1. When Personal Information Is Involved
Information you choose to provide
In Short: Personal information is generally provided by you in connection with account setup, workspace activity, support interactions, and connected services.
Personal information may be provided when you create or manage an account, use product features, contact support, connect external services, or otherwise communicate with us. Information requested is limited to what is reasonably required to provide, maintain, and secure the Services.
Personal Information You Provide. Depending on how you use the Services, this may include:
- Name and account identifier
- Email address
- Username and authentication credentials, or social/federated sign-in details
- Contact preferences and support communications
- Information you add in normal platform use (for example, tasks, events, inventory details, notes, and files/images you upload)
- Information submitted through public forms you choose to use (for example, name, contact details, requested dates, and notes for borrowing requests)
Sensitive Information. Our Services are not designed to require sensitive personal information. Please avoid submitting sensitive personal information unless it is specifically requested for a lawful support or compliance purpose.
Application Permissions. If you use our mobile application(s), certain data may become available when you grant permissions.
- Camera and Photos. If enabled, photo/video access may be used for features such as profile photos, inventory images, or other uploads initiated by you.
- Push Notifications. If enabled, notification tokens/settings may be used to deliver account and service messages. You can disable notifications in your device settings.
Limited technical records for security and reliability
In Short: Quip is not designed for advertising profiling. Limited technical records may be processed to secure accounts and maintain reliable service.
Depending on the feature used, our systems and service providers may process technical records such as sign-in timestamps, IP address, browser or app version, device type, operating system, and diagnostic logs. This supports authentication, fraud prevention, debugging, and service continuity.
We do not use this technical data for data brokerage, unrelated third-party marketing, or cross-platform advertising profiles.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
2. How Personal Information Is Used
In Short: Personal information is used to deliver and secure the Services, provide support, and comply with legal obligations.
Depending on your use of the Services, information may be used for the following purposes:
- To create, authenticate, and administer user accounts
- To provide requested features and core service functionality
- To process subscriptions and billing events through Stripe
- To provide support and respond to service inquiries
- To send essential service communications (for example, security, policy, and account notices)
- To monitor reliability, troubleshoot issues, and improve service quality
- To detect, prevent, and investigate abuse, fraud, or other harmful activity
- To provide optional AI-assisted features when you request them, using content you choose to submit
- To comply with law, legal process, and enforceable regulatory requirements
We do not sell, rent, or trade personal information, and we do not use personal information for unrelated third-party marketing purposes.
3. How Personal Information Is Shared
In Short: Personal information may be shared only in limited, necessary circumstances.
Information may be shared in the following situations:
- Service Providers. Information may be shared with trusted vendors who process data on our behalf for hosting, security, infrastructure, payment processing, email delivery, and support operations.
- Connected Integrations. When you connect external services (such as Google, Microsoft, Apple, Stripe, or Box), information may be exchanged as needed to complete the actions you initiate.
- Public or Shared Links. If you create public inventory pages, borrowing forms, or subscription links, information in those resources may be accessible to anyone who receives the link.
- Legal Requirements. Information may be disclosed where required to comply with law, legal process, or valid governmental request.
- Business Transfers. If we are involved in a merger, financing, acquisition, or sale of assets, information may be transferred as part of that transaction.
- Affiliates. Information may be shared with affiliates that are required to follow privacy protections consistent with this Privacy Notice.
We do not disclose personal information to third parties for their independent marketing use.
Mobile phone numbers and SMS opt-in information are used for requested service communications and are not shared with third parties or affiliates for marketing or promotional purposes.
4. Cookies and Similar Technologies
In Short: We use essential cookies or comparable storage technologies needed for authentication and core service functionality.
We may use cookies and similar technologies (such as session cookies or local storage) to keep you signed in and support core account functionality.
On mobile devices, authentication/session data may be stored using secure device storage mechanisms provided by the platform.
We do not use these technologies for third-party advertising, cross-site behavioral tracking, or sale of personal information.
5. Social Login Services
In Short: If social login is used, the provider may share limited profile information needed for account authentication.
