Privacy Policy

1. Who we are

Quefly Enterprises LLP ("Quefly", "we", "us") is a limited liability partnership registered with the Ministry of Corporate Affairs, Government of India (LLPIN ACX-1059), with its registered office at Plot 1502, Madhusudha, First Floor, Hazari Lane, Purighat, Cuttack, Odisha 753009, India.

We are the data fiduciary (controller) for the personal data described in this policy.

2. What this policy covers

This policy applies to quefly.com (the "Site") and to any application, product, or online service operated by Quefly that links to this policy (together, the "Services"). If a specific Service publishes its own privacy notice, that notice applies to it and takes precedence for that Service.

It does not cover systems we build or operate for clients under contract. There, the client is the data fiduciary, our role and obligations are defined in the written agreement for that project, and the client’s own privacy policy applies to end users.

3. Information we collect

Information you provide. When you contact us, book a meeting, or apply for a role, we receive what you choose to share — typically your name, email address, and the contents of your message or CV. When you create an account in one of our Services, we collect the registration details that Service asks for (such as name, email address, phone number, and organization) and the content you submit while using it.

Information collected automatically. Our infrastructure processes technical data needed to run the Services securely: IP address, browser and device information, request logs, and — within signed-in Services — usage events such as sign-in times and actions relevant to security and audit. The Site itself runs no analytics, advertising, or tracking scripts.

Information from third parties. If you sign in to a Service through an identity provider (for example your company’s SSO, or Google), we receive the profile details that provider is configured to share — typically your name, email address, and organization.

4. Cookies and local storage

The Site stores one preference in your browser’s local storage: your light/dark theme choice. It never leaves your device.

Signed-in Services use strictly necessary cookies or tokens to keep your session working and secure (for example authentication and CSRF protection). We do not use advertising or cross-site tracking cookies in any Service.

5. How we use information

We use personal data to provide and operate the Services; to authenticate you and keep accounts secure; to respond to inquiries and support requests; to evaluate job applications; to maintain security, prevent abuse, and keep audit records; to improve the Services; and to comply with legal obligations.

We do not sell personal data, we do not share it for third-party advertising, and we do not use it for profiling or automated decision-making that produces legal or similarly significant effects.

6. Who processes data on our behalf

We use a small set of infrastructure providers as processors: Cloudflare (hosting, CDN, and security), cloud platforms on which Services run (which may include AWS, Google Cloud, Microsoft Azure, Oracle Cloud, DigitalOcean, and Hetzner, plus our own managed servers), and Google Workspace for email and scheduling. Pages that embed Google Maps or Google Fonts cause your browser to connect to Google under Google’s own privacy policy.

Processors act under our instructions and appropriate contractual safeguards. Beyond processors, we disclose personal data only if required by law, to protect the rights and safety of users and the public, or as part of a corporate transaction — never for sale.

7. Security

Security is our profession. Data in transit is encrypted, access follows least privilege with short-lived credentials, administrative actions are logged, and our infrastructure is monitored. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authorities as the law requires.

Security researchers can report vulnerabilities to security@quefly.com — we read and answer every report.

8. Retention

We keep personal data only as long as needed for the purpose it was collected: correspondence for as long as the matter it relates to remains active; job applications while a role remains relevant, unless you ask us to delete them sooner; account data for the life of the account plus a short wind-down period; security and audit logs for a limited period appropriate to their purpose; and anything we must retain longer to meet legal obligations.

9. Where data lives

Our infrastructure runs in India, the United States, and Europe. Where personal data crosses borders, we transfer it only with appropriate safeguards consistent with applicable law, including India’s Digital Personal Data Protection Act, 2023 and, where it applies, the EU/UK GDPR.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, have it deleted, receive a copy in a portable format, withdraw consent, object to certain processing, and complain to a supervisory authority — in India, the Data Protection Board of India.

To exercise any of these rights, or to raise a grievance under the DPDP Act, write to hello@quefly.com. We respond to every request, and there is a human on the other end.

11. Children

The Services are built for businesses and professionals and are not directed to children. We do not knowingly collect personal data from anyone under 18; if you believe we have, tell us and we will delete it.

12. Changes to this policy

If we change this policy, we will post the updated version here with a new "last updated" date, and highlight material changes on the Site or within the affected Service.

13. Contact

Privacy questions, rights requests, and grievances: hello@quefly.com — or by post to Quefly Enterprises LLP, Plot 1502, Madhusudha, First Floor, Hazari Lane, Purighat, Cuttack, Odisha 753009, India.