Quali AI Privacy Policy

Overview

Quali AI is operated by Quali Compliance. This policy explains how we handle information collected through our public website, account authentication, and controlled product access workflows.

The public website, marketing forms, and Google sign-in flow are not intended for protected health information. Do not submit resident, patient, facility clinical record, or other PHI through these public surfaces.

Information We Collect

We may collect the following categories of information:

• Contact information you provide, such as name, work email, organization, and signup details.
• Account information needed to create, secure, and administer Quali AI access.
• Google sign-in information, such as your Google account identifier, email address, email verification status, name, and profile image if Google provides it.
• Technical information, such as device, browser, IP address, access timestamps, and security logs.
• Product usage information needed to operate, secure, debug, and improve authorized product access.

Google Sign-In

If you use Google to sign in, we use Google as an identity provider. We use the information Google returns to authenticate your account, link your identity to an authorized Quali AI account, enforce access controls, and protect the service from unauthorized access.

For sign-in, Quali AI is limited to basic identity scopes such as openid, email, and profile. We do not request access to Gmail, Google Drive, Google Calendar, or Google Workspace administrator data for this authentication flow.

How We Use Information

• Provide, secure, and administer Quali AI accounts and authorized product access.
• Respond to requests, demos, support questions, and operational communications.
• Authenticate users, enforce access controls, and maintain audit and security records.
• Improve website performance, product reliability, and user experience.
• Comply with legal, contractual, security, and fraud-prevention obligations.

PHI and Healthcare Data

Quali AI is being built for healthcare compliance workflows, but the public website and OAuth branding surfaces are not clinical data intake channels. Production workflows that involve PHI require the appropriate written agreements, customer authorization, access controls, audit logging, retention controls, and vendor review before PHI is submitted or processed.

How We Share Information

We do not sell personal information. We may share information with service providers that help us host, secure, authenticate, operate, or support Quali AI; with a customer organization that authorizes your account; or when required for legal, security, compliance, or business-transfer reasons.

Security and Retention

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. We retain information for as long as needed to provide the service, meet legal or contractual obligations, maintain security records, resolve disputes, and enforce agreements.

Your Choices

You may contact us to request access, correction, deletion, or restriction of personal information, subject to applicable law, security obligations, and any customer agreement that governs your account.

Contact

For privacy questions, contact us at support@qualicompliance.com.