Our Services may allow sign-in through third-party identity providers, including Google, Apple, Microsoft, and Discord. If you choose this option, the provider may share limited account data with us, such as your name, email address, and user identifier. This information is used to authenticate access and support account functionality.
6. Third-Party Services and Integrations
In Short: We use specialized providers for payments, identity, connected storage services, and core operations. These providers process data only as needed to deliver requested functionality.
Stripe (Payments and Billing)
Subscription checkout, billing, and payment processing are handled by Stripe. Quip does not store full payment card numbers or card security codes (CVC). We receive limited transaction and subscription details needed for account administration, payment status, fraud prevention, and support.
For more information, review the Stripe Privacy Policy.
Google, Apple, and Microsoft
If you use sign-in or connected features from Google, Apple, or Microsoft, we receive the account/profile information and authorization data necessary to authenticate your account and/or perform the action you request.
Provider privacy notices: Google Privacy Policy, Apple Privacy Policy, and Microsoft Privacy Statement.
Box and OneDrive File Integrations
When you connect Box or Microsoft OneDrive, we process authorization tokens and relevant file metadata/content only to perform import, export, and synchronization actions initiated by you. Access can be revoked from your account settings or directly through the provider.
Provider privacy notices: Box Privacy Notice and Microsoft Privacy Statement.
AI-Assisted Features
If you use optional AI features, text or images you submit for those features may be processed by model providers to generate the requested output (for example, summaries, descriptions, or classification assistance). AI processing is used to provide requested functionality and not for selling personal information.
7. How Long Information Is Kept
In Short: Information is retained only for as long as necessary to provide the Services, protect the platform, and comply with legal obligations.
Personal information is generally retained while your account is active or as needed for the purposes described in this Privacy Notice. We may retain limited information for legal, security, fraud prevention, and audit purposes where required or permitted by law.
Where third-party providers are used, retention may also be subject to their legal obligations and documented retention practices.
8. How Information Is Protected
In Short: We maintain reasonable technical and organizational safeguards designed to protect personal information.
We apply administrative, technical, and physical safeguards designed to protect personal information, including encrypted transport (HTTPS/TLS), access controls, credential protection, and ongoing security monitoring.
Payment card information is processed by Stripe under its own security controls and compliance obligations, and Quip does not store full card numbers or CVC values.
While no method of transmission or storage can be guaranteed as completely secure, we implement safeguards appropriate to the sensitivity of the information and continue to improve our security practices over time.
9. Information From Minors
In Short: The Services are not intended for children under 18, and we do not knowingly process personal information from children under 18.
If you believe a child under 18 has provided personal information through the Services, please contact us so appropriate action can be taken.
10. Your Privacy Rights
In Short: Depending on applicable law, you may have rights to access, correct, delete, or receive personal information associated with your account.
You may also have the right to object to or restrict certain processing activities, and to withdraw consent where consent is the legal basis for processing.
Account Information
You can request to review, update, or delete account information by contacting us at estes.caleb.b@gmail.com. We may retain limited records where required for legal, security, or fraud-prevention purposes.
11. Do-Not-Track Controls
Some browsers offer a "Do Not Track" (DNT) setting. Because there is no consistent industry standard for DNT signals, our Services may not respond to DNT headers in all environments.
12. United States Privacy Rights
In Short: Residents of certain U.S. states may have privacy rights under applicable state law.
Depending on your state of residence, these rights may include the right to know, access, correct, delete, or obtain a copy of personal information, as well as rights related to certain data uses. Quip does not sell personal information and does not share personal information for cross-context behavioral advertising.
13. Updates to This Notice
In Short: This Privacy Notice may be updated from time to time to reflect changes in legal, operational, or product requirements.
When updates are made, the "Last updated" date at the top of this page will be revised. Material changes may also be communicated through the Services where appropriate.
14. How to Contact Us
If you have questions or concerns about this Privacy Notice, you can contact us at estes.caleb.b@gmail.com.
15. Requests to Access, Update, or Delete Information
To request access, correction, or deletion of personal information associated with your account, contact us at estes.caleb.b@gmail.com. We may need to verify your identity before completing a request, and certain requests may be subject to legal exceptions.