Privacy Policy.

Deflect is operated by QuensultingAI. We are the data controller for personal data you provide when creating an account or using our platform. For any privacy-related queries, contact us at support@quensultingai.com. Note: If you use Deflect to build an AI agent that interacts with your end users, you are the data controller for your end users' data — Deflect acts as your data processor for that data only.

• Identity Data — your name and username or similar identifier used to create your account.
• Contact Data — your email address, used to communicate with you about the service.
• Technical Data — IP address, browser type and version, device identifiers, and login timestamps.
• Usage Data — how you interact with the platform, features used, pages visited, and support requests.
• Billing Data — payment method details processed by our payment provider (we do not store full card details).
• Knowledge Base Content — documents, URLs, and data you upload to power your AI agent.
• End-User Conversation Data — messages exchanged between your deployed AI agent and your end users, processed on your behalf.

• To provide, maintain, and improve the Deflect platform and your account.
• To process payments and manage your subscription.
• To send transactional communications such as invoices, service updates, and security alerts.
• To respond to support requests.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.
• We never sell your data. We never use your data or your end users' data to train shared or public AI models.

• Contract performance — processing your account data and knowledge base content to deliver the service you've signed up for.
• Legitimate interests — analysing usage patterns to improve the platform, preventing abuse, and securing the service.
• Legal obligation — retaining certain records as required by law (e.g. tax and financial records).
• Consent — where you have explicitly opted in, such as marketing communications. You may withdraw consent at any time.

To operate Deflect, we work with a limited set of trusted service providers who process data on our behalf as sub-processors. These include: cloud infrastructure providers (hosting and storage), AI model providers (to power your agent's responses), payment processors, transactional email providers, and analytics tools. We contractually require all sub-processors to protect your data to standards equivalent to our own. We do not share your data with any third party for their own commercial purposes. A current list of sub-processors is available on request at support@quensultingai.com.

We retain your account and usage data for as long as your account is active. If you cancel your account, we will retain your data for 30 days to allow export, after which it will be permanently deleted from our systems. Billing records may be retained for up to 7 years to comply with financial regulations. Conversation logs from your AI agent are retained for the period specified in your plan settings and can be deleted by you at any time.

We use essential cookies to operate the platform (e.g. session authentication). We may also use analytics tools to understand how the website is used in aggregate — this helps us improve the product. Analytics data is collected in a privacy-preserving manner and is not linked to individual identities where possible. You can disable non-essential cookies through your browser settings. We do not use advertising or tracking cookies.

Our infrastructure and some sub-processors may be located outside your country of residence, including in the United States. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent transfer mechanisms required by applicable law.

• Right to access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can request deletion of your personal data, subject to legal retention obligations.
• Right to portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests.
• Right to restriction — you can ask us to pause processing of your data in certain circumstances.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• To exercise any of these rights, email support@quensultingai.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Access to your data is scoped to your organisation and governed by role-based access controls. Despite these measures, no internet transmission is completely secure — we cannot guarantee absolute security.

Deflect is intended for use by businesses and individuals aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If we become aware that a child under 13 has provided personal data to us, we will delete it promptly. If you believe a child has submitted data to our platform, please contact us immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice within the platform before the changes take effect. The 'Last updated' date at the top of this page reflects the most recent revision. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

For any questions about this policy, to exercise your rights, or to raise a concern, contact us at support@quensultingai.com.