Legal
Privacy Policy
What we collect, what stays on your machine, and where the rest lives.
Last updated 12 October 2026
Draft for legal review. This text isn't final.
The short version
quibbit runs on your machine. Prompts and model responses go from your computer to the model provider you chose, never through our servers. If you turn on hosted browsers, a browser we provide in the US sees your pages and test logins for that session, and the session is deleted afterward. We keep your account, finding titles, run metadata, and membership in the United States, plus whatever you choose to sync or share. We never sell personal data and never use your data to train models. The website uses essential cookies and product analytics, with no ads.
1What this policy covers
This policy covers the website, the account console, the desktop app, and hosted browsers. It says what we collect, why, and how to ask us about it.
2What we collect
Your name, email, and workspace when you sign up. Billing details, through our payments provider. Finding titles, run metadata, and membership as you use the app. Whatever you choose to sync or share with your team. Emails you send us.
3What stays on your machine
Browsers and model calls run on the laptop you installed quibbit on. If you turn on hosted browsers, those browsers run in the US for that session and see your pages and test logins. Model keys live in your OS keychain. By default, video, screenshots, and traces of a passing run are deleted when the run passes, and the step log is kept. Evidence of a failure stays on your machine until you share it, and it's masked before upload.
4Where your data lives
What we store, we store in the United States. On Enterprise, evidence can go to your own S3 bucket instead.
5How we use your data
To run the service, bill you, answer support, keep accounts secure, and understand how the product is used. We don't sell personal data, run ads, or use your data to train models.
6Who we share it with
The providers that host the service and handle sign-in, payments, email, and hosted browsers. The model provider or gateway you pick, which hears from your machine, not from us. The members of your workspace. The full list is in the security packet.
7Personal data on the sites you test
quibbit masks video and screenshots before upload and strips cookies, tokens, and filled-in values from logs. Masking can miss data, so use test data.
8Cookies and analytics on the website
The website uses essential cookies and product analytics. No ads, no ad tracking, and no session recording.
9How long we keep it
Synced history is kept for 3 days on Free, 30 days on Solo, and 90 days on Team, then deleted. Account data stays while your account is open and is deleted when you close it.
10Security
How we protect the data we hold, and how to report a security concern. The Security page has the detail, and the security packet has the questionnaire answers.
11Your choices
How to see, correct, export, or delete your data, and how to stop release emails. Write to [privacy contact email].
12Children
quibbit is for people 18 and older and isn't directed at children. We don't knowingly collect children's data.
13United States only
quibbit is offered to customers in the United States. We don't offer it in the EU or the UK.
14Changes to this policy
When we change this policy, we post the new version here with a new date. For a material change, we email account owners first.
15Contact
quibbit is run by [legal entity name]. Privacy questions and data requests go to [privacy contact email]. Everything else goes to [support contact email].