Privacy Policy

1. Who We Are and How to Reach Us

Controller: [LEGAL ENTITY NAME — e.g. Manual Quest Ltda., CNPJ 00.000.000/0001-00], [Registered address — Street, City, State, Brazil].

Data Protection Officer (Encarregado): [Name of the Data Protection Officer / Encarregado]. For any privacy request or question, contact privacy@manual.quest.

2. Personal Data We Collect

• Account data: your name, email address, profile picture, and authentication identifiers.
• Organization data: organization name, membership, roles, and invitations.
• User Content: documents, files, images, links, prompts, and other materials you upload or generate, which may contain personal data you choose to include.
• Interaction data: questions, chat and voice messages, and the answers generated, including interactions from visitors to published manuals.
• Payment data: billing identifiers and subscription status. Card and payment-instrument details are collected and processed directly by Stripe; we do not store full card numbers.
• Usage and device data: log data, IP address, browser and device information, timestamps, and basic analytics needed to operate and secure the Service.
• Cookies and similar technologies: used for authentication, security, preferences (such as language), and essential functionality.

3. How and Why We Use Personal Data

We use personal data to:

• create and manage your account and Organization;
• provide the Service, including building your knowledge base, generating grounded answers, voice, and other features;
• process payments and manage subscriptions;
• communicate with you about the Service, including service and security notices;
• secure the Service, prevent fraud and abuse, and enforce our Terms;
• comply with legal obligations; and
• maintain and improve the Service.

4. Legal Bases

Under the LGPD and the GDPR, we rely on one or more of the following bases: performance of a contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating, securing, and improving the Service (balanced against your rights); and compliance with legal or regulatory obligations.

5. AI Processing and Sub-Processors

To provide AI features, we share the content necessary to fulfil your request (for example, document text, questions, and audio) with third-party AI and infrastructure providers that process it on our behalf to generate embeddings, answers, transcriptions, and voice. These providers act as our processors/sub-processors and are bound to use the data only to provide their services to us.

Categories of sub-processors include hosting and database providers, authentication and storage providers, payment processing (Stripe), AI model providers, and voice/transcription providers. We can provide more detail about current sub-processors on request.

6. How We Share Personal Data

We share personal data only as described here:

• with service providers and sub-processors who process data on our behalf under appropriate contracts;
• within your Organization, with its owners and admins, and — for content you publish — with anyone who accesses the published manual;
• when required by law, regulation, legal process, or a governmental request, or to protect rights, safety, and the integrity of the Service;
• in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

7. We Do Not Sell Your Personal Data

We do not sell your personal data and do not share it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

8. International Transfers

We and our providers may process and store personal data in countries other than your own, including outside Brazil and the EU/UK. Where required, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms recognized under the LGPD and the GDPR) to protect transferred data.

9. Data Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for the period necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete content or your account, we delete or anonymize personal data within a reasonable period, subject to legal retention requirements and routine backup cycles.

10. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to applicable law, you have rights regarding your personal data. Under the LGPD, you may request: confirmation that we process your data; access to it; correction of incomplete or inaccurate data; anonymization, blocking, or deletion of unnecessary or excessive data; portability; information about with whom we share data; and you may withdraw consent or object to processing.

If the GDPR applies to you, you also have rights of access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority. If the CCPA/CPRA applies to you, you have the rights to know, delete, and correct your personal information, to opt out of any sale/sharing, and not to be discriminated against for exercising your rights.

To exercise any right, contact us at privacy@manual.quest. We may need to verify your identity, and we will respond within the timeframes required by applicable law.

12. Cookies

We use strictly necessary cookies for authentication, security, and core functionality, and cookies to remember preferences such as your language. You can control cookies through your browser settings, but disabling some cookies may affect how the Service works.

13. Children's Privacy

The Service is not intended for individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us so we can take appropriate action.

14. Public Content

If you publish a manual, the content you make public and any personal data it contains will be accessible to anyone with the link. Do not include personal or confidential data in published content unless you intend for it to be public.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date and, for material changes, provide additional notice where required by law.

16. Contact

For privacy questions or to exercise your rights, contact privacy@manual.quest.