Privacy Policy

Draft — not yet reviewed. This page is a placeholder. It has not been reviewed by legal counsel or approved by the owner, and must not be relied on until it is.

This placeholder describes the intended privacy posture of Qafila. It is not a final, reviewed policy.

Self-host

When self-hosted, Qafila runs entirely on your own hardware. We do not collect telemetry, analytics, or usage data from self-hosted instances. License verification is offline — the app does not phone home.

SaaS

When using the hosted SaaS product, your account data (email, uploaded/downloaded media, transcripts, and any BYOK cloud AI keys you add) is stored in a tenant isolated from other accounts. BYOK keys are encrypted at rest and are not shared across tenants.

What goes to cloud AI providers

If you choose a cloud AI provider (for transcription, translation, or analysis), only the transcript text for that step is sent to it — never the source URL, title, or file metadata.

Payment data

Checkout is intended to run through Stripe. We do not store card numbers; Stripe processes and stores payment details directly.

This page will be replaced with a reviewed policy — including data retention, deletion requests, and applicable data-protection law — before launch.