Privacy Policy
Last updated: July 2026
1. Collected Data
We only collect data necessary for the service to function: email address, name (optional), and session data. The documents and queries you submit to Qyst are processed in real time and are not stored beyond the duration of your session, unless you explicitly choose to save them.
2. Data Usage
Your personal data is used exclusively to provide and improve the Qyst service. We never sell, rent, or share your data with third parties for commercial purposes. Your legal documents and queries are never used to train artificial intelligence models.
3. Payment Data
When you buy credits or a subscription, the payment is processed by Paddle, our payment partner and merchant of record. Your card number never reaches Qyst's servers: it is entered in Paddle's secure checkout and handled by them. Paddle passes back to us only what we need to grant your credits and support you — your email address, name, billing country, the product bought, and the amount paid. We store your credit balance, your purchase history and your Paddle customer reference; we store no card details of any kind. Paddle processes this data outside Algeria under its own privacy policy.
4. Service Providers
A small number of providers help us run Qyst: cloud hosting for the application and its database, AI model providers to generate answers, an email provider for transactional messages, and Paddle for payments. They act on our instructions and are bound by confidentiality, and the model providers we use are contractually barred from training on your content. We do not sell, rent or trade your data, and we never share your legal queries or documents with anyone for advertising or commercial purposes.
5. Data Protection
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Data access is strictly limited to authorized personnel. We maintain comprehensive audit logs for any data operation.
6. Retention
Account data is retained as long as your account is active. Session data (queries, documents) is automatically deleted according to your configuration. You can request complete deletion of your account and all associated data at any time.
7. Your Rights
In accordance with Algerian legislation on personal data protection, you have the right to access, rectify, and delete your data. To exercise these rights, contact us at privacy@qyst.org.
8. Cookies
We only use essential cookies for the service (authentication, language preferences) to function. No tracking or advertising cookies are used.
9. Contact
For any questions regarding this policy, you can contact us at privacy@qyst.org.