Legal

Privacy Policy

Effective October 5, 2026Last updated October 5, 2026

Learn how Quodra collects, uses, protects and manages personal information.

1. Introduction#

Quodra is an interactive platform for creating, presenting, computing, visualizing and collaborating on technical and scientific content.

This Privacy Policy is issued by Quodra ("Quodra," "we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you access or use Quodra's websites, applications, services, playgrounds, collaborative features and related products (collectively, the "Service").

It also explains the choices and rights available to you.

By using Quodra, you acknowledge the practices described in this Privacy Policy.

This Privacy Policy does not replace any additional privacy notice that we may provide for a specific product, institution, research program or enterprise service.

2. Information We Collect#

The information we collect depends on how you use Quodra.

2.1 Account Information#

When you create or manage a Quodra account, we may process information such as:

your name;
email address;
profile information;
account identifiers;
authentication information and authentication-provider identifiers;
organization, institution or workspace affiliation that you choose to provide; and
account preferences.

We do not need or intend to collect your password in readable form. Authentication credentials should be managed using the authentication infrastructure used by the Service.

2.2 Content You Create or Upload#

Quodra allows users to create, upload, import, edit, present and share technical content.

This may include:

presentations and slides;
text and speaker notes;
equations and mathematical expressions;
code and Python programs;
circuits and engineering objects;
charts and datasets;
diagrams;
scientific visualizations;
molecular or materials-related objects;
images and uploaded files;
annotations and whiteboards;
comments;
presentation parameters and configurations;
collaboration content; and
other material you choose to create or upload.

We refer to this collectively as "User Content."

User Content may contain personal information about you or other people. You are responsible for ensuring that you have an appropriate basis or permission to upload personal information relating to others.

When you collaborate with other people, we may process:

workspace membership;
invitations;
collaborator identities;
permissions;
comments;
sharing activity;
presentation ownership;
version or editing activity;
links and access settings; and
related collaboration metadata.

2.4 AI Authoring, External AI Tools and MCP#

Selected workspaces may use Ask Quodra, our native AI authoring feature. Before a request is sent, the interface identifies the model and payer and shows context chips naming the content to be shared. The initial beta sends the instruction, the chip-authorized slide or selection context, supported attachments and verification feedback to Anthropic's commercial Claude API so that it can propose Quodra editing instructions. Removing a context chip removes that context from the request.

Where a workspace owner has turned on Images for Ask Quodra, a picture you attach to a request — a screenshot, a figure from a paper, a photograph of a diagram — is sent with that request to Anthropic under the same terms as the rest of it, read for what it shows and reconstructed as native content, and is not stored by Quodra beyond the request or placed into your presentation as a picture. Nothing is sent that you did not attach: a picture on a slide, in your library or on your screen leaves only when you attach it to a request. With Images off, the default, Ask Quodra refuses picture attachments and sends none.

For Quodra-funded requests, Quodra and Anthropic do not use this non-public User Content to train general-purpose models through this feature. Quodra does not opt customer prompts or outputs into provider training or submit them through provider feedback mechanisms. Anthropic processes native-authoring content under its standard commercial API retention and processing terms, including their published policy-enforcement and legal exceptions. The initial beta does not promise zero data retention or processing in a particular region. See our Subprocessors page for the provider and purpose.

Where personal API connections are enabled, you can supply your own Anthropic API key. We encrypt the key on the server using Google Cloud KMS and use it only for your authorized requests; collaborators and workspace administrators cannot spend your connection. The interface returns only masked status. Anthropic bills your API account separately from any Claude subscription, under your account's terms and settings. Quodra does not opt your content into training. Workspace owners can prohibit personal API keys in their workspace.

Disconnecting removes the active saved key; encrypted backups follow our normal backup retention. We retain content-free connection events and spending records to enforce limits and reconcile requests already accepted by the provider. Replacing or reconnecting a key does not reset spending. Deleting your Quodra account removes its personal connection and associated records through our account-deletion process. Saving a connection does not generate content or test the key with a paid model call.

