Quoria Privacy Policy

Last updated: 7 October 2026

1. Introduction

Through this Privacy Policy, Lucas Gabriel Cuppuleri, owner of Quoria ("Quoria", "we" or "us"), informs you of what personal data we collect about you, why we process it, with whom we share it and how you can exercise your rights under Argentine Personal Data Protection Law No. 25,326 and its regulations and, where applicable, the European Union General Data Protection Regulation (GDPR).

This Policy applies to the quoria.app website, its applications and related services (together, the "Services"). Quoria is a teamwork platform that brings together meetings and calls, chat, email, calendar, task management and an artificial intelligence assistant.

For the purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person.

If you provide us with personal data of third parties (for example, when inviting co-workers to a workspace), you must make sure those people are aware of this Policy and that you are entitled to share their data.

2. Data controller

Quoria is the controller of the personal data processing described in this Policy. If you have any question about data protection, you can contact us at:

Lucas Gabriel Cuppuleri
CUIL/CUIT No. 20-40473595-1
Burzaco, Province of Buenos Aires
Argentina
support@quoria.app

When an organization uses the Services for its team, that organization is the controller of the content of its workspace (messages, meetings, tasks and files), and Quoria acts as a processor on its instructions. For the personal account data of each user, Quoria is the controller.

3. Personal data we collect

We mainly process the personal data you give us when you sign up and use the Services, and the data generated by that use. In particular:

Account data

• name, email address and password (stored as a hash, never in plain text), or the data needed to sign in with Google or Microsoft;
• profile photo, language, time zone, and appearance and notification preferences;
• optional details you choose to fill in: country, birthday (other members only see the day and month), a short description and your favourite song;
• your online status and when you were last online (not updated if you choose to appear "invisible").

Workspace content

• chat messages, reactions, voice messages and their transcription, files, notes and comments;
• tasks, their status and dates, and the 1-to-5 ratings administrators give when reviewing them ("reputation"), visible only to the person rated and to the workspace administrators;
• meetings and calls: participants, times and, if transcription is turned on in a meeting, the transcribed content, who spoke and the AI-generated summary;
• conversations with the AI assistant and the actions requested.

Email

• if you use a Quoria mailbox or connect your own (IMAP/SMTP), the emails you receive and send, in order to show them to you. The mailbox password is stored encrypted, and mailboxes are visible only to their owner.

External calendars

• if you import a Google, Outlook or iCloud calendar, the subscription link (stored encrypted) and its events, as well as any private notes you add, visible only to you.

Technical data

• IP address and browser type of each session, to keep you signed in and protect the account;
• a log of relevant actions in each workspace (for example, role changes or removed members), with the IP address, for security purposes;
• if you turn on notifications, the data your browser gives us to deliver them.

Quoria does not record the audio or video of calls (if transcription is on, only the text is kept), does not use third-party advertising or tracking tools, does not sell personal data and does not use users' content to train artificial intelligence models, whether its own or its providers'.

4. Purposes and legal bases

We use the personal data collected mainly to provide the Services, and in particular:

• to let the members of a workspace communicate, organize tasks, read their email and calendar, and use the assistant;
• to offer the artificial intelligence features that you or your organization turn on: real-time transcription, captions and translation, meeting summaries, task suggestions, writing and translating text, and the assistant;
• to send you the communications needed to use the Services (account verification, invitations and reminders) and the notifications you have turned on;
• to keep the Services secure, prevent misuse and comply with our legal obligations.

The legal bases for processing are the performance of the contract with you or your organization, our legitimate interest in keeping the Services secure and working properly and, where applicable, your consent (for example, for notifications or the transcription of your voice). Consent can be withdrawn at any time, without affecting the lawfulness of processing carried out before.

5. Cookies and similar technologies

We only use the cookies strictly necessary for the Services to work:

• a session cookie, which keeps you signed in for up to 30 days;
• a cookie that stores the language you chose.

The browser also stores some usage preferences locally (theme, task view, sounds and captions). We do not use advertising or analytics cookies. You can set your browser to refuse or delete cookies; however, without the session cookie you will not be able to sign in to the Services.

6. Sharing personal data with third parties

To provide the Services we use the following providers, which process personal data on our behalf, only for the purposes stated and under agreements that prevent them from using it for their own purposes:

We may also disclose personal data to administrative or judicial authorities when required by law or court order.

7. International data transfers

Some of the providers above process personal data outside Argentina, in particular in Brazil (where our server is located) and in the United States. In those cases, the transfer is made with the safeguards required by section 12 of Law No. 25,326, through contractual clauses that oblige the recipient to give the data an adequate level of protection.

8. Retention periods

We keep personal data for as long as needed for the purposes described in this Policy:

• the content of a workspace is kept while that workspace exists;
• account data is kept while the account is active;
• if you ask us to delete your account, we will delete it together with your personal data within 30 days. Content you shared in a workspace (for example, messages in a channel) belongs to that workspace, and its administrator decides whether to keep it;
• if you leave a workspace, you will no longer have access to it, but the content you shared remains part of that workspace.

Once the data is no longer needed, it will be deleted or anonymized, unless a legal obligation requires keeping it longer.

9. Data security

We take appropriate technical and organizational measures to ensure the confidentiality, integrity and availability of personal data and to protect it against unauthorized access, loss or alteration. Among them: all connections are encrypted with HTTPS, sign-in passwords are stored with a secure hashing algorithm, email credentials and calendar links are stored encrypted, and each workspace is isolated from the others, so that each user only accesses the information that corresponds to their role and the channels they belong to.

No system is completely infallible. If a security incident affects your personal data, we will notify you as required by applicable law.

10. Minors

The Services are intended for work and are not aimed at people under 16. If we learn that an account belongs to someone under that age, we will delete it.

11. Your rights

Under applicable law, you have the right to:

• access your personal data;
• rectify and update it;
• request its deletion;
• object to certain processing;
• receive your data in a structured format to transfer it to another controller (portability);
• withdraw your consent at any time.

To exercise these rights, you can contact us at the address in Section 2. We may ask you to prove your identity. Access requests will be answered within 10 calendar days, and rectification, update or deletion requests within 5 business days, as set out in Law No. 25,326. The right of access is free of charge and may be exercised at intervals of no less than six months, unless a legitimate interest is shown.

Many of these actions can be done directly in the Services: editing your profile, deleting messages and files, turning off voice transcription, turning off notifications or leaving a workspace.

THE AGENCY FOR ACCESS TO PUBLIC INFORMATION (Agencia de Acceso a la Información Pública), as the Supervisory Authority of Law No. 25,326, is empowered to handle complaints and claims filed by anyone whose rights are affected by a breach of the rules in force on personal data protection. If you live in the European Union, you can also lodge a complaint with the competent data protection authority of your country.

12. Changes to this Policy

We may change this Policy to reflect changes in the Services or in applicable law. The version in force will always be the one published at quoria.app/privacidad. In the event of material changes, we will notify you through the Services or by email before they take effect.

13. Governing law

This Policy is governed by the laws of Argentina.