Version 2026-09-01
This text is pending final review by our legal team. The version and acceptance date recorded for your account are already binding.
This policy explains what personal data Quixote processes, why, and what rights you have. We are the data controller for the processing described here.
Account data (email, name, profile preferences), usage and billing records, the content you submit to the platform, and technical data such as IP address and browser details needed to operate and secure the service.
To provide the service you asked for, to bill you, to keep the platform secure, to meet legal obligations, and — only with your consent — to send you product news.
Our database and object storage run in the European Union. Depending on the model you choose, prompts may be processed by third-party providers; the EU-only routing mode restricts this to providers inside the EU and refuses a request rather than sending it elsewhere.
You can configure which categories of personal data are masked before text reaches a model, and Private Mode runs a session that persists no content at all.
Account and billing records are kept while your account is active and for as long as the law requires afterwards. Conversations and documents are kept until you delete them or close your account.
We use third parties for hosting, payments, model inference, email delivery and product analytics. Each acts under a data processing agreement.
You may access, correct, export or erase your personal data, object to processing, and withdraw any consent you have given. Withdrawing consent does not affect processing carried out before the withdrawal.
We keep an append-only record of every acceptance and withdrawal, including the document version, the date and the origin of the request, so that we can demonstrate the basis on which we process your data.