Legal

Privacy Policy

Effective August 24, 2026Last updated September 6, 2026

Learn how Quodra collects, uses, protects and manages personal information.

1. Introduction#

Quodra is an interactive platform for creating, presenting, computing, visualizing and collaborating on technical and scientific content.

This Privacy Policy is issued by Quodra ("Quodra," "we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you access or use Quodra's websites, applications, services, playgrounds, collaborative features and related products (collectively, the "Service").

It also explains the choices and rights available to you.

By using Quodra, you acknowledge the practices described in this Privacy Policy.

This Privacy Policy does not replace any additional privacy notice that we may provide for a specific product, institution, research program or enterprise service.

2. Information We Collect#

The information we collect depends on how you use Quodra.

2.1 Account Information#

When you create or manage a Quodra account, we may process information such as:

your name;
email address;
profile information;
account identifiers;
authentication information and authentication-provider identifiers;
organization, institution or workspace affiliation that you choose to provide; and
account preferences.

We do not need or intend to collect your password in readable form. Authentication credentials should be managed using the authentication infrastructure used by the Service.

2.2 Content You Create or Upload#

Quodra allows users to create, upload, import, edit, present and share technical content.

This may include:

presentations and slides;
text and speaker notes;
equations and mathematical expressions;
code and Python programs;
circuits and engineering objects;
charts and datasets;
diagrams;
scientific visualizations;
molecular or materials-related objects;
images and uploaded files;
annotations and whiteboards;
comments;
presentation parameters and configurations;
collaboration content; and
other material you choose to create or upload.

We refer to this collectively as "User Content."

User Content may contain personal information about you or other people. You are responsible for ensuring that you have an appropriate basis or permission to upload personal information relating to others.

When you collaborate with other people, we may process:

workspace membership;
invitations;
collaborator identities;
permissions;
comments;
sharing activity;
presentation ownership;
version or editing activity;
links and access settings; and
related collaboration metadata.

2.4 External AI Tools and MCP#

Quodra provides a Model Context Protocol (MCP) integration for external AI tools that you choose and configure. Quodra does not currently provide built-in model inference or call a third-party AI model on your behalf.

When you connect an external client, Quodra processes its authorized requests to read or change your content. The client can receive the content it requests within your permissions, and can submit content and instructions for Quodra to store. The AI provider you choose processes data under your relationship with that provider and its own terms.

Quodra does not use your non-public User Content to train general-purpose Quodra AI models unless you expressly opt in to such a program.

Our hosting providers process MCP requests as part of operating the Service. See our Subprocessors page. Connecting your own AI client does not make its model provider a Quodra-selected AI subprocessor.

2.5 Usage and Technical Information#

When you use the Service, certain technical information may be generated automatically, including:

IP address;
browser type;
operating system;
device characteristics;
language;
referring pages;
pages or features accessed;
timestamps;
session information;
application events;
crash information;
performance information;
security events; and
diagnostic information.

We use this information primarily to operate, secure, maintain and improve Quodra.

Optional product analytics require both deployment configuration and your opt-in through Settings → Diagnostics & analytics. When configured and enabled, PostHog receives a fixed list of product events with identifiers and technical context, without deck content, code or titles. Automatic page capture and session recording are disabled.

Browser error diagnostics are separate from that analytics choice. Sentry receives reports only when configured for the deployment. Reports may include an account identifier, error details and technical context. The application filters sensitive field names and recognized tokens, email addresses and URLs before sending; this filtering is not a guarantee that all sensitive information in arbitrary error text is removed.

Hosting, API and security logs are separate operational records. They may contain request metadata and error information and do not depend on opting in to product analytics. The Cookie Policy describes the browser controls.

2.6 Support and Communications#

If you contact Quodra, participate in product research, submit feedback or communicate with us, we may process:

your contact details;
the content of your communication;
support requests;
bug reports;
feedback; and
related correspondence.

When you request beta access, we store your email address, the request source and the referring page when available to manage the invitation queue. A request does not create an account or guarantee an invitation. To ask us to remove your request, email hello@quodra.app from the address you submitted.

The in-app feedback form includes account and technical context. Its optional screenshot attachment is enabled by default and can include visible slide content and other information on screen. You can turn off Attach a screenshot of this screen before sending. Information you include in your written report is also sent to Quodra.

2.7 Payment Information#

If Quodra introduces paid services, payment information may be processed by a third-party payment processor.

Quodra should not store complete payment-card details unless explicitly required and supported by an appropriate compliant payment infrastructure.

The relevant payment provider will be identified when paid functionality is available.

2.8 Information From Integrations#

If you choose to connect Quodra to a third-party application or service, we may receive information permitted by the authorization you grant to that integration.

You may be able to revoke an integration through Quodra or the relevant third party.