Where a workspace owner turns Voice on, you can speak to Ask Quodra instead of typing. Your speech is recognised by your own browser (Chrome, Edge or Safari), using that browser vendor's speech-recognition service under your agreement with the browser; the audio does not pass through Quodra and goes to no Quodra subprocessor. The recognised words reach the model exactly as a typed request would, with the same context chips, and the session adds where you pointed on the slide (the positions and the objects under them, never their content). Quodra keeps no audio and no transcript beyond the session: the transcript is shown while the session is on and discarded when it ends unless you copy it into the request field, and our records of a session hold only how long you spoke and how many requests you made. Should a realtime transcription provider later be enabled for a workspace, it will be named on our Subprocessors page before any audio reaches it. Where Quodra has configured its realtime transcription provider, OpenAI (listed on the Subprocessors page), your browser streams the microphone's audio to that provider's transcription session instead, and the recognised words come back as text; this happens only while a voice session is listening, never otherwise. OpenAI does not use that audio to train its models under its API terms and may retain it for abuse monitoring for up to 30 days; Quodra keeps no audio and no transcript beyond the session.

Native-authoring telemetry and spending records contain operational status, counts, token usage and cost information, rather than prompts, transcripts or document text. A proposal remains separate from the saved presentation until you apply it. You remain responsible for reviewing generated work before relying on or presenting it.

Quodra also provides a Model Context Protocol (MCP) integration for external AI tools that you choose and configure. When you connect an external client, Quodra processes its authorized requests to read or change your content. The client can receive the content it requests within your permissions, and can submit content and instructions for Quodra to store. The AI provider you choose processes data under your relationship with that provider and its own terms. Connecting your own AI client does not make its model provider a Quodra-selected AI subprocessor.

2.5 Usage and Technical Information#

When you use the Service, certain technical information may be generated automatically, including:

IP address;
browser type;
operating system;
device characteristics;
language;
referring pages;
pages or features accessed;
timestamps;
session information;
application events;
crash information;
performance information;
security events; and
diagnostic information.

We use this information primarily to operate, secure, maintain and improve Quodra.

We sort this processing into two categories. Essential processing keeps the Service running and secure and tells us when it has failed; it does not depend on your analytics choice. Analytics measures how the Service is used, and it is off until you opt in. Your access to Quodra never depends on your analytics choice. The Cookie Policy describes what each category stores in your browser and how to control it.

Error reports (Essential). When error reporting is set up for the Service, Sentry receives a report when something fails in the application or on Quodra's servers, whatever your analytics choice. Reports may include an account identifier, the reference shown on the error screen, error details and technical context. The application filters sensitive field names and recognized tokens, email addresses and the query and fragment of URLs before sending; this filtering is not a guarantee that all sensitive information in arbitrary error text is removed. Error reporting sets no cookie and records no session replay.

Hosting, API and security logs (Essential) are operational records. They may contain request metadata, such as IP addresses and the web addresses requested, and error information.

Account records (Essential). Quodra's API keeps its own record of certain events for every account, in Quodra's database: for example your account's creation and email confirmation, your consent choices, checkouts, payments and plan changes, shares, imports and exports, and first milestones such as your first presentation. These records hold identifiers, fixed categories, counts and amounts, never the content of your work. We use them to run the Service, keep billing and access correct, protect the Service and understand how it is used.

Product analytics (Analytics, off until you opt in). PostHog receives analytics only where analytics is set up for the Service, and only after you opt in. The application asks you once after you sign in, and you can change your answer at any time in Settings → Diagnostics & analytics; your answer, and when you gave it, is also recorded on your account so that it applies on each of your devices. The website at quodra.app asks separately about its pricing page, and its Cookie settings link changes that answer; the website's analytics events are not linked to your account. With your opt-in, PostHog receives a fixed list of product events with identifiers and technical context (including the IP address your browser sends them from), and the account records described above together with your plan, billing period and payment amounts, a label for the kind of user you are (professional, or the student, educator or researcher role you state when you ask for academic verification) and the kind of email domain you signed up with (academic, company or personal). Analytics events never contain the content of your work, such as slide text, equations, code, prompts or titles. Automatic page capture and session recording are disabled. If you decline, or switch analytics off later, nothing more is sent to PostHog.

