Privacy Policy

Our commitment

Killebrew Technologies LLC, a Texas limited liability company doing business as NeuroQuest Labs (“NeuroQuest Labs”, “we”, “us”, or “our”), is the data controller for personal data processed through the Services. We believe your data is yours. We do not sell your personal data, we collect only what we need, and we let you access and delete your data.

1. Information we collect

• Account information: such as your name, email address, and authentication credentials (passwords are stored in hashed form).
• Content you provide: the content, files, and data you submit to a Service so it can perform the functions you request (for example, notes, images, or prompts).
• Usage and device data: log data such as IP address, browser and device information, and interactions with the Services, used for security, diagnostics, and improvement.
• Payment information: if you subscribe to a paid plan, billing is handled by our payment processor (Stripe). We do not store full card numbers.
• Cookies: strictly necessary cookies for authentication, session management, and security. See section 9.
• openflow audio and transcript content: when you use openflow Free or Pro, microphone audio and transcript content are transmitted securely to complete transcription and cleanup. openflow does not retain that audio or transcript content on its servers by default. Local history remains on your Mac unless you explicitly enable a future sync feature.
• openflow usage metadata: account, device, subscription, word-count, request timing, and error metadata used to enforce plan limits, prevent abuse, diagnose failures, and operate the service. This metadata does not include transcript text by default.

We do not use advertising cookies or sell your data to advertisers, and we do not knowingly build cross-site advertising profiles.

2. How we use your information

• To provide, maintain, and secure the Services and your account;
• To process the content you submit and generate the output you request, including via AI models;
• To process payments and manage subscriptions;
• To communicate with you about your account, support requests, and service changes;
• To detect, prevent, and respond to fraud, abuse, and security incidents;
• To improve the Services and comply with our legal obligations.

We do not use the private content you submit to train foundation models for unrelated third parties.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract (to provide the Services), our legitimate interests (to secure and improve the Services), consent (where required), and compliance with legal obligations.

4. How we share information

We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate contractual protections, including:

• Cloud hosting and infrastructure that operate the Services on NeuroQuest Labs infrastructure;
• AI model providers that process prompts and content to generate output;
• Payment processing (Stripe);
• Email and communications providers;
• Authentication services within the NeuroQuest Labs ecosystem.

openflow currently uses Groq as a model-processing provider for transcription and cleanup. When you bring your own Groq key, requests are sent from your Mac to Groq using that key. When you use openflow Free or Pro, requests are sent through NeuroQuest Labs infrastructure and then to Groq.

We may also disclose information to comply with law, enforce our terms, or protect the rights, safety, and security of our users and the Services, and in connection with a merger, acquisition, or sale of assets.

5. Data retention

We keep personal data for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymize your personal data within a reasonable period (generally within 30 days), except where we must retain limited records to comply with legal, tax, or accounting obligations (for example, payment records).

openflow does not retain microphone audio or transcript content on its servers by default. Usage, security, billing, and diagnostic metadata may be retained for as long as needed to operate the account, enforce limits, prevent abuse, and meet legal obligations.

6. Security

We use industry-standard safeguards to protect your data, including encryption in transit (TLS), access controls, and security monitoring and logging. No system is perfectly secure, but we work to protect your data and to respond quickly to incidents.

7. Your rights

You can, at any time:

• Access the personal data associated with your account;
• Correct or update your account information;
• Export your data where the Service supports it;
• Delete specific content or your entire account;
• Opt out of non-essential communications.

California (CCPA/CPRA): you have the right to know, delete, and correct your personal information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

EEA/UK (GDPR): you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. You may also lodge a complaint with your local supervisory authority.

To exercise any right, contact us atcontact@neuroquestlabs.ai.

8. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

9. Cookies

We use only cookies that are strictly necessary for the Services to function, such as authentication and session cookies. You can control cookies through your browser, but disabling essential cookies may prevent parts of the Services from working.

10. International data transfers

We operate primarily in the United States. If you access the Services from outside the U.S., your data may be transferred to and processed in the U.S. and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers.

11. Data breach notification

In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities as required by applicable law, without undue delay.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice.

13. Contact

For privacy questions or requests, contact us atcontact@neuroquestlabs.ai.