3. How We Use Information#

We may use personal information to:

provide and operate Quodra;
create and maintain accounts;
authenticate users;
store and display User Content;
enable collaboration and sharing;
execute user-requested computations;
enable the external integrations you request, including MCP;
synchronize presentations and technical objects;
maintain presentation history and configuration;
process transactions;
provide support;
communicate important service information;
detect, investigate and prevent fraud, abuse and security incidents;
debug and maintain the Service;
understand product performance;
improve Quodra;
develop new functionality;
enforce our Terms of Service;
comply with legal obligations; and
protect Quodra, our users and others.

We do not use personal information for materially unrelated purposes without an appropriate legal basis or additional notice where required.

4. Legal Bases for Processing#

Where the GDPR, UK GDPR or similar laws apply, Quodra relies on one or more lawful bases depending on the processing.

Contract#

We process information where necessary to provide the Service you request, including:

creating your account;
hosting presentations;
processing User Content;
enabling collaboration;
executing requested computations; and
delivering requested product functionality.

Legitimate Interests#

We may process information where necessary for legitimate interests such as:

maintaining and improving Quodra;
protecting the Service;
preventing abuse;
securing accounts;
debugging;
understanding product performance; and
communicating about the Service,

provided those interests are not overridden by your rights and interests.

We rely on consent where required, including for certain:

non-essential cookies;
analytics;
marketing communications;
optional integrations; or
optional data-use programs.

You may withdraw consent where processing is based on consent.

Legal Obligations#

We may process information where necessary to comply with applicable laws, lawful requests, accounting requirements, regulatory requirements or legal proceedings.

5. User Content and Ownership#

You retain ownership of the User Content you create or upload to Quodra.

Quodra processes User Content only as necessary to provide, secure, maintain and improve the Service, as permitted by our Terms of Service and this Privacy Policy.

Your use of Quodra does not transfer ownership of your presentations, research, equations, code, diagrams, circuits, data, scientific work or other User Content to Quodra.

6. Private, Shared and Public Content#

Quodra may allow content to have different visibility states.

Private Content#

Content that you have not shared or published is treated as non-public content, subject to any workspace permissions or administrative controls that apply.

Shared Content#

If you invite collaborators or create a sharing link, the people who receive access may be able to view, edit, copy, comment on or otherwise interact with the content depending on the permissions you choose.

Public Content#

If you deliberately publish content publicly, that content may become accessible to anyone, potentially including search engines or people without a Quodra account.

You should not publish confidential, proprietary or sensitive personal information unless you are authorized and intend for it to be public.

7. Cookies and Similar Technologies#

Quodra may use cookies, browser storage and similar technologies for purposes such as:

authentication;
security;
session management;
preferences;
application functionality;
analytics; and
performance measurement.

Strictly necessary technologies may operate without optional consent where permitted by law because they are required to provide functionality requested by the user.

Where consent is required for non-essential technologies, Quodra will request that consent before activating them.

You can review or change available preferences through Quodra's Cookie Settings.

Additional information is available in our Cookie Policy.

We do not sell your personal information.

We may disclose information in the circumstances described below.

8.1 Service Providers and Subprocessors#

We use third parties to help operate Quodra, which may include providers of:

cloud infrastructure;
databases;
authentication;
storage;
email;
analytics;
monitoring;
security;
payments; and
other operational services.

These providers may process information on our behalf only to the extent necessary to provide their services or as otherwise permitted by applicable agreements and law.

Current providers are listed on our Subprocessors page where appropriate.

8.2 Other Users#

Information may be disclosed to collaborators, workspace members or presentation recipients according to the sharing and permission settings you choose.

Information you deliberately publish publicly may be visible to anyone.

8.4 Integrations#

When you authorize a third-party integration, information may be transferred according to the permissions you grant.

The third party's own privacy terms may apply to its subsequent processing.

8.5 Legal and Safety Requirements#

We may disclose information where we reasonably believe disclosure is necessary to:

comply with applicable law;
respond to valid legal process;
enforce agreements;
investigate fraud or abuse;
protect the security of Quodra;
protect the rights or safety of users or others; or
establish, exercise or defend legal claims.

8.6 Corporate Transactions#

If all or part of Quodra is involved in a merger, financing, acquisition, restructuring, asset sale or similar transaction, information may be transferred as part of that transaction subject to applicable law.

9. Sale and Behavioral Advertising#

Quodra does not sell personal information for monetary consideration.

Quodra does not knowingly share personal information for cross-context behavioral advertising unless such a practice is introduced with the disclosures and controls required by applicable law.

If our practices materially change, we will update this Privacy Policy and provide legally required choices.

10. Data Retention#

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention depends on factors such as:

whether your account remains active;
the type of information;
whether the information is needed to provide the Service;
security and fraud-prevention requirements;
contractual requirements;
backup cycles;
dispute resolution;
applicable limitation periods; and
legal obligations.

