GDPR / Data Rights
Qootra LLC ("Qootra," "we," "us," or "our") respects the privacy rights of everyone who uses our Services. This page explains how the General Data Protection Regulation ("GDPR") and similar laws apply to Qootra, and how you can exercise your rights over your personal information. It should be read together with our Privacy Policy, which explains how we process personal information in general.
Table of Contents
1. Overview
Qootra respects privacy rights and provides users with ways to access, correct, delete, export, restrict, object to, or otherwise control certain personal information. This page summarizes those rights and explains how to use them. It should be read together with our Privacy Policy, which describes what we collect and why.
2. Who This Page Applies To
This page may apply to you if you are located in, or your personal information is protected by privacy laws in, regions such as:
• The European Union
• The European Economic Area
• The United Kingdom
• Switzerland
• Other jurisdictions with similar privacy or data protection laws
Your specific rights may vary depending on your location, the type of data involved, your relationship with Qootra, and applicable law.
Qootra may act as a controller or a processor depending on the type of data and how the data is used.
3. Qootra's Role: Controller and Processor
Qootra may act as a controller or a processor depending on the type of data and how the data is used.
3.1 Qootra as Controller
Qootra generally acts as a controller when we determine how and why personal information is processed for our own business purposes. This may include:
• Account registration data
• Billing and subscription data
• Website and marketing data
• Support communications
• Security and fraud-prevention data
• Product usage and analytics data
• Legal and compliance records
3.2 Qootra as Processor or Service Provider
Qootra may act as a processor or service provider when we process data on behalf of a customer, workspace owner, agency, or business user. This may include:
• Workspace content and client workspace data
• Connected social platform data
• Scheduled posts, drafts, and uploaded media
• Comments, mentions, messages, or inbox data, where enabled
• Analytics and performance data
• Automation settings
• Orcai workspace context and AI-generated workspace outputs
Where Qootra acts as a processor, the customer, workspace owner, or agency may be responsible for responding to certain privacy requests from their own users, clients, employees, or audience members.
4. Legal Bases for Processing
Where required by applicable law, Qootra relies on one or more legal bases to process personal information. These may include:
4.1 Contract
4.2 Consent
4.3 Legitimate Interests
4.4 Legal Obligation
4.5 Vital Interests or Public Interest
5. Your Privacy Rights
5.1 Right of Access
5.2 Right to Correction
5.3 Right to Deletion
5.4 Right to Restriction
5.5 Right to Object
5.6 Right to Data Portability
5.7 Right to Withdraw Consent
5.9 Right Not to Be Discriminated Against
5.8 Right to Opt Out of Marketing
6. How to Submit a Request
7. Verification and Response Timeline
We handle rights requests free of charge and respond to verified requests within one month of receipt, as the GDPR requires. Where the CCPA applies to a California consumer, we respond within the 45-day period that law provides. If a request is complex or involves multiple systems or workspaces, we may take additional time where permitted by law, and we will notify you if required.
8. Data Retention
Qootra retains personal information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud or abuse, and operate our business. Retention periods may vary depending on the type of data, the purpose of processing, account and workspace status, legal or regulatory requirements, security and fraud-prevention needs, and platform-specific requirements.
Deleted information may remain in encrypted backups for up to 35 days, matching our rolling backup cycle, before being securely deleted, overwritten, or isolated from active systems.
For details, see our Privacy Policy and Data Deletion Policy.
9. International Data Transfers
Qootra LLC is based in the United States. If you access Qootra from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where Qootra or its service providers operate.
Where required by applicable law, Qootra uses appropriate safeguards for international transfers of personal information. These may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum where applicable, contractual safeguards with service providers, and other lawful transfer mechanisms recognized by applicable law.
You may contact us at privacy@qootra.com to request more information about relevant transfer safeguards.
10. Subprocessors and Service Providers
Qootra uses service providers and subprocessors to operate, secure, and improve the service. These may include providers for hosting and infrastructure, database services, caching and performance, payments and billing, email delivery, AI features, analytics and product monitoring, security and abuse prevention, customer support, and connected social platform integrations.
Our current providers include Cloudflare, Railway, Neon, Redis Cloud, Upstash, Resend, Polar, OpenRouter, PostHog, Sentry, and Axiom, plus the supported social platforms you choose to connect.
Service providers and subprocessors may process information only as needed to provide services to Qootra or to you, subject to applicable agreements and safeguards. We will publish a dedicated subprocessors page as our provider list evolves.
11. Data Processing Addendum
For eligible business or agency customers, Qootra may provide or enter into a Data Processing Addendum or similar data protection agreement where required.
If your organization requires a Data Processing Addendum, contact us at legal@qootra.com or privacy@qootra.com.
12. Automated Decision-Making
Qootra uses AI features, including Orcai, to help users generate suggestions, analyze information, summarize insights, and improve workflows.
Qootra does not use AI features to make decisions that produce legal or similarly significant effects about users without human involvement. AI-generated outputs are suggestions only. Users remain responsible for reviewing, approving, and using AI-generated outputs.
For more information, please see our AI Usage Policy at /legal/ai-usage-policy.
13. Complaints
If you have concerns about how Qootra handles personal information, please contact us first so we can try to resolve the issue.
If you are in the EU or UK and believe we have not handled your personal information properly, you have the right to lodge a complaint with your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office at ico.org.uk.
Contact us at privacy@qootra.com.
14. Contact Us
Qootra LLC
1401 Pennsylvania Ave, Suite 105 #3189
Wilmington, DE 19806, United States