For error reports, operational logs and account records we rely on our legitimate interests in running, securing and improving the Service, and on our contract with you where a record concerns your subscription. For analytics we rely on your consent.

2.6 Support and Communications#

If you contact Quodra, participate in product research, submit feedback or communicate with us, we may process:

your contact details;
the content of your communication;
support requests;
bug reports;
feedback; and
related correspondence.

When you request beta access, we store your email address, the request source and the referring page when available to manage the invitation queue. A request does not create an account or guarantee an invitation. To ask us to remove your request, email hello@quodra.app from the address you submitted.

The in-app feedback form includes account and technical context. Its optional screenshot attachment is enabled by default and can include visible slide content and other information on screen. You can turn off Attach a screenshot of this screen before sending. Information you include in your written report is also sent to Quodra.

2.7 Payment Information#

Paid plans are sold through Paddle (Paddle.com Market Limited and its affiliates), our merchant of record and reseller. When you buy a plan, the purchase contract is with Paddle, and Paddle collects and processes the information the purchase needs: your name and email address, your billing address and country, your payment-card or other payment-method details, and transaction records, together with the technical information its fraud-prevention and tax obligations require. Paddle handles this information as an independent controller under its own privacy policy.

Quodra receives from Paddle the information needed to run your subscription: which plan you bought, its billing period, its status and renewal date, the Paddle customer and subscription identifiers, and the country and tax treatment applied to the purchase. Quodra does not receive or store your complete payment-card details.

Paddle's checkout runs in a frame served by Paddle inside the Quodra app; the Cookie Policy describes what your browser contacts during a purchase.

2.8 Information From Integrations#

If you choose to connect Quodra to a third-party application or service, we may receive information permitted by the authorization you grant to that integration.

You may be able to revoke an integration through Quodra or the relevant third party.

3. How We Use Information#

We may use personal information to:

provide and operate Quodra;
create and maintain accounts;
authenticate users;
store and display User Content;
enable collaboration and sharing;
execute user-requested computations;
deliver native AI authoring requests that you send;
enable the external integrations you request, including MCP;
synchronize presentations and technical objects;
maintain presentation history and configuration;
process transactions;
provide support;
communicate important service information;
detect, investigate and prevent fraud, abuse and security incidents;
debug and maintain the Service;
understand product performance;
improve Quodra;
develop new functionality;
enforce our Terms of Service;
comply with legal obligations; and
protect Quodra, our users and others.

We do not use personal information for materially unrelated purposes without an appropriate legal basis or additional notice where required.

4. Legal Bases for Processing#

Where the GDPR, UK GDPR or similar laws apply, Quodra relies on one or more lawful bases depending on the processing.

Contract#

We process information where necessary to provide the Service you request, including:

creating your account;
hosting presentations;
processing User Content;
enabling collaboration;
executing requested computations; and
delivering requested product functionality.

Legitimate Interests#

We may process information where necessary for legitimate interests such as:

maintaining and improving Quodra;
protecting the Service;
preventing abuse;
securing accounts;
debugging;
understanding product performance; and
communicating about the Service,

provided those interests are not overridden by your rights and interests.

We rely on consent where required, including for certain:

non-essential cookies;
analytics;
marketing communications;
optional integrations; or
optional data-use programs.

You may withdraw consent where processing is based on consent.

Legal Obligations#

We may process information where necessary to comply with applicable laws, lawful requests, accounting requirements, regulatory requirements or legal proceedings.

5. User Content and Ownership#

You retain ownership of the User Content you create or upload to Quodra.

Quodra processes User Content only as necessary to provide, secure, maintain and improve the Service, as permitted by our Terms of Service and this Privacy Policy.