When information is no longer required, we will delete, de-identify or otherwise dispose of it where reasonably practicable.

Information removed from active systems may remain temporarily in secured backups until those backups are overwritten or expire according to normal retention cycles.

We may retain limited records longer where necessary for security, legal compliance, fraud prevention or establishment or defense of legal claims.

11. International Data Transfers#

Quodra is designed for an international user base.

Our service providers and technical infrastructure may process information in countries other than the country where you live.

Where applicable law requires safeguards for international transfers, we use recognized transfer mechanisms or other appropriate protections, which may include:

adequacy decisions;
approved contractual safeguards;
Standard Contractual Clauses; or
other legally recognized transfer mechanisms.

12. Security#

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include controls involving authentication, access management, encryption, infrastructure security, logging, backups and operational safeguards, depending on the system involved.

However, no internet service or storage system can guarantee absolute security.

You are responsible for maintaining the confidentiality of your credentials and for promptly notifying us if you believe your account has been compromised.

13. Your Privacy Rights#

Depending on where you live, you may have rights concerning your personal information.

These may include the right to:

access personal information we hold about you;
correct inaccurate information;
request deletion;
restrict certain processing;
object to certain processing;
obtain portable copies of certain information;
withdraw consent where processing is based on consent;
opt out of certain marketing;
complain to a relevant data protection authority; and
exercise rights concerning certain automated decisions where applicable.

These rights are subject to applicable legal conditions and exceptions.

We may need to verify your identity before fulfilling a request.

Where applicable, you may also authorize another person to make a request on your behalf.

Quodra will not discriminate against you for exercising rights provided by applicable privacy law.

14. EEA, UK and Similar Privacy Rights#

If European Economic Area, United Kingdom or similar data-protection law applies to our processing of your information, you may have rights including access, rectification, erasure, restriction, portability and objection.

You may also withdraw consent at any time where consent is the lawful basis, without affecting processing that occurred before withdrawal.

You may lodge a complaint with the data-protection authority responsible for your location.

Where legally required, Quodra will use appropriate safeguards for transfers of personal data to countries that are not recognized as providing an adequate level of protection.

15. United States State Privacy Rights#

Residents of certain U.S. states may have additional privacy rights under applicable state law.

Depending on the jurisdiction and whether a law applies to Quodra, these may include rights to:

know or access personal information;
correct information;
delete information;
obtain portable information;
opt out of certain sales, sharing or targeted advertising; and
appeal certain privacy decisions.

Quodra does not sell personal information as described in this Privacy Policy.

Where legally required and technically applicable, we will process recognized browser-based opt-out preference signals.

16. Children#

Quodra is not directed to children under the age of 13.

We do not knowingly collect personal information directly from children under 13 through ordinary individual accounts.

If you are under 13, do not create an individual Quodra account or provide personal information to us.

If we learn that we collected personal information from a child under 13 in circumstances where we were not legally permitted to do so, we will take reasonable steps to delete it.

Users who are 13 or older but have not reached the age at which they can independently consent to relevant processing or enter into the applicable agreement in their jurisdiction must use Quodra only with authorization from a parent, guardian, school or other authorized party where required.

Institution-managed educational accounts may be subject to separate agreements, notices and safeguards.

17. Research, Schools and Organizations#

Organizations, universities, schools, research groups and businesses may eventually provide users access to Quodra under separate agreements.

Where an organization controls a workspace or account, that organization may have administrative authority over accounts, content and information associated with its environment.

Where Quodra processes personal information solely on behalf of an organization, the organization may act as the data controller or equivalent decision-maker and Quodra may act as its processor or service provider.

Additional contractual terms or a Data Processing Addendum may apply.

18. Automated Decision-Making#

Quodra may use automated systems to operate functionality, detect abuse, recommend actions or generate AI-assisted content.

Unless specifically disclosed otherwise, Quodra does not intend to make solely automated decisions about users that produce legal or similarly significant effects.

AI-generated suggestions and technical outputs are tools for the user and are not decisions about the user's legal rights.

19. Third-Party Websites and Services#

Quodra may link to or integrate with third-party websites and services.

This Privacy Policy does not govern independent third parties.

You should review their privacy practices before providing information to them.

20. Changes to This Privacy Policy#

We may update this Privacy Policy as Quodra evolves.

When we make changes, we will update the "Last Updated" date.

If changes materially affect how we process personal information, we will provide additional notice where appropriate or legally required.

We will not retroactively make materially different use of personal information where applicable law requires additional notice or consent.

21. Contact Us#

Questions, concerns and privacy requests may be submitted by email:

hello@quodra.app

Product: Quodra

If you are contacting us about a privacy request, include enough information for us to understand the request, but do not send passwords or unnecessary sensitive information.