Privacy Policy

• Account information: Your name, email address, and password (hashed) when you sign up.
• Agency and business data: Company name, logo, brand colors, and contact details you provide in settings.
• Client data: Names, emails, and contact information for your clients that you add to the platform.
• Proposal content: Documents, line items, prices, and other content you create.
• Usage data: Pages visited, features used, and timestamps - used to improve the product.

WaraQQa allows you to optionally connect your Gmail or Microsoft Outlook account via OAuth 2.0 so that proposals can be sent directly from your email address. When you connect an email account:

• We request only the send-mail permission - we never request access to read, search, delete, or modify your emails or contacts.
• OAuth access tokens are stored encrypted on our servers and are used solely to send outbound emails on your behalf when you explicitly trigger a send.
• We do not store the contents of emails sent or any email data beyond basic delivery metadata (recipient address, subject, timestamp).
• You can disconnect your email account at any time from Settings. Disconnecting immediately revokes our access and deletes the stored token.
• We do not share your email credentials or OAuth tokens with any third party.

Our use of Gmail data is limited to sending proposal emails you explicitly initiate. We do not use Gmail data for advertising, AI training, or any purpose other than sending the email you requested.

• To provide, operate, and improve the WaraQQa platform.
• To send proposals and quotes on your behalf when you request it.
• To send transactional emails (account confirmation, password reset).
• To track proposal views and client interactions on your behalf.
• To respond to support requests.

We do not sell your data. We do not use your data for advertising.

Your data is stored on Supabase-managed PostgreSQL databases hosted on secure cloud infrastructure. OAuth tokens are stored server-side and are never exposed to the browser. We use row-level security to ensure each user can only access their own data.

We use HTTPS for all data in transit. We follow industry-standard practices for access control, encryption, and monitoring.

We retain your account data for as long as your account is active. If you delete your account, your personal data and client data are deleted within 30 days. Email OAuth tokens are deleted immediately when you disconnect your email account.

We use the following third-party services to operate WaraQQa:

• Supabase: database and authentication
• Resend: transactional email delivery (when no email account is connected)
• Google LLC: Gmail API (only when you connect your Gmail account)
• Microsoft Corporation: Microsoft Graph API (only when you connect your Outlook account)

• Access: You can export your data at any time from the platform.
• Deletion: You can delete your account and all associated data from account settings.
• Correction: You can update your information at any time in settings.
• Revoke email access: Disconnect your Gmail or Outlook account at any time from Settings.

WaraQQa is a business tool intended for adults. We do not knowingly collect data from anyone under 18.

We may update this policy as the product evolves. We will notify you of significant changes via email or an in-app notice. Continued use of WaraQQa after changes constitutes acceptance of the updated policy.

For privacy questions or data requests, contact us at: hassan.sami19857@outlook.com