Privacy Policy

Qoriq is an AI-powered analytics assistant that connects to your Google Analytics 4 and Google Search Console data to answer questions in plain language.

Company: Qoriq · Website: qoriq.tech

• Your Google account email, name and profile picture (via Google OAuth)
• Access tokens to read your GA4 and Search Console data (read-only)
• Your chat questions and AI responses (stored to show your history)
• Subscription and billing information (via Stripe)

• We never store your raw GA4 or Search Console data on our servers
• We never sell your data to third parties
• We never use your data for advertising

We implement the following technical and organizational measures to protect your sensitive data:

Encryption

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS).
• OAuth access tokens and refresh tokens are encrypted at rest in our database using industry-standard encryption.
• Passwords and secrets are never stored in plain text.

Access Token Security

• Google OAuth tokens are stored server-side only — they are never exposed to the browser or third parties.
• Tokens are scoped to read-only access for Google Analytics and Search Console data.
• Tokens are automatically refreshed and revoked upon account deletion.

Data Minimization

• We access only the Google Analytics 4 and Search Console data required to answer your specific question.
• Raw GA4 and Search Console data is never persisted to our database — only AI-generated insights and your chat history are stored.

Access Controls

• User data is isolated per account. No user can access another user's data or conversation history.
• Internal access to production data is restricted to authorized personnel only.

Infrastructure Security

• Our backend runs on Railway, a SOC 2-compliant cloud infrastructure provider.
• Database access is restricted via private networking and credential-based authentication.

Breach Response

• In the event of a data breach affecting your personal information, we will notify affected users within 72 hours via email.

Qoriq integrates with Google Analytics and Google Search Console via OAuth 2.0. When you connect your Google account, we access your analytics and search performance data solely to provide the Qoriq service.

We do not:

• Share, sell, transfer, or disclose your Google user data to any third parties
• Use your Google data for advertising or marketing purposes
• Store raw Google data beyond what is necessary to answer your questions

We do:

• Send your analytics data to Anthropic's Claude API (claude.ai) solely to generate answers to your questions. Anthropic processes this data according to their Privacy Policy.
• Store your questions and answers in our database to show your conversation history

You can revoke Qoriq's access to your Google account at any time via Google Account Permissions.

• To provide AI-generated analytics insights
• To maintain your chat history
• To manage your subscription

• You can delete your account and all associated data at any time
• Chat history is stored per user account and never shared

We rely on the following trusted third-party services:

• Google — OAuth + Analytics API
• Stripe — payments
• Anthropic — AI responses via Claude API
• Resend — transactional emails

For privacy questions, contact us at karim.adahchour@gmail.com.