retention periods and use for training
05Support and emails
When you write to support, an AI assistant reads your message to classify it (question, bug, invoice, complaint), see whether it's urgent and, often, draft the reply. It uses Anthropic's models with the same safeguards as the rest of the service, and what you write to us is not used to train models.
- Replies drafted by the assistant say so.
- Important decisions, such as a refund, a suspension or closing an account, are always reviewed by a person.
- Some emails are sent automatically: confirmations, beta invitations and replies to your messages. Marketing emails only if you've agreed to receive them, and always with an unsubscribe link.
06Anonymous statistics
We may publish or share aggregated, anonymous statistics about how Qwanter is used, for example “38% of projects are online stores” or “Spain is the country with the most downloads”.
They never include your content or anything per person, and we don't publish figures for groups so small that someone could be recognised. Once aggregated this way, that data is no longer personal data.
We never sell your data, neither personal data nor your projects.
07Subprocessors
These are the services that process data on Qwanter's behalf. If they change, we'll update this list.
| Service | What for | What it receives |
|---|---|---|
| Anthropic | Text and code models: Core, Build and Design; and the support assistant | Your messages and the project context each task needs; the emails you send to support |
| OpenAI | Image generation and voice transcription when talking with the orb | The description of the image you ask for; the audio while you talk with the orb |
| ElevenLabs | The voice the orb answers with | The text of the answer it reads out loud (neither the text nor the audio is stored) |
| Vercel | Isolated environment where each task's code runs, and hosting for this website | The project's code and files during the task; technical visit data |
| Supabase | Database: waitlist, customers, support and anonymous statistics | Your email and what you tell us; your support history; anonymous counts of visits and downloads, without IP addresses |
| Stripe | Billing for plans and packs, once they go live | Payment and billing details |
| Receiving your messages and sending confirmations, invitations, replies and news | Your email and messages · provider to be chosen | |
| Invoicing | Issuing invoices with a certified system (Verifactu) | Billing details · provider to be chosen |
08Outside the EU
Some of these providers process data outside the European Economic Area, for example in the United States. Those transfers rely on each provider's mechanism.
09How long
- Waitlist: until you unsubscribe or until period.
- Account and projects: as long as you have the account. If you delete it, they're removed within period, except what the law requires us to keep.
- Support conversations: until period after they are resolved.
- Technical server logs (including the IP address, for security): period.
- Invoicing and accounting: 6 years, as required by the Spanish Commercial Code, and the periods set by tax law.
10Your rights
You can ask us at any time to:
- Access your data and know how we process it.
- Correct it if it's inaccurate, or delete it.
- Object to processing or ask us to restrict it.
- Take it with you in a format you can reuse.
- Withdraw your consent, for example, by leaving the waitlist.
Write to us at hello@qwanter.com. If you think we haven't responded properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).
11Security
Each task's code runs in an isolated cloud environment. Service keys are stored encrypted on the server and never enter that environment. The network is closed by default, and deleting, publishing or sending anything outside Qwanter always asks for your confirmation.
No system is infallible. If you find a security issue, write to us at hello@qwanter.com.
12The apps you build
The data of the people who use the apps you build with Qwanter lives in your own services, like your Supabase project. There, you are the controller: you decide what data you collect and you must inform your users.
What we explain here about your apps is guidance only and not legal advice.
13Changes
If we change this policy, we'll publish the new version here with its date. If the change is significant, we'll let you know by email before it applies.
Any questions?
Email us at hello@qwanter.com.