JJLabsio, a sole proprietorship operated in the Republic of Korea, doing business as Quova AI (“Quova,” “we,” “us,” or “our”), explains in this Privacy Policy how we process personal information when you visit quova.ai, use app.quova.ai, or contact us. We process information to provide Quova AI, an AI visibility analytics service that currently analyzes how ChatGPT responds to prompts about brands.
1. Who We Are
Controller and operator: JJLabsio (제이제이랩스아이오)
Business registration number: 836-64-00736
Business address: 211-4 Omok-ro, Yangcheon-gu, Seoul, Republic of Korea
Privacy contact and officer: Jaejin Song (송재진), proprietor
Email: support@quova.ai
We do not provide a telephone contact number.
2. Information We Process
- Account and authentication information: email address, name, profile image, Google account identifier, authentication records, and session information.
- Workspace information: brand and competitor names, website URLs, industry or business descriptions, selected country, and prompts you add or generate.
- Service content and results: prompts, ChatGPT responses and citations retrieved for those prompts, and visibility, recommendation, source, and related analysis results.
- Technical and usage information: IP address, browser user agent, session identifiers, access timestamps, pages or service functions used, and error diagnostics when monitoring is enabled.
- Billing information: selected plan, subscription status and dates, Polar customer and subscription identifiers, and transaction records. Polar collects and processes payment card details; Quova does not store full card numbers.
- Support communications: the email address and information you include when contacting us.
You may use a personal email address to register; a company email address is not required. Please do not submit sensitive personal information about yourself or another person in workspace prompts or support messages.
3. Why We Use Information
- Create and secure accounts and authenticate users.
- Run the prompts you configure, retrieve ChatGPT responses and cited sources, and provide visibility and recommendation analysis.
- Store and display workspace settings, prompts, reports, and historical results.
- Provide customer support and send essential service emails.
- Start trials, process subscriptions, and keep billing records.
- Protect, troubleshoot, and maintain the service.
- Meet legal and accounting obligations.
We do not use customer prompts or reports to train our own foundation models. Quova does not sell personal information or use it for cross-context behavioral advertising.
4. Legal Grounds
Depending on the information and applicable law, we process information because it is necessary to perform the service agreement, to pursue legitimate interests in securing and maintaining the service, to meet a legal obligation, or because you have consented to a specific optional use. Where we rely on consent, you may withdraw it by contacting us; withdrawal does not affect processing already carried out lawfully.
5. Service Providers and Disclosures
We disclose information to service providers only as needed for their assigned functions. They are contractually required to protect information and process it for the relevant service.
| Provider | Purpose and information | Known processing location |
|---|---|---|
| Google sign-in and account profile information | United States and other locations where Google operates | |
| Bright Data | Submit configured prompts to retrieve ChatGPT responses and citation data | Israel and provider infrastructure locations |
| OpenAI | Analyze prompt responses and source information to produce structured results | United States |
| Neon | Host account, workspace, prompt, and analysis data | United States, AWS US East 1 (Northern Virginia) |
| Railway | Host the Quova API that processes service requests | United States, US West |
| Vercel | Host the website and provide website analytics | United States and locations used by its infrastructure |
| Polar | Checkout, payment processing, subscription management | United States and its payment-processing locations |
| Resend | Send transactional email using your email address | United States and its email-delivery infrastructure |
| Sentry | Diagnose application errors when monitoring is enabled | United States or Germany, depending on the organization region |
Some providers use subprocessors or operate infrastructure in additional countries. Their processing is subject to their own terms and privacy notices. We do not otherwise disclose personal information to third parties unless you ask us to, the disclosure is required to provide the service, or the law permits or requires it.
6. International Transfers
Quova is operated from the Republic of Korea and uses providers that process information in the United States, Israel, and, for Sentry where enabled, the United States or Germany. Information is transferred through encrypted service connections when you create an account, use the service, make a payment, or request support. The information transferred is limited to the account, workspace, prompt, response, billing, or technical information needed for the provider’s role. We rely on the transfer grounds and safeguards available under applicable law, including contract necessity and provider data-protection terms where applicable.
For questions about an international transfer or how to exercise your rights, email support@quova.ai.
7. AI Processing
Quova sends configured prompts to Bright Data to retrieve answers from ChatGPT and sends relevant prompts, answers, and source information to OpenAI’s API for analysis. Quova’s analysis API requests use the provider’s non-persistent response setting. OpenAI states that API data is not used to train its models by default; provider retention for abuse monitoring may still apply. See the OpenAI API data controls.
AI answers and analysis may be incomplete or change over time. Quova’s reports are informational and do not make legal or similarly significant decisions about individual users.
8. Retention and Deletion
- Account, workspace, prompt, response, citation, and analysis data are retained while your account is active.
- After we confirm an account-deletion request, we delete associated service data within 30 days. To request deletion, contact support@quova.ai.
- Transaction and accounting records may be retained for the period required by applicable law, even after account deletion.
- Providers may retain limited records under their own retention schedules or where required by law.
9. Cookies and Analytics
The service uses essential session cookies needed for sign-in and account security. Vercel Analytics measures website usage. We do not use advertising cookies or cross-site advertising trackers. Blocking essential cookies in your browser may prevent sign-in or other account functions.
10. Security
We use safeguards appropriate to the nature of the information, including encrypted connections, access controls, and restricted access to service systems. No online service can guarantee absolute security. If a personal-information incident requires notice under applicable law, we will provide that notice through the required channels.
11. Your Rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or object to certain processing, and withdraw consent where processing relies on consent. You may also complain to the relevant data-protection authority. Send requests to support@quova.ai. We may verify your identity before acting and will respond within the period required by law.
We do not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against people for exercising privacy rights.
12. Children
Quova is intended for adults. You must be at least 18 years old, or the age of legal majority where you live if that age is higher. We do not knowingly collect personal information from children who do not meet this age requirement.
13. EU/EEA Representative
We are reviewing whether an EU/EEA representative must be appointed for our intended service scope. If the designation is required, we will appoint a representative and publish the representative’s contact details before relying on that designation. Until then, EU/EEA privacy requests may be sent to JJLabsio at support@quova.ai.
14. Changes and Contact
We may update this Policy to reflect changes in the service or legal requirements. We will update the effective date and provide notice of material changes as required by law.
JJLabsio (Quova AI)
211-4 Omok-ro, Yangcheon-gu, Seoul, Republic of Korea
support@quova.ai