Privacy
What is stored, who else touches it, how long it is kept and how to take it away. Written from the code rather than from a template, so it should match what the service actually does.
Who is responsible
The person who runs Quoin Cloud, in Tunisia, as an individual rather than a company. For anything you store here on behalf of your own users, you are the controller and this service is the processor: the documents are yours, and what is in them is your business rather than mine.
What is stored
Your account
Your name, your email address, and either a password hash or the fact that you signed in with GitHub. Sessions are kept so you stay signed in.
Your organisation and projects
Their names, who is a member and in what role, and the signing keys for each project. Keys are encrypted at rest and are never shown again after they are issued.
Your documents
The merged state of every room, which is the text, its formatting and its editing history. It is stored so the next person to open the document sees what the last one wrote.
How much you use
Connections per project per day, and the people counted this month. A person is stored as a hash of the reader id your own token carried, salted per project, which is deliberately one way: it can count people and cannot identify them, or tell that the same person used two of your projects.
An audit log
What was done to an organisation and by whom: a project created or deleted, a key rotated, a plan changed. It outlives the thing it describes on purpose, because a record of a deletion is worth more after the fact than before.
What is not stored
No card details, ever. Paddle takes the payment and this service never sees the number. No advertising or analytics trackers, no third party scripts on any page, and nothing that follows you between sites. Your documents are not read by a person and are not used to train any model.
Who else processes it
| Who | What for |
|---|---|
| Vercel | Runs the application and serves every page and connection. |
| Neon | The Postgres database, which is where everything below is stored. |
| Upstash | A Redis cache, used to spread live connections across instances and to rate limit the public demo. |
| Paddle | The merchant of record. It takes the payment and holds the billing details, which never reach this service. |
| Only the public demo. What you type into the demo assistant is sent to the Gemini API to answer it. |
Where it lives
The database and the application run in the United States. If the data you intend to store has to stay in a particular region, say so before you build on this rather than after.
How long it is kept
Your documents are kept until you delete them, either one at a time or by deleting the project or the organisation. A deleted organisation takes its projects, keys and documents with it immediately, and only the audit log remains. Rooms made in the public demo are swept a week after they were last touched, since nobody owns them.
What you can do
Export any document from the dashboard as Yjs state, which is the same format any other y-websocket server reads, so leaving is a documented path rather than a request. Delete a document, a project or the whole organisation yourself from the dashboard. For anything else the law where you live entitles you to, including a copy of what is held about you or its correction, write to the address below and you will get an answer rather than a form.
Cookies
One cookie, which keeps you signed in. There is no consent banner because there is nothing to consent to: no analytics, no advertising, no sharing.
The public demo
The demo needs no account. Its rooms are not owned by anybody and are deleted after a week. Asking its assistant a question sends what you typed, and the surrounding text of the demo document, to Google's Gemini API to answer it. Do not put anything into the demo that you would mind leaving.
Changes and contact
If this page changes in a way that matters, the change is announced before it applies. Questions, requests and complaints go to support@quoincloud.com. The terms cover the rest of the relationship.