Your use of Quodra does not transfer ownership of your presentations, research, equations, code, diagrams, circuits, data, scientific work or other User Content to Quodra.

6. Private, Shared and Public Content#

Quodra may allow content to have different visibility states.

Private Content#

Content that you have not shared or published is treated as non-public content, subject to any workspace permissions or administrative controls that apply.

Shared Content#

If you invite collaborators or create a sharing link, the people who receive access may be able to view, edit, copy, comment on or otherwise interact with the content depending on the permissions you choose.

Public Content#

If you deliberately publish content publicly, that content may become accessible to anyone, potentially including search engines or people without a Quodra account.

You should not publish confidential, proprietary or sensitive personal information unless you are authorized and intend for it to be public.

7. Cookies and Similar Technologies#

Quodra may use cookies, browser storage and similar technologies for purposes such as:

authentication;
security;
session management;
preferences;
application functionality;
analytics; and
performance measurement.

Strictly necessary technologies may operate without optional consent where permitted by law because they are required to provide functionality requested by the user.

Where consent is required for non-essential technologies, Quodra will request that consent before activating them.

You can change your analytics choice at any time: in the application under Settings → Diagnostics & analytics, and on the website with Cookie settings at the foot of each page.

Additional information is available in our Cookie Policy.

We do not sell your personal information.

We may disclose information in the circumstances described below.

8.1 Service Providers and Subprocessors#

We use third parties to help operate Quodra, which may include providers of:

cloud infrastructure;
databases;
authentication;
storage;
email;
analytics;
monitoring;
security;
payments; and
other operational services.

These providers may process information on our behalf only to the extent necessary to provide their services or as otherwise permitted by applicable agreements and law.

Current providers are listed on our Subprocessors page where appropriate.

8.2 Other Users#

Information may be disclosed to collaborators, workspace members or presentation recipients according to the sharing and permission settings you choose.

Information you deliberately publish publicly may be visible to anyone.

8.4 Integrations#

When you authorize a third-party integration, information may be transferred according to the permissions you grant.

The third party's own privacy terms may apply to its subsequent processing.

8.5 Legal and Safety Requirements#

We may disclose information where we reasonably believe disclosure is necessary to:

comply with applicable law;
respond to valid legal process;
enforce agreements;
investigate fraud or abuse;
protect the security of Quodra;
protect the rights or safety of users or others; or
establish, exercise or defend legal claims.

8.6 Corporate Transactions#

If all or part of Quodra is involved in a merger, financing, acquisition, restructuring, asset sale or similar transaction, information may be transferred as part of that transaction subject to applicable law.

9. Sale and Behavioral Advertising#

Quodra does not sell personal information for monetary consideration.

Quodra does not knowingly share personal information for cross-context behavioral advertising unless such a practice is introduced with the disclosures and controls required by applicable law.

If our practices materially change, we will update this Privacy Policy and provide legally required choices.

10. Data Retention#

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention depends on factors such as:

whether your account remains active;
the type of information;
whether the information is needed to provide the Service;
security and fraud-prevention requirements;
contractual requirements;
backup cycles;
dispute resolution;
applicable limitation periods; and
legal obligations.

When information is no longer required, we will delete, de-identify or otherwise dispose of it where reasonably practicable.

Information removed from active systems may remain temporarily in secured backups until those backups are overwritten or expire according to normal retention cycles.

We may retain limited records longer where necessary for security, legal compliance, fraud prevention or establishment or defense of legal claims.

11. International Data Transfers#

Quodra is designed for an international user base.

Our service providers and technical infrastructure may process information in countries other than the country where you live.

Where applicable law requires safeguards for international transfers, we use recognized transfer mechanisms or other appropriate protections, which may include:

adequacy decisions;
approved contractual safeguards;
Standard Contractual Clauses; or
other legally recognized transfer mechanisms.

12. Security#

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include controls involving authentication, access management, encryption, infrastructure security, logging, backups and operational safeguards, depending on the system involved.

