1. Overview
This Privacy Policy describes how Q-Grade Apps ("Q-Grade", "we", "us") collects, uses, and shares information when you visit qgradeapps.site, submit a build order, or purchase a build.
2. Information we collect
We collect only what we need to deliver your build and run our business:
- Build order details you submit on our form: full name, company name, email, phone (optional), industry, project summary, workflows, data model notes, branding preferences, timeline, and budget.
- Payment information processed by Stripe (card details are handled by Stripe — we never see or store your full card number). We receive transaction metadata such as the last 4 digits, billing country, payment status, Stripe session ID, and customer email.
- Communications you send us via email or any contact channel.
- Technical data from your browser when you visit the site: IP address, user agent, referrer, and pages viewed. This is used for security and basic analytics.
3. How we use information
- To scope, schedule, build, and deliver your application.
- To process payments, issue receipts, and prevent fraud.
- To respond to inquiries and provide customer support.
- To send transactional emails about your order (confirmations, kickoff, handoff).
- To operate, secure, and improve the website and our services.
- To comply with legal obligations.
4. Service providers we share data with
We use a small set of trusted vendors to operate the business. They only receive what they need to perform their function:
- Stripe — payment processing.
- Cloudflare — edge hosting, DNS, and basic security.
- Lovable Cloud (Supabase infrastructure) — database, file storage, and backend functions.
- Transactional email provider — sending order confirmations and notifications from notify.qgradeapps.site.
We do not sell your personal information. We do not share it with third parties for their own marketing.
5. Cookies and tracking
We use only essential cookies and local storage required to operate the site, the checkout, and your session. We do not use third-party advertising trackers or cross-site behavioral profiling.
6. Data retention
- Build order records: kept for as long as needed to deliver and support your build, then for 7 years for tax, accounting, and legal compliance.
- Payment records: retained as required by Stripe and applicable tax authorities (typically 7 years).
- Email and communications: kept for the duration of our business relationship plus a reasonable archival period.
7. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is limited to authorized personnel. We rely on database-level Row Level Security and least-privilege service roles. No system is perfectly secure, but we take reasonable measures to protect your information.
8. Your rights
Depending on your jurisdiction (GDPR, CCPA, and similar laws), you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information, subject to legal retention requirements.
- Request a portable copy of your information.
- Opt out of non-essential communications.
To exercise any of these rights, email marc@qgradeapps.site. We respond within 30 days.
9. Children
The site and services are not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
10. International transfers
Our infrastructure providers operate globally. By using the site, you understand that your information may be processed in countries other than your own, with appropriate safeguards in place.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, notified by email.
12. Contact
Privacy questions or requests: marc@qgradeapps.site.