Version 2026-10-27
This text is pending final review by our legal team. The version and acceptance date recorded for your account are already binding.
This policy explains what personal data Quixote processes, why, and what rights you have. We are the data controller for the processing described here.
Account data (email, name, profile preferences), usage and billing records, the content you submit to the platform, and technical data such as IP address and browser details needed to operate and secure the service.
To provide the service you asked for, to bill you, to keep the platform secure, to meet legal obligations, and — only with your consent — to send you product news.
Our database and object storage run in the European Union. Depending on the model you choose, prompts may be processed by third-party providers; the EU-only routing mode restricts this to providers inside the EU and refuses a request rather than sending it elsewhere.
You can configure which categories of personal data are masked before text reaches a model, and Private Mode runs a session that persists no content at all.
Account and billing records are kept while your account is active and for as long as the law requires afterwards. Conversations and documents are kept until you delete them or close your account.
We use third parties for hosting, payments, model inference, email delivery and product analytics. Each acts under a data processing agreement.
You may access, correct, export or erase your personal data, object to processing, and withdraw any consent you have given. Withdrawing consent does not affect processing carried out before the withdrawal.
We keep an append-only record of every acceptance and withdrawal, including the document version, the date and the origin of the request, so that we can demonstrate the basis on which we process your data.
If you connect Google Drive, Quixote asks Google only for access to the files you choose in Google's file picker or ask Quixote to create in your Drive, and for your Google email address, which is shown as the connected account. It cannot see the rest of your Drive. The files you choose are copied into your Quixote Drive and handled like any document you upload, which includes sending their text to the model you use when you work with them (section 3). The authorization Google issues is stored encrypted and used only for these actions. Disconnecting Google Drive revokes it at Google and deletes it, and you can also remove Quixote from your Google account at any time. If you connect Google Calendar, Google Docs or Google Analytics, Quixote's assistant can read and act on that account only in the chat, when you name that app in your message: for example, list or create events, read, create or edit a document, or run an Analytics report. Every action that creates, changes or deletes data is shown to you and runs only after you confirm it. What the assistant reads is used to answer your request: it is sent to the model you use, as described in section 3, and the answer is kept in the conversation like any other until you delete it (section 5). The authorization Google issues is stored encrypted. Disconnecting the service deletes it, and you can also remove Quixote from your Google account at any time. We do not sell data received from Google, do not use it for advertising, do not use it to develop or train generalised AI or machine-learning models, and no one reads it except with your permission, for security, or to comply with the law. Quixote's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. If you sign in with Google, we receive only your name, email address and profile picture, to create and identify your account.