However, no internet service or storage system can guarantee absolute security.

You are responsible for maintaining the confidentiality of your credentials and for promptly notifying us if you believe your account has been compromised.

13. Your Privacy Rights#

Depending on where you live, you may have rights concerning your personal information.

These may include the right to:

access personal information we hold about you;
correct inaccurate information;
request deletion;
restrict certain processing;
object to certain processing;
obtain portable copies of certain information;
withdraw consent where processing is based on consent;
opt out of certain marketing;
complain to a relevant data protection authority; and
exercise rights concerning certain automated decisions where applicable.

These rights are subject to applicable legal conditions and exceptions.

We may need to verify your identity before fulfilling a request.

Where applicable, you may also authorize another person to make a request on your behalf.

Quodra will not discriminate against you for exercising rights provided by applicable privacy law.

14. EEA, UK and Similar Privacy Rights#

If European Economic Area, United Kingdom or similar data-protection law applies to our processing of your information, you may have rights including access, rectification, erasure, restriction, portability and objection.

You may also withdraw consent at any time where consent is the lawful basis, without affecting processing that occurred before withdrawal.

You may lodge a complaint with the data-protection authority responsible for your location.

Where legally required, Quodra will use appropriate safeguards for transfers of personal data to countries that are not recognized as providing an adequate level of protection.

15. United States State Privacy Rights#

Residents of certain U.S. states may have additional privacy rights under applicable state law.

Depending on the jurisdiction and whether a law applies to Quodra, these may include rights to:

know or access personal information;
correct information;
delete information;
obtain portable information;
opt out of certain sales, sharing or targeted advertising; and
appeal certain privacy decisions.

Quodra does not sell personal information as described in this Privacy Policy.

Where legally required and technically applicable, we will process recognized browser-based opt-out preference signals.

16. Children#

Quodra is not directed to children under the age of 13.

We do not knowingly collect personal information directly from children under 13 through ordinary individual accounts.

If you are under 13, do not create an individual Quodra account or provide personal information to us.

If we learn that we collected personal information from a child under 13 in circumstances where we were not legally permitted to do so, we will take reasonable steps to delete it.

Users who are 13 or older but have not reached the age at which they can independently consent to relevant processing or enter into the applicable agreement in their jurisdiction must use Quodra only with authorization from a parent, guardian, school or other authorized party where required.

Institution-managed educational accounts may be subject to separate agreements, notices and safeguards.

17. Research, Schools and Organizations#

Organizations, universities, schools, research groups and businesses may eventually provide users access to Quodra under separate agreements.

Where an organization controls a workspace or account, that organization may have administrative authority over accounts, content and information associated with its environment.

Where Quodra processes personal information solely on behalf of an organization, the organization may act as the data controller or equivalent decision-maker and Quodra may act as its processor or service provider.

Additional contractual terms or a Data Processing Addendum may apply.

18. Automated Decision-Making#

Quodra may use automated systems to operate functionality, detect abuse, recommend actions or generate AI-assisted content.

Unless specifically disclosed otherwise, Quodra does not intend to make solely automated decisions about users that produce legal or similarly significant effects.

AI-generated suggestions and technical outputs are tools for the user and are not decisions about the user's legal rights.

19. Third-Party Websites and Services#

Quodra may link to or integrate with third-party websites and services.

This Privacy Policy does not govern independent third parties.

You should review their privacy practices before providing information to them.

20. Changes to This Privacy Policy#

We may update this Privacy Policy as Quodra evolves.

When we make changes, we will update the "Last Updated" date.

If changes materially affect how we process personal information, we will provide additional notice where appropriate or legally required.

We will not retroactively make materially different use of personal information where applicable law requires additional notice or consent.

21. Contact Us#

Questions, concerns and privacy requests may be submitted by email:

hello@quodra.app

Product: Quodra

If you are contacting us about a privacy request, include enough information for us to understand the request, but do not send passwords or unnecessary sensitive information.