Scope and roles
You are the controller of personal data in your workspace content; PQZ.ai is the processor.
Instructions
PQZ processes personal data only to provide the service and on your documented instructions, including the settings you choose in the app. We will tell you if an instruction appears to break the law.
Confidentiality
People at PQZ who can access personal data are bound by confidentiality. Staff access to a workspace for support requires a reason and is recorded in that workspace's audit log.
Security
We apply the measures described on the Security page, including encrypted channel tokens, role-based access, two-factor authentication and audit logging.
Sub-processing
PQZ uses sub-processors, including AI model providers and a payment provider, to run the service. We remain responsible for them and will tell you before adding new ones. Email [email protected] for the current list.
Assistance
We help you respond to requests from individuals and with security and data protection assessments where needed.
Breaches
We will tell you without undue delay after becoming aware of a personal data breach affecting your data.
Deletion
When the service ends, we delete or return personal data, except where the law requires us to keep it.