Privacy Policy

Last updated: June 6, 2026

This Privacy Policy explains how Quest2Offer processes your personal data. The data controller responsible for your personal data is DENIS ILIN PR BEOGRAD, a sole proprietor (preduzetnik) registered in the Republic of Serbia · Registration number (matični broj): 68549639 · Tax ID (PIB): 115679445 · Registered seat: Čika-Ljubina 12/3, 11102 Beograd, Serbia · Email: support@quest2offer.ai.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority.

1. Information We Collect

When you use Quest2Offer, we collect the following categories of information:

• Account information: name, email address, and profile photo provided via Google OAuth authentication.
• Profile data: resume text, work experience, skills, education, career goals, and other information you voluntarily provide.
• Usage data: pages visited, features used, session duration, device type, browser type, IP address, and interaction patterns.
• Content data: text, audio, and files you submit for transcription, translation, course generation, or career consulting.
• Payment data: cryptocurrency wallet addresses and transaction records related to your subscription. For card payments, billing information is processed by our payment provider Paddle; we do not store your card numbers or full payment credentials.

2. How We Use Your Information

We use your information for the following purposes:

• Providing and operating the Platform services (transcription, translation, AI consulting, course generation, interview preparation).
• Processing AI requests using your data as input to large language models and other AI systems.
• Processing payments and managing subscriptions.
• Improving the Platform, fixing bugs, and developing new features.
• Communicating with you about your account, subscription, or support requests.
• Enforcing our Terms of Service and Acceptable Use Policy.

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following GDPR legal bases: performance of a contract — to provide the Service you request, including AI processing of the content you submit; legitimate interests — to secure, maintain, and improve the Platform and to prevent fraud and abuse; consent — for any optional processing where we ask for it, which you may withdraw at any time; and compliance with a legal obligation — e.g. retaining tax and accounting records.

3. AI Data Processing

Your content (resume text, career information, audio, chat messages) may be processed by third-party AI models to provide Platform features. We do not use your personal data to train AI models. AI processing is performed solely to deliver the requested service output.

AI-generated responses are not stored permanently unless required for service functionality (e.g., chat history, generated courses).

4. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers (sub-processors): third parties that process data on our behalf to operate the Platform:
  • Google (Ireland / USA) — sign-in via Google OAuth and delivery of transactional email;
  • RunPod (USA) — GPU compute on which our self-hosted AI models process your content (resume text, audio, chat messages) to produce transcription, translation, and AI output;
  • Paddle (United Kingdom) — our Merchant of Record for card payments, handling billing, tax, and payment data;
  • cloud infrastructure and hosting providers that host our servers, databases, and file storage.
  We run our own AI models on rented GPU infrastructure rather than sending your content to external AI APIs, and we do not share your data with advertising networks.
• Legal obligations: when required by law, regulation, or legal process.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).

Usage analytics and aggregated, anonymized data may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of your personal data.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data.
• Export: request your data in a portable format.
• Objection: object to certain processing of your data.

To exercise any of these rights, contact us at support@quest2offer.ai.

7. Cookies and Tracking

We use essential cookies to maintain your authentication session and store your language preferences. We do not use third-party advertising cookies or tracking pixels.

We may use anonymous analytics tools to understand Platform usage patterns. These tools do not collect personally identifiable information.

8. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (TLS), secure authentication, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Platform is not intended for users under the age of 16. By creating an account, you represent that you are at least 16 years old. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly — please contact support@quest2offer.ai.

10. International Data Transfers

Your data may be processed in countries other than your country of residence, including the United States, where some of our service providers operate. These countries may not offer the same level of data protection as your home country.

Where we transfer the personal data of users in the European Economic Area, the United Kingdom, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs), with the relevant service providers. You may request information about these safeguards at support@quest2offer.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries, contact us at: support@quest2offer.ai