Privacy Policy
Last updated on October 30th, 2026
Introduction
Welcome to Qolaba LLC ("Company," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website qolaba.ai and use our web application (collectively, the "Service"). By accessing or using the Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy. Qolaba is a global SaaS platform available to individual creators, teams, and enterprises. Certain enterprise workspaces may operate in text-only mode (see the “Information We Collect” section for details). Qolaba also offers custom-software development, professional services, and fully white-labelled deployments. Such projects may be covered by a separate Statement of Work, Master Services Agreement, or Data-Processing Agreement negotiated with the customer; if any of those documents differ from this Privacy Policy, the project-specific terms will prevail.
Information We Collect
We collect any information that you provide to us, including when you create your account, submit your preferences, or contact us. We also collect information about your device and the ways you use and interact with our Services. We may collect a variety of information from or about you or your devices from various sources, as described below.
1. Personal Information You Provide to Us
When you register for an account, make a purchase, or contact us, we may collect the following personal information:
1. Identification Data :First and last name, Username
2. Contact Information :Email address, Mailing address, Phone number
3. Payment Information :Billing address and limited payment details shared by our payment processors, such as the card network, issuing bank and last four digits of a card. Your full card number, CVV, UPI PIN and banking credentials are collected and held by our payment processors, not by Qolaba.
4. Free Trial Eligibility Records :When you start a free trial, our payment processor shares limited details of the payment method you used: for a card, its network, issuing bank and last four digits (and, for international cards, its expiry date); for UPI, your UPI ID; for a bank e-mandate, your bank account number and IFSC. We do not store these details. We immediately convert them into a one-way, keyed fingerprint that cannot be turned back into the original details, and keep only that fingerprint together with your account ID and the trial subscription ID.
5. Account Credentials :Passwords, Security questions and answers
6. Communication Data :Customer support inquiries, Feedback and survey responses
7. What we ask at sign-up :just your name and email address. We do not request personal files or sensitive data during registration.
8. Multimodal data :Qolaba is a multimodal AI studio: text, image, audio and video inputs are accepted, but it is entirely up to each user (or their organisation) which media types they submit for processing.
9. Enterprise option :On request, an enterprise workspace can be run in *text-only mode* (all file uploads and multimodal generation tools disabled).
2. Information Collected Automatically
When you access the Service, we may automatically collect:
1. Usage Data :Pages viewed, Time spent on pages, Clickstream data, Search queries, Features used, Error reports and performance data
2. Device Information :IP address, Browser type and version, Operating system, Device type and model, Unique device identifiers, Language preferences
3. Location Data :Approximate location based on IP address, Time zone settings
4. Log Information :Access times and dates, Referring and exit pages
3. Cookies and Similar Technologies
We use cookies and similar tracking technologies to enhance your experience on our Service. Cookies are small data files stored on your device that help us remember your preferences and understand how you interact with our Service.
1. Types of Cookies We Use :We use Strictly Necessary Cookies which are essential for our Service operation and enable basic features. We also use Performance and Analytics Cookies to collect usage information and improve our Service.
2. Strictly Necessary Cookies :Essential for the operation of our Service, enabling navigation and feature access. These cookies are required for core website functionality.
3. Performance and Analytics Cookies :Help us understand website usage patterns by collecting information about visited pages and any error messages users encounter.
How We Use Your Information
We use the information we collect for various purposes:
1. To Provide and Maintain Our Service
We use your information to ensure our Service operates effectively and is responsive to user needs. This includes using your Personal Data and Usage Data to manage your account, deliver service communications, and facilitate the overall functionality of our services.
1. Account Management :Create and manage user accounts, Authenticate user identity
2. Transaction Processing :Facilitate purchases and subscriptions, Process payments and refunds
3. Customer Support :Respond to inquiries and requests, Provide technical assistance
4. Service Optimization :Improve website performance, Customize user experience
2. To Communicate with You
We use your contact information to send alerts and notifications regarding any updates, security alerts, and administrative messages that are necessary for the service you have opted into.
1. Administrative Communications :Send service-related emails (e.g., account verification, changes/updates), Notify you about security updates
2. Marketing Communications :Send newsletters, promotions, and special offers, Inform you about new features or products, Opt-Out: You may opt-out of marketing emails at any time
3. To Enforce Our Terms and Policies
1. Security Monitoring & PII masking :detect fraud and automatically redact common identifiers (names, IDs, phone numbers) when the user enables the "Mask PII" toggle in settings. For enterprise workspaces this feature can be locked on by the workspace admin.
