Privacy Policy

Quillward collects account identity details needed for email-and-password authentication, including your name and email address. The CyberReady assessment stores your answers, calculated scores, recommendations, and dates so you can use your private dashboard and purchased history.

You may optionally provide low-sensitivity Pro context such as a business name, industry, team-size band, and whether you use vendors. Do not provide passwords, passcodes, payment-card or bank details, government identifiers, encryption keys, API tokens, confidential customer records, or other sensitive records in an assessment, profile, support question, or editable document.

We use this information to authenticate you, calculate readiness signals, deliver paid reports and documents, support Monitor cycles, respond to support requests, send transactional email, prevent duplicate payment fulfillment, and maintain your purchased workspace. Generated documents are based on assessment signals, allowlisted public sources, and any optional profile context you choose to provide.

Support questions may be classified using the Polsia AI proxy, but private account status and payment decisions are not delegated to an automated answer. Support escalations and transactional messages may be sent through the Polsia email proxy. Payment checkout and subscription management are handled by the payment provider through hosted flows; Quillward does not ask for or store payment-card numbers.

The app uses better-auth and its database adapter for authentication and session records, the app database for your workspace, the Polsia AI proxy for bounded support or document generation tasks, the Polsia email proxy for transactional and support communication, and a payment provider for hosted checkout and billing-portal operations. These services process information only as needed for the product flows described here.

Your browser may retain a local CyberReady draft in local storage so an unfinished assessment can be resumed. A conditional visitor beacon may be loaded by the deployment when the platform supplies its analytics configuration; it is not required for the product workspace.

Account, assessment, support, generated-document, and purchase history may remain in the workspace after a subscription is cancelled so that previously purchased material and records are not silently removed. Cancellation pauses future Monitor work; it does not promise deletion of historical records. Contact us to ask about an account or privacy question, but we do not promise a deletion outcome that the current product does not support.

You can avoid optional profile fields and stop sending a support message at any time. To ask about your data or the product boundary, email Quillward at contact@getquillward.com. We will verify account ownership before discussing private records.

Quillward uses authenticated, owner-scoped routes and bounded input checks, but no online service can promise perfect security. Quillward does not need, request, or intentionally collect passwords, SSNs, banking credentials, payment-card data, private keys, API tokens, or confidential customer records. If you accidentally submit prohibited data, stop using the flow and contact us without repeating the value.