Last updated: May 2026
Account information: When you sign up, we collect your email address, name, and password (hashed). If you use Google sign-in, we receive your name and email from Google.
Data you upload: Files (CSV, JSON, Excel) you upload are stored in our secure storage. API credentials you save are encrypted with AES-256-GCM.
Usage data: We collect anonymized usage metrics (page views, feature usage) to improve the product. We do not sell this data.
We use your data to: provide and improve the Quadesto service, process payments via Stripe, send essential service communications, and respond to support requests.
We do not use your uploaded financial data for any purpose other than providing the visualization service you requested. We do not train AI models on your data.
Your data is stored on servers located in the European Union (Hetzner, Germany). All data is encrypted in transit (TLS 1.3) and sensitive credentials are encrypted at rest (AES-256-GCM).
Database access is protected by row-level security policies ensuring users can only access their own data.
We use the following third-party services:
• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• Anthropic (Claude) — AI analysis. Your data prompts are processed by Anthropic's API. Anthropic does not use API inputs for training.
• OpenAI — embedding generation for search. Only column names and metadata are sent, not row data.
• Supabase — database and authentication (self-hosted).
• Umami — privacy-focused, cookieless product analytics and session replay, self-hosted by us in the EU (see section 8).
Your data is retained for as long as your account is active. If you delete your account, all associated data (workspaces, data sources, credentials, chat history) is permanently deleted within 30 days.
Under GDPR (as our servers are in the EU), you have the right to: access your data, correct inaccurate data, delete your data, export your data, and withdraw consent.
To exercise these rights, contact [email protected].
We use essential cookies for authentication (session management). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
We use Umami — a privacy-focused, cookieless analytics tool we self-host in the EU — to understand how Quadesto is used. It sets no cookies and does not track you across other websites.
To diagnose usability problems we also record anonymised session replays on our marketing pages and the signed-in app. Replays mask all form inputs, email addresses and payment fields by default, and additionally never capture your AI chat or uploaded data tables. We do not record the public embed or view pages that may display financial data. This is carried out on the basis of our legitimate interest in improving the service; to opt out, contact [email protected].
For privacy-related inquiries: [email protected]