2. Free Trial Abuse Prevention :Compare the fingerprint of the payment method used for a new free trial with earlier trials, so that each person and each payment method receives only one free trial. If a match is found, the trial is not started and the payment authorisation is cancelled without charge. We do this on the basis of our legitimate interest in preventing fraud and the misuse of promotional offers.
3. Legal Compliance :Comply with legal obligations, Enforce our Terms of Service and other agreements
4. To Analyze and Improve Our Service
We analyze usage data to understand user behavior and trends, assess the effectiveness of our services, and identify areas where we can improve, such as enhancing user interface experiences and expanding service features.
1. Data Analytics :Understand user behavior and preferences, Conduct research and analysis
2. Development :Develop new products and features, Enhance existing services
5. For Other Business Purposes
We may use your information for auditing and reporting, corporate transactions, and other business purposes.
1. Auditing and Reporting :Perform internal audits, Generate usage reports
2. Corporate Transactions :Facilitate business transfers (e.g., mergers, acquisitions)
Disclosure of Your Information
We may share your information with companies, organizations or individuals outside of Qolaba when we have your consent to do so.
1. Service Providers
We may share your information with third-party vendors, contractors, or agents who perform services on our behalf.
1. Payment Processing :Securely process payments through Razorpay (for payments in India), Dodo Payments (for international payments, acting as merchant of record) and PayPal. These processors collect and hold your full payment details under their own privacy policies.
2. Data Analysis :Analyze usage data to improve the Service
3. Email Services :Send communications and newsletters
4. Customer Support :Provide customer service assistance
5. Marketing Services :Manage marketing campaigns and promotions
2. Sub-processor Information
A complete list of current sub-processors is available on request via privacy@qolaba.ai.
3. Legal Obligations
We may disclose your information to comply with legal processes or in response to lawful requests by public authorities.
1. Compliance :To comply with legal processes, such as court orders or subpoenas
2. Law Enforcement :In response to lawful requests by public authorities
3. Regulatory Requirements :To meet national security or law enforcement requirements
4. Business Transfers
In the event of a merger, acquisition, or asset sale, your personal information may be transferred.
1. Notification :Provide notice before your personal information is transferred
2. Privacy Protection :Ensure the receiving party honors your privacy rights
5. Protection of Rights
We may disclose your information to:
1. Enforce Agreements :Enforce our Terms of Service and other contracts
2. Protect Rights :Protect the rights, property, or safety of the Company, our users, or the public
3. Prevent Harm :Take action against illegal activities, suspected fraud, or potential threats
6. With Your Consent
We may disclose your personal information for any other purpose with your explicit consent.
Data Security
We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.
1. Encryption
Use SSL/TLS encryption for data transmission, Encrypt sensitive data at rest
2. Access Controls
Restrict access to personal information to authorized personnel only, Implement multi-factor authentication for administrative access
3. Security Protocols
Regularly update and patch systems, Monitor systems for possible vulnerabilities and attacks
4. Employee Training
Train staff on data protection best practices, Enforce confidentiality agreements
5. Breach Notification
we will email affected account owners within 24 hours of confirming any personal-data incident.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy.
1. Retention Periods
Account Information retained until your account is deleted or as required by law, Transaction Data retained for audit, compliance, and tax purposes, Communication Data retained as long as necessary to address your inquiries, Signup Security Records (limited details of declined or flagged signup attempts) retained for up to 90 days to detect and prevent fraud and abuse, Free Trial Eligibility Records (payment-method fingerprints) retained for 2 years from the start of the trial, including after your account is deleted, to prevent repeat use of free trials, and then automatically deleted
2. Data Deletion
You may request deletion of your personal information through your account settings or by contacting us. Records we keep to prevent fraud and abuse, such as Free Trial Eligibility Records, are kept for the periods listed above even after deletion. Anonymization: We may anonymize your data so that it can no longer be associated with you
Your Rights and Choices
You have rights regarding your personal information, including access, correction, and deletion.
1. Access and Correction
You have the right to request access to the personal information we hold about you and to correct it if it is inaccurate.
2. Opt-Out of Marketing Communications
You may opt-out of marketing emails at any time.
