Privacy Policy

It covers the websites qeda.io and docs.qeda.io, the Qeda dashboard at dashboard.qeda.io, the Qeda command line and API, the beta programme, our community spaces and the emails we send. It applies to visitors, people who sign up, account owners and members of their workspaces.

It does not cover the applications our customers build and run on Qeda. If you use an app hosted on Qeda, that app's owner decides how your data is used, and their own privacy policy applies. Our role for that data is explained in Data you deploy on Qeda.

What you give us

When you create an account or join the beta we ask for your name, email address, country and a password, or we receive your name, email and public profile from GitHub or GitLab if you sign in with them. If you add a company we record its name, billing address and tax number. When you contact us, by email, through the dashboard or on WhatsApp, we keep your messages, any files you attach and, on WhatsApp, your phone number.

What we collect when you use Qeda

To run your services we record technical data such as the projects, services and regions you create, deployment and build logs, resource usage (CPU, memory, storage, bandwidth), IP addresses, browser and device type, and the date and time of each action in the dashboard or API. We keep security logs of sign-ins and changes to API keys.

What we receive from others

Payment providers tell us whether a top-up or payment succeeded, with its amount, currency, reference and the phone number or wallet used. Git providers send us repository metadata and commit events for the repositories you connect. If a teammate invites you to a workspace, we receive your email address from them.

Website visits

On qeda.io we measure visits with Google Analytics, only if you accept analytics cookies, to understand which pages are useful. The cookies involved are listed in our Cookie Policy.

We only use personal data when we have a reason the law accepts. The table below lists each purpose with that reason. Where we rely on your consent, you can withdraw it at any time from your account settings or by writing to us, without affecting what was done before.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects. Automatic suspension when your wallet reaches zero (Safety Auto-Stop) is a billing rule you agree to in our Terms, and you can restart your services as soon as you top up.

The code, databases, files, environment variables and logs of the applications you deploy may contain personal data about your own users. For that content you are the controller and Qeda acts as your processor. We process it only on your instructions, to host, back up and run your services, and we do not look at it except to provide support you ask for, to keep the platform secure, or when the law requires it.

Our Data Processing Agreement sets out these commitments, including security measures, sub-processors and assistance with your own users' requests. It is part of our Terms and available on request at privacy@qeda.io. If one of your users contacts us directly, we will pass the request on to you.

Qeda AI Hub is not available yet. When it launches, a dedicated page will explain how prompts, files and model outputs are handled, and we will update this policy before any of that data is processed.

You can top up your Qeda wallet with Mobile Money (such as Orange Money, MTN MoMo, Moov Money or Wave) or with a bank card. Payments are handled by DPO Pay by Network, a licensed payment provider. You enter your PIN or card number on DPO Pay's secure pages, and we never see or store them.

From the provider we receive the amount, currency, date, transaction reference, status and the phone number or address used. We keep this with your invoices to meet accounting and tax rules.

We do not sell your personal data. We share it only with the service providers that help us run Qeda, under contracts that limit their use to our instructions, and with others in the narrow cases described after the table.

We may also share data with our professional advisers, with authorities when a valid legal request obliges us to (we tell you first unless the law forbids it), to protect the rights and safety of our users or of Qeda, and with a buyer or successor if Qeda is involved in a merger or acquisition, in which case this policy continues to apply to your data.

Your applications run in the region you choose when you deploy. Account, billing and support data is stored in France, in OVHcloud datacenters in Roubaix and Gravelines, within the European Union. Some providers listed above, such as Google and Meta, may process data in the United States. Because Qeda is based in the United Arab Emirates and serves users across Africa and beyond, your data may be transferred to a country other than your own.

Transfers outside your country

When we transfer data, we use the safeguards your law requires: transfers to countries recognised as offering adequate protection, standard contractual clauses approved by the European Commission or by the relevant African authority, your consent where the law allows it, or the transfer being needed to provide the service you asked for. You can ask us for a copy of the safeguards that apply to you.

We keep personal data only as long as we need it for the purpose it was collected for, and never more than 24 months after your last activity, then delete or anonymise it. The only exception is invoices and payment records, which tax and accounting law requires us to keep longer.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the competent authorities within the time the law sets, which is 72 hours under the GDPR and under several African laws. You can help by using a strong password, turning on two-factor authentication and keeping your API keys secret.

Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, export it in a common format, limit how we use it, or stop using it for marketing. You can also object to uses based on our legitimate interest and withdraw any consent you gave.

Most of this is available in the dashboard under [Settings › Privacy]. Otherwise, write to privacy@qeda.io. We may ask you to prove your identity before acting. We answer within 30 days, sooner where your local law requires it, and we do not charge for reasonable requests.

Making a complaint

If you are not satisfied with our answer, you can complain to the data protection authority of your country. The main ones for our users are listed below. If you live in a country not listed here, you keep the rights your own law gives you, and we will handle your request in the same way.

We use cookies that are needed to keep you signed in and to secure the dashboard. With your consent, we also use analytics cookies on qeda.io. You can change your choice at any time from the cookie banner link in the footer. Details are in our Cookie Policy.

Qeda is a service for professionals and is not meant for anyone under 18. We do not knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.

We update this policy when our services or the law change. The date at the top shows the latest version. If a change affects how we use your data in a significant way, we will tell you by email or in the dashboard at least 30 days before it takes effect.

For any question about this policy or your data, write to us. We read every message.