Privacy
Privacy Policy
Last updated: May 2026
Summary
We collect the minimum data needed to run the service: your email address (only if you sign in with Google or Microsoft) and the conversations you have with the assistant. We do not sell or share your data. We do not display advertising.
What we collect
- Email address — provided by Google or Microsoft when you sign in. Used to identify your account and scope your chat history. Not stored in plain text inside the chat database (we use a sha256 namespace).
- Conversations — questions you send and answers the assistant returns. Stored so you can return to past threads.
- Operational logs — IP address, browser user-agent, and timestamp of requests, used for rate-limiting and abuse protection. Retained ≤ 30 days.
- Guest sessions — when you choose "Continue as guest" we issue a temporary anonymous ID. No email, no real name. History is wiped when the session ends.
What we do NOT collect
- Passwords. Authentication is delegated to Google/Microsoft.
- Payment information. The service is currently free.
- Marketing trackers, ad pixels, or third-party analytics.
Where data is stored
Conversations and operational state are stored on Upstash Redis. The application is hosted on Vercel. Both are reputable cloud providers with industry-standard security controls.
Third parties
- Google / Microsoft — for sign-in only. Subject to their respective privacy policies.
- DeepSeek — questions you send (and the retrieved CORF excerpts) are sent to DeepSeek's API so the model can generate an answer.
- OpenAI — your question text is sent for embedding (semantic search). Not used to train OpenAI's models per their API data policy.
Your rights
You can delete any conversation from inside the app. To delete your entire account and all associated data, email Qutaiba@cyb3rq.com from the address you signed in with.
Contact
Questions about this policy: Qutaiba@cyb3rq.com. CyberQ is operated by Cyb3rQ.com.