TabletopOne Privacy Policy

This Privacy Policy explains how Qinsay Inc. ("Qinsay," "we," "us," or "our") collects, uses, shares, retains, and protects personal information in the TabletopOne application (the "Service"). It applies to administrators, participants, and other authorized users.

We process two categories of information:

• Customer Content — Information, documents, prompts, outputs, and other content submitted to or generated through the Service. Processed on behalf of the customer to provide the Service.
• Account and Service Data — Contact details, organizational information, authentication records, usage data, support communications, and billing information. Managed by Qinsay for service administration, security, and business operations.

We collect information from authorized users, customer organizations, service providers, integrations, and use of the Service.

We use personal information to:

• Provide, maintain, and improve the Service, including its AI features.
• Authenticate users and manage access.
• Provide customer support and service communications.
• Maintain security, monitor performance, and investigate incidents.
• Manage subscriptions, billing, and customer relationships.
• Fulfill contractual and legal obligations.

The Service may use AI features to provide functionality requested by authorized users. These features process only information relevant to the requested functionality, subject to applicable contractual and security requirements.

Qinsay does not use Customer Content to train or fine-tune AI models, and AI model providers do not retain Customer Content processed through these features.

Information and outputs retained within the Service remain subject to applicable customer agreements and retention practices.

AI-generated outputs may be inaccurate or incomplete and should be reviewed before reliance.

We disclose personal information only as reasonably necessary to provide the Service, fulfill contractual obligations, or comply with applicable law, including to:

• Authorized users within the relevant customer organization.
• Contracted service providers supporting our operations.
• Third-party integrations authorized by customers.
• Professional advisers subject to confidentiality obligations.
• Authorities or other parties where legally required.
• Successors in a merger, acquisition, or similar transaction, subject to applicable safeguards.

We retain personal information only as reasonably necessary for service delivery, security, contractual commitments, and legal obligations.

Customer Content is retained or deleted according to the applicable subscription, Terms of Service, and customer agreements. Account information, technical records, and business records may be retained for legitimate administrative, security, and legal purposes. Backup copies are managed according to applicable retention procedures.

Evaluation and sandbox environments may have limited retention periods, and content may be reset or deleted as described in our Terms of Service.

Qinsay maintains administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss.

We will notify affected customers of personal-data security incidents as required by applicable law and contractual obligations.

Depending on applicable law, you may have the right to access, correct, or delete your personal information.

To exercise your rights, contact privacy@qinsay.com. If your request concerns information controlled by your organization, we may direct you to your organization's administrator. We will respond in accordance with applicable law.

We will not unlawfully discriminate against individuals for exercising their privacy rights.

Cookies and Analytics. The Service may use cookies and similar technologies for authentication, security, functionality, and analytics, with appropriate choices where required by law.

Data Location and Transfers. The Service is hosted and operated in the United States ("U.S.") by Qinsay and its authorized service providers. By using the Service, you acknowledge that any personal information about you, whether provided directly by you or by your organization, is provided to Qinsay in the U.S. and will be stored and processed on U.S. servers, and you authorize Qinsay to transfer, store, and process your information to and in the U.S., and possibly other countries.

Sensitive Information. Customers must not submit information prohibited by their service arrangements. Evaluation environments may be subject to additional data restrictions under the Terms of Service.

Children. The Service is intended for business users aged 18 or older and is not directed to children.

We may update this Privacy Policy to reflect changes in our Service, practices, or legal requirements. We will update the “Last updated” date and provide additional notice where legally required. If you have any questions about this Privacy Policy, please do not hesitate to contact us at privacy@qinsay.com.