Privacy,
explained clearly.

Scope

This policy applies to quasentra.com, Quasentra accounts, the hosted control plane, dashboard, APIs, support interactions, and related services. It does not govern the independent privacy practices of your model provider, hosting provider, business tools, or other third parties you connect.

Information we process

How information is used

• provide accounts, subscriptions, authorization decisions, approvals, gateway operations and dashboard features;
• authenticate users and agent API keys, prevent abuse, enforce quotas and protect workspace isolation;
• investigate errors, incidents, suspected misuse and support requests;
• process and reconcile subscriptions, payments, cancellations and eligible refunds;
• maintain, measure and improve service reliability and security; and
• communicate operational, security, account, billing or policy updates.

Quasentra does not need an LLM call to make deterministic authorization decisions.

Credentials and secrets

Agent API keys are shown once and stored as hashes. Supported gateway connector credentials are intended to remain server-side and are stored through the configured encrypted secret mechanism.

Service providers and disclosure

Quasentra may use hosting, database, email, security, monitoring, and payment providers to operate the service. These providers may process information only as needed for the services they supply and according to their agreements and applicable requirements.

Information may also be disclosed where reasonably necessary to comply with law, respond to lawful process, protect rights or safety, investigate misuse, or support a business restructuring. A final commercial policy should identify material provider categories and jurisdiction-specific requirements after legal review.

Cookies and session storage

Quasentra uses secure session and CSRF cookies required for account authentication and protection of browser actions. Operational cookies are not a substitute for agent API-key authentication. If analytics or optional marketing cookies are introduced, this policy and any required consent controls must be updated before use.

Retention and deletion

Information is retained while needed to provide the service, secure accounts, investigate incidents, meet operational or legal requirements, and resolve billing disputes. Different records may require different periods.

Production retention schedules, deletion timelines, backup handling, and customer deletion procedures must be finalized and published before commercial launch. Until then, customers should not treat this draft as a contractual retention commitment.

Security measures and limits

Current controls include hashed agent API keys, scoped permissions, tenant-aware access checks, CSRF protection for browser sessions, rate limiting, encrypted managed credentials, decision auditing, and security event monitoring.

No system can guarantee absolute security. Customers must protect their own accounts, deployment environment, agent prompts, business credentials, model-provider keys, and any tool path outside Quasentra enforcement.

Your choices and requests

You may contact us to ask about account information, correct inaccurate details, request account closure, or raise a privacy concern. A request may require identity verification, and some records may need to be retained where required for security, dispute resolution, billing, or law.

Specific statutory rights depend on your location and applicable law. This draft does not limit a right that cannot legally be limited.

Data locations and transfers

Service providers may operate infrastructure in jurisdictions different from yours. Before commercial launch, Quasentra must document its production providers, data locations, and any transfer safeguards required for the customers and regions it serves.

Children

Quasentra is a business and developer service and is not directed to children. Do not create an account or submit personal information if you lack legal capacity to agree to the service terms.

Changes to this policy

We may update this policy as the product, providers, or legal requirements change. The current version and update date will remain on this page. Material changes affecting active customers will be communicated where reasonably required.