Privacy Policy

Last updated: 21 September 2026

This Privacy Policy explains how Quoqo, Inc. (“Quoqo”, “we”, “us”) collects, uses, and protects information when you use DealFast (the “Service”) — our AI-assisted document review platform for legal professionals.

We have written it in plain language. If anything is unclear, write to support@quoqotech.zohodesk.in and we will explain.

1. Information we collect

Account information

Your name and email address.
Your organisation, role, and any company information you choose to provide.
Hashed authentication credentials. We never store passwords in plaintext.
Sign-in metadata (timestamps, IP addresses) used for security and abuse prevention.

Documents and content you submit

Contracts, agreements, and other documents you upload to the Service.
Comments, redlines, playbooks, and any other content you generate while using DealFast.
Metadata about those documents (filename, file size, type, the time you uploaded them).

Usage and diagnostic data

Pages visited, features used, and AI actions invoked (analyse, compare, extract, etc.).
Performance and error logs from the application and our infrastructure.
Cookies and similar technologies needed to keep you signed in. We do not use third-party advertising cookies.

2. How we use your information

To provide the Service: render the dashboard, run the AI analyses you request, store the results, and let you retrieve them.
To improve reliability and performance: aggregate, de-identified diagnostics help us find and fix bugs.
To secure the Service: detect abuse, prevent unauthorised access, and respond to incidents.
To communicate with you about your account, workflow notifications, and product updates.
To comply with legal obligations and enforce our Terms.

We do not use your documents to train any model. We do not sell your information. We do not share your documents with advertisers.

3. AI processing — who sees your documents

DealFast uses third-party large-language-model providers to perform analysis. When you ask DealFast to analyse a document, the relevant portion of the document is transmitted, over an encrypted connection, to one of these providers for inference. The providers we use:

Are bound by contractual obligations not to use your inputs to train their models.
Process the request and return only the analysis. They do not retain copies of your content beyond what is needed to serve the response.
Operate under industry-standard security and confidentiality commitments.

We periodically review the set of AI providers we use. The current list, along with each provider's data-handling commitments, is available on request to support@quoqotech.zohodesk.in.

Enterprise customers may opt into the desktop edition of DealFast, which performs inference locally on the user's machine. When you use local-only mode, no document content leaves your device.

4. Where your data is stored

Account information and document metadata are stored in our database hosted on infrastructure operated by Quoqo. Application logs and diagnostics are stored on the same infrastructure with the same access controls. Backups are encrypted at rest.

We currently host primary infrastructure in our own facilities. We can provide region-specific hosting for enterprise customers on request, including India-localised hosting where required by DPDPA.

5. Sharing your information

We share information only in the following narrow circumstances:

Service providers: AI inference, email delivery, error tracking, and authentication. Each provider is bound by contractual confidentiality and processes data only on our instructions.
Within your organisation: documents and workflow activity are visible to your colleagues according to the visibility rules your administrator configures.
Legal obligations: if we are required by law to disclose information, we will do so. We will notify you unless the law prohibits it.
Business transfers: in a merger, acquisition, or asset sale, information may transfer to the acquiring entity, subject to this Policy.

Website analytics

Our public homepage uses Cloudflare Web Analytics to measure visits and page performance without analytics cookies. Where Google Analytics is enabled, it loads only after you choose “Allow analytics” and measures homepage visits and clicks on pricing, signup and walkthrough links. Advertising personalization is disabled. You can change your choice using “Analytics preferences” on the homepage. These marketing tools are not installed in your document workspace or on password-reset pages.

6. Your rights

Depending on your jurisdiction, you have some or all of the following rights:

Access: ask for a copy of the information we hold about you.
Correction: ask us to correct inaccurate information.
Deletion: ask us to delete your account and the data associated with it.
Portability: ask us to export your data in a machine-readable format.
Objection / restriction: ask us to stop or limit certain processing.
Withdraw consent: where we rely on your consent, you may withdraw it.

Send any of these requests to support@quoqotech.zohodesk.in. We will respond within 30 days.

7. Retention

We retain account information and documents for as long as your account is active. When you delete your account or specific documents, we delete the corresponding rows and content from our active database immediately, and from backups within 30 days. Audit logs related to security events may be retained longer where required by law.

8. Security

All traffic between your browser and DealFast uses TLS 1.2 or higher.
Data is encrypted at rest using AES-256 in our database storage and backups.
Access to production systems is restricted to a small number of authorised engineers and requires two-factor authentication.
We use Row-Level Security at the database layer so that one user cannot read another's data, even by accident.
We log and review access to sensitive resources.

No system is perfectly secure. If you believe your account or any data has been compromised, email support@quoqotech.zohodesk.in immediately.

9. Children

DealFast is intended for use by legal professionals over the age of 18. We do not knowingly collect information from children.

10. International transfers

Your data may be processed in jurisdictions other than where you live. We use standard contractual clauses or equivalent safeguards where required. Enterprise customers can request region-specific hosting and a list of the jurisdictions in which their data will be processed.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will notify you by email and post the updated Policy here with a new “Last updated” date. Continued use of the Service after the update means you accept the revised Policy.

12. Contact

Quoqo, Inc. — Privacy
Email: support@quoqotech.zohodesk.in