3. Managing Cookie Preferences
You can manage your cookie preferences through our Manage Cookie Preferences page, You may also adjust your browser settings to refuse cookies
4. Do Not Track Signals
Current Response: Our Service does not respond to Do Not Track signals, Future Changes: We will update this Privacy Policy if we begin responding to such signals
5. California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
1. Right to Know :Categories of personal information collected, Sources from which personal information is collected, Business purpose for collecting personal information, Categories of third parties with whom we share personal information
2. Right to Access :Obtain a copy of your personal information
3. Right to Deletion :Request deletion of your personal information, subject to certain exceptions
4. Right to Non-Discrimination :We will not discriminate against you for exercising your CCPA rights
6. Children's Privacy (COPPA)
Under 13: We do not knowingly collect personal information from children under 13, Parental Control: Parents or guardians may contact us to request deletion of any information collected from their child
7. General Data Protection Regulation (GDPR)
If you are in the European Economic Area (EEA), the United Kingdom (UK GDPR) or Switzerland (Federal Act on Data Protection), you have the following data protection rights:
1. Right to Access :Obtain confirmation about whether your personal data is being processed
2. Right to Rectification :Correct inaccurate or incomplete personal data
3. Right to Erasure :Request deletion of your personal data under certain conditions
4. Right to Restrict Processing :Request restriction of processing under certain conditions
5. Right to Data Portability :Receive your personal data in a structured, commonly used format
6. Right to Object :Object to processing based on legitimate interests or direct marketing
7. Right to Withdraw Consent :Withdraw consent at any time where processing is based on consent
8. Right to Lodge a Complaint :File a complaint with a supervisory authority
8. India (Digital Personal Data Protection Act, 2023)
If you are in India, we process your personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the rules made under it, and you have the following rights:
1. Right to Information :Obtain a summary of the personal data we process about you, the processing activities, and the identities of the Data Processors and other Data Fiduciaries we have shared it with
2. Right to Correction and Erasure :Ask us to correct, complete, update or erase your personal data, subject to records we must keep by law or to prevent fraud, as described under Data Retention
3. Right to Withdraw Consent :Withdraw consent at any time, as easily as it was given, where processing is based on consent
4. Right to Grievance Redressal :Raise a grievance about how we handle your personal data by writing to support@qolaba.io. If you are not satisfied with our response, you may complain to the Data Protection Board of India
5. Right to Nominate :Nominate another person to exercise these rights on your behalf in the event of your death or incapacity
6. Payment Data :Payments in India are processed by Razorpay. In line with Reserve Bank of India rules, Qolaba does not store your card number, expiry date or CVV; we keep only limited details such as the card network, issuing bank and last four digits
Third-Party Services and Links
Our Service may contain links to third-party websites or services that are not owned or controlled by us, including:
1. External Websites
Links to other websites for reference or additional information
2. Social Media Plugins
Buttons or widgets from social media platforms
International Data Transfers
Personal data may be processed in India and the United States. For data originating from the European Economic Area or the United Kingdom, transfers are protected by (i) the EU Standard Contractual Clauses (June 2021) and/or (ii) the UK International Data Transfer Agreement (IDTA), executed with the exporting customer before onboarding such users.
Prohibited Content and Activities
Users are prohibited from:
1. Creating or Sharing NSFW Content
Any content that is pornographic, obscene, or otherwise inappropriate
2. Engaging in Illegal Activities
Activities that violate any applicable laws or regulations including but not limited to GDPR, CCPA and COPPA
3. Interfering with Security Features
Attempting to bypass or disable security mechanisms
4. Harassment or Hate Speech
Content that promotes violence, discrimination, or harassment
Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or legal obligations.
1. Notification of Changes
We will post the updated Privacy Policy on this page, Effective Date: The "Last Updated" date at the top indicates when changes become effective, Direct Notification: For significant changes, we may notify you via email or through the Service
1. Posting Updates: :Posting Updates: We will post the updated Privacy Policy on this page.
2. Effective Date: :The "Last Updated" date at the top indicates when changes become effective.
3. Direct Notification: :For significant changes, we may notify you via email or through the Service.
2. Your Continued Use
By continuing to use the Service after the updated Privacy Policy becomes effective, you agree to be bound by the revised policy.
Contact Us
For any inquiries or concerns regarding our Privacy Policy or data practices, please reach out to us:
1. Communication Channel
You can contact us via email at support@qolaba.io.
Or you can raise a ticket on our Discord server
2. Response Time
We strive to respond to all queries promptly and effectively, ensuring that your concerns and inquiries are addressed satisfactorily. Please expect a response within 72 hrs.
