Privacy Policy

Effective date: August 10, 2026. Version: privacy-1.1.

This policy describes how RGY, LLC handles information in connection with QAPs.net. The service is business-to-business software used by individuals in a work capacity; where privacy law nonetheless grants those individuals rights, this policy and our processes are meant to honor them.

What we collect. Account and identity data (name, work email, organization, role) processed through our authentication provider; customer content our users submit (deal, site, application, and document data); usage and device data (log records, feature usage, IP address); and support communications.

How we use it. To provide, secure, and support the service; to operate accounts and organizations; to bill where applicable; to notify users of service and terms changes; and to produce aggregated, de-identified usage statistics that cannot identify a customer, user, deal, parcel, or application. We do not sell personal information, do not use customer confidential deal data to train models, and do not use customer content for advertising.

Subprocessors. We use service providers to run the platform: Clerk, Inc. (authentication and user management); Supabase, Inc. (database hosting and document storage); and Vercel, Inc. (application hosting and content delivery). Each processes data only to provide its service to us. The current list is available on request; we will update this policy when it changes materially.

Where data is stored. Service data, including customer content and uploaded documents, is stored in the United States (AWS us-east-1, North Virginia). If you access the service from outside the United States, your information is processed in the United States.

Cookies and tracking. The service uses only cookies essential to operate it, principally authentication, session, and security cookies associated with our authentication provider. We use no analytics, advertising, or cross-site tracking, and fonts are self-hosted, so pages served from qaps.net do not cause your browser to contact font or analytics networks.

Authentication services. Sign-in and account management are provided by Clerk and take place on qaps.net; you are not redirected to a third-party sign-in page. During sign-in and session management, your browser communicates with Clerk's authentication API and image service, whose infrastructure sets security cookies used for bot management and rate limiting. Sign-in is by email only; no social sign-in providers are enabled.

Other disclosures. We may disclose information when legally required (for example under subpoena or court order), to protect the security of the service, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to the transferred data until replaced with notice. Neither is a sale of personal information.

Retention and deletion. Customer content is retained while the customer's account is active and is deleted within ninety (90) days after termination, or earlier on the organization administrator's written request. Archival backup copies are taken daily and retained for seven (7) days. Records we must retain for legal, accounting, or terms-acceptance evidence purposes are kept as required and remain protected.

Minimum age. The service is for business users aged 18 or older and is not directed to children.

Security and incidents. We maintain commercially reasonable administrative and technical safeguards and will notify affected customers without undue delay after discovering unauthorized access to their data.

Your choices. Users may access and correct their account information through the app, and may request deletion of their account information by contacting us (terms-acceptance evidence is retained in anonymized form as required). Organization administrators control their organization's content and user membership, and only they may request deletion of organization content.

Your rights. Depending on where you live, you may have legal rights to access, correct, delete, or receive a copy of your personal information. Submit requests to the contact below; we verify requests against your account, respond within forty-five (45) days unless the law requires sooner, and you may appeal a decision by replying to our response.

Contact. garrett@yarmowich.com; RGY, LLC, 3224 Ridgely Drive, Vestavia Hills, AL 35243.