Privacy Policy

1. Introduction

Welcome to Inqry ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our contextual RAG platform and services (the "Service").

For the purposes of the General Data Protection Regulation (GDPR), the Data Controller is Snapcircle Ltd., Dublin, Ireland.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, password hash, and profile image when you register.
• Usage Data: Information about how you use our service, including chat logs, knowledge base contents, and feature usage.
• Technical Data: IP addresses (anonymized), browser type, and device information for security and diagnostics.
• Cookies: Essential session cookies to maintain your login state.

3. How We Use Your Data

We process your data for the following legal bases:

• Contractual Necessity: To provide the RAG platform services you signed up for.
• Legitimate Interests: To improve our product, prevent fraud, and ensure security.
• Consent: For any optional marketing communications or non-essential cookies.

4. Data Processors & Third Parties

We utilize trusted third-party service providers to deliver our services. We have Data Processing Agreements (DPAs) in place with:

• OpenRouter, OpenAI, Anthropic & Google: For LLM inference and embeddings.
• Voyage AI: For search result reranking.
• Stripe: For payment processing.
• Hetzner Cloud & Vercel: For hosting and infrastructure.
• Neon, Qdrant Cloud & Redis Cloud: For database and caching services.

Our primary infrastructure is hosted in the EU (Helsinki). Some AI providers are based in the US; data transfers are governed by Standard Contractual Clauses (SCCs) ensuring GDPR-equivalent protection.

For a complete list, see our Subprocessors page.

5. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data (specifically for AI inference), to the United States and process it there.

Legal Basis for Transfers:

• EU-US Data Privacy Framework (DPF): For providers certified under the DPF (e.g., Vercel).
• Standard Contractual Clauses (SCCs): For US-based AI providers where DPF is not applicable (e.g., OpenRouter), we rely on their Standard Contractual Clauses as the legal transfer mechanism to ensure your data remains protected.

6. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("Right to be Forgotten").
• Restrict or object to processing.
• Data portability.

To exercise any of these rights, please contact us at:support@inqry.ai

7. Data Retention

We retain personal data only for as long as necessary to provide our services or as required by law. Chat logs are retained for 90 days. User account data is retained until account deletion.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at:
Email: support@inqry.ai

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you believe your rights have been violated.