Privacy policy
What data Qopper processes, what for, who it is shared with, and what you can ask of us. Written to be understood, not to be signed without reading.
Last updated: September 20, 2026
1.Who is responsible for each piece of data
There are two kinds of data here and they are not handled the same way, so it is worth separating them from the start.
We are responsible for your account data: your name, your email, your company's name, what you pay. We decide what is stored and why, and any claim about it comes to us.
You are responsible for your customers' conversations. They are your customers writing to you; we only provide the tool that receives them, answers them and stores them on your behalf. In legal terms: you are the controller and we are the processor. That means we do with that data what you tell us to and nothing else, and if one of your customers wants their conversation deleted, the instruction comes from you.
2.What data we process
Three groups, and nothing more.
- From your account: name, email address and the profile picture your sign-in method provides, your company's name and its website. If you sign in with Google or GitHub, we receive your email and your name from them; never your password.
- From your customers: what they write in the chat, on WhatsApp or by email, with the name and contact details they give; the voice notes they send; and what the agent looks up in your systems in order to answer them, such as an order, a payment or an appointment.
- From product usage: which screens are opened and which actions are run, so we know what breaks and what is unnecessary. This is measured inside the console, where your team works. The chat your end customer sees carries no measurement.
3.What we use it for
So the agent can serve your customers: read what they ask, look for the answer in what you have given it (your policies, your knowledge, your connected systems) and reply.
So your team can take over: when the agent hands off a case, the person who picks it up needs to see the whole conversation and what has already been found out.
To bill you and to keep the service running: invoicing, support, and finding errors before you do.
4.What we don't do
This section exists because it is the one people actually ask about, and almost no policy answers it directly.
- We don't sell data. Not yours and not your customers'. There is no data business behind this one.
- We don't train models on your conversations. Qopper does not train any model, and the model providers we use receive each message to answer that specific request, under terms that exclude training on data sent through their API.
- We don't mix customers. Every database query filters by your organization; no customer can read another's data, even by guessing an identifier.
- We don't announce a change that wasn't made. If the agent runs an action in test mode, it says so; and it doesn't claim to have changed something in your system until it has checked it against that system.
5.Who it is shared with
To work, Qopper relies on other companies. Each one receives only what it needs for its part, and none of them can use it for anything else. This is the complete list:
- Clerk — your team's accounts and sign-in.
- Neon — the database where your conversations and your configuration live.
- Vercel — hosting for the console and this website; and storage for voice notes.
- Anthropic, and the model gateways we use to reach it — the agent that drafts the replies.
- OpenAI — only to transcribe to text the voice notes your customer sends.
- Resend — sending and receiving email when that is your channel.
- Meta and Kapso — WhatsApp messages when that is your channel.
- Exa — reading public pages when you ask to autofill the knowledge from your website.
- Langfuse — the technical log of what the agent does, so it can be debugged. Personal data and keys are masked before they leave.
- PostHog — usage measurement in the console.
- Polar — subscription billing. We don't see or store your card details.
6.Where it is stored and for how long
The infrastructure is in the United States. If your company is in the European Union or in a country with international transfer rules, this affects you and you should take it into account before signing up.
Conversations and configuration are kept for as long as you have an account with us, because they are your work history: without them the inbox is empty and the agent loses what it learned about your business.
If you close your account, we delete your data within 30 days, except what the law requires us to keep (invoices, basically). If you want us to delete something sooner, write to us.
7.What you can ask of us
You can ask for a copy of your data, for us to correct what is wrong, to delete what should no longer be there, or to stop processing it. Ask by writing to hello@tryqopper.com and we will reply within 30 days at most.
If you want to exercise those rights over one of your customers' conversations, the request has to reach us through you: that data is yours, not ours, and we can't act on it on our own.
If you believe we are not complying, you can file a complaint with the data protection authority in your country. We would rather you wrote to us first, but it is your right and you don't need to go through us.
8.Security
Everything travels encrypted and is stored encrypted. Access to the console requires signing in, and each organization can only reach its own data.
No key or personal data appears in plain text in our technical logs: they are masked before being written.
No system is infallible. If a breach affecting your data occurs, we will tell you what happened, what it reached and what we did, without waiting for you to ask.
9.Minors
Qopper is a work tool and is not aimed at anyone under 18. We do not knowingly collect data from minors. If you find that a minor has given us data, write to us and we will delete it.
10.Changes to this policy
If we change something that really affects you (what data we process, who it is shared with, how long it is kept), we will notify you by email before it takes effect. Nothing is changed silently, and the date at the top is updated.
11.Contact
For anything on this page, including a complaint: hello@tryqopper.com. A person replies.