1. Who we are
Qintr ("we", "us", "our") is a testimonial collection and display platform operated by Prodocast Technologies Private Limited, based in Bangalore, India. You can reach us at privacy@qintr.com.
2. What data we collect
Account & workspace data
When you sign up, we collect your email address, password (stored hashed, never in plain text), and optionally your name and avatar. If you sign up with Google, we receive your name, email, and profile photo from Google. Your workspace stores its name, public handle, logo, and brand color.
Testimonial data (collected on your behalf)
When someone submits a testimonial through your collection form, we collect what they choose to provide: their name, title, company, a headshot photo, a written response or a video recording, a star rating, and their consent to be featured. This data is collected and processed on your instructions — you are the data controller for it, and we are the processor (see our DPA).
Billing data
Paid plans are set up manually with our support team, and subscriptions are processed by Stripe. We never see or store your card details — Stripe handles that as a PCI DSS Level 1 provider.
Automatically collected data
Our hosting and infrastructure providers may collect standard web access logs, including IP address, browser type, and pages visited, for security and performance monitoring.
Form security
We use automated rate limiting, input validation, and bot-detection on public forms (the signup form and testimonial collection forms) to prevent spam and abuse. These measures run server-side and do not set tracking or advertising cookies.
3. How we use your data
- To operate your account and workspace, and deliver the product you signed up for
- To send transactional email — verification, notifications about new testimonials, billing communications
- To provide support when you contact us
- To prevent abuse of our forms and platform
We do not use your data for advertising, and we do not sell it to anyone.
4. Third parties we work with
We share data with the following vendors only as necessary to operate Qintr:
- Railway — application hosting and database (United States)
- Cloudflare — storage for uploaded photos and videos (R2) and this marketing site
- Resend — transactional email delivery
- Stripe — payment processing for paid plans
See our DPA for the full sub-processor list. We do not share your data with anyone else.
5. Data storage and security
Your account and workspace data is stored in a PostgreSQL database hosted on Railway. Uploaded photos and videos are stored on Cloudflare R2. All data is transmitted over HTTPS. Every workspace's data is isolated from every other workspace at the database level — see our Security page for detail.
6. Your rights
Regardless of where you're located, you have the right to access, deletion, correction, portability, and objection. Email privacy@qintr.com. We'll respond within 30 days.
7. Cookies
The application uses strictly necessary cookies only: a session cookie to keep you signed in, and a CSRF cookie to protect forms. This marketing site does not set advertising cookies.
8. Data retention
We retain your account and workspace data for as long as your account is active. If you delete your account or request deletion, we remove your data within 30 days, except where we're required to retain records for legal or accounting purposes.
9. International transfers
Qintr is operated from India. Our infrastructure providers (Railway, Cloudflare, Resend, Stripe) may process data in the United States or European Union. These providers maintain Standard Contractual Clauses and other appropriate safeguards for international transfers.
10. Children's privacy
Qintr is not directed at children under 13 (or 16 in the EU). We don't knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date and, for significant changes, notify you by email.
12. Contact
Questions: privacy@qintr.com
General: hello@qintr.com