This policy explains how DILENS LTD handles personal data in SureQuill. Contact: support@surequill.com.
1. Who is responsible
DILENS LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, is the controller for your account data (email address, organization name and website, payment records, activity log).
For the content you upload (questionnaires, checklist, answers, trust page documents) we act as your processor under the Data Processing Agreement.
2. What we process and why
Account: email address and sign-in data, to provide your account (contract).
Questionnaires and checklist: to detect questions and draft answers (contract). The questionnaire text and your checklist are sent to our AI provider for drafting. They are not used to train AI models.
Payments: amount, status and Stripe references, to bill you and to meet tax duties (contract, legal obligation). We never see your card details.
Emails: notifications about your questionnaires (contract).
Trust page visitors who request a document: name and email address, so you can decide on the request and we can send the download link (legitimate interest of the trust page owner).
Security and errors: an activity log without content and error reports without content, to keep the service secure and working (legitimate interest).
3. Cookies
We only use cookies that are needed to keep you signed in. There are no analytics or advertising cookies.
4. Service providers
We use these providers to run the service. Each is bound by a data processing agreement.
Supabase Inc.: Database, file storage and sign-in (EU (Ireland)).
Railway Corp.: Application hosting (EU region).
Anthropic PBC: AI drafting of answers (questionnaire text and checklist) (USA).
Stripe Payments Europe Ltd.: Payments and receipts (EU (Ireland), USA).
Resend Inc.: Transactional emails (USA).
Hostpoint AG: Domain and support mailbox (emails you send to our support address) (Switzerland).
Functional Software Inc. (Sentry): Error tracking without customer content (EU (Germany)).
Transfers outside the UK and EU are covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
5. How long we keep data
Questionnaires (uploaded file, questions, answers, export file): deleted 30 days after the export, or 30 days after upload if no payment is made. You can delete a questionnaire earlier at any time.
Checklist and answer library: kept until you delete your account, because they are reused for your next questionnaire.
Trust page and its documents: kept until you remove them or delete your account. Document requests from visitors are deleted with the trust page.
Payment records: kept for six years as required by UK tax law.
Activity log (events such as "uploaded" or "exported", no content): 12 months.
Database backups: overwritten automatically after at most 7 days.
6. Your rights
You can access, correct, export and delete your data. Most of this is possible directly in the app: the settings page offers a data export and account deletion.
For anything else, or to object to processing, write to support@surequill.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
7. Security
Data is encrypted in transit and at rest. Every customer's data is separated by database access rules. Admin access requires two-factor authentication and is logged.