QuerySafe Compass Privacy Policy

Effective and last updated: 14 September 2026

Data QuerySafe processes

• Prompt text and up to the most recent visible user messages, processed locally for classification and model recommendations.
• Submitted prompt context sent to QuerySafe Cloud when cloud analysis is enabled, and prompt context sent when you explicitly request AI enhancement.
• Email addresses submitted through the Compass launch waitlist, used to provide launch access and important product updates.
• Account details you provide, including email address, display name, authentication provider, plan, permissions, and usage limits.
• Privacy-safe product analytics such as platform, recommendation tier, selected model, relative usage savings, feature acceptance, and enhancement feedback.
• Sanitized reliability diagnostics when Compass encounters an error, including the affected component, error type and message, stack trace, application version, occurrence time, page origin or API path, and pseudonymous account or guest identifier.
• Only if you turn on “Save submitted prompts for product review”: the text of prompts you subsequently submit (up to 10,000 characters), their platform, time, recommendation, and account or guest-profile identifier. QuerySafe admins can read these records. Unsubmitted drafts and prior messages read separately from the page are not added; text you put into the submitted prompt itself is included.
• A random installation identifier for enforcing guest quotas. The server stores a one-way hash of this identifier.

Data QuerySafe does not collect

QuerySafe does not save unsubmitted drafts or add prior messages read separately from the page to prompt history. Error reports exclude request and response bodies, prompt content, authorization headers, cookies, passwords, and tokens; known personal data and secrets in diagnostic text are masked before storage. When submitted-prompt product review is enabled, eligible submitted prompts may be stored for up to 30 days; users can disable new collection and delete previously saved prompts in extension settings. QuerySafe does not store passwords in readable form or Google access and ID tokens. Sensitive-looking credentials detected locally are not sent to QuerySafe Cloud or saved in prompt history. The extension does not run in incognito mode.

How data is used

Data is used only to manage the launch waitlist, send Compass launch updates, provide prompt classification, model recommendations, AI enhancement, account authentication, quota enforcement, aggregate usage analytics, feedback analysis, disclosed and user-controllable submitted-prompt review to improve the product, security, and service reliability. QuerySafe does not sell personal data or use prompt content for advertising.

Sharing and service providers

QuerySafe uses Google Cloud infrastructure and Google AI services to operate the hosted API and optional AI enhancement. QuerySafe uses Hostinger Email to deliver waitlist and product-update emails. Data may be processed by these providers solely to deliver those features and under their applicable service terms.

Storage, security, and retention

Extension preferences, the latest local original and enhanced prompt, local recommendations, and local analytics are stored in your Chrome profile. Waitlist emails, account data, analytics data, sanitized error diagnostics, and optionally consented submitted prompts are stored in QuerySafe's production database. Prompt-history records expire after 30 days; error diagnostics expire after 90 days. Expired records are removed during routine database access. Passwords are salted and hashed. Other data is kept while needed to operate the service and meet security or legal obligations.

Your controls

You can disable QuerySafe Cloud, conversation awareness, submitted-prompt history, or the extension itself from extension settings. Turning off prompt history stops new collection; the “Delete my saved prompts” control removes previously saved prompts for your current account or guest browser profile. You can remove local extension data by uninstalling the extension or clearing its site data. Every waitlist email includes an unsubscribe link. To request access, correction, or deletion of other server-side data, contact hello@querysafe.ai.

Changes and contact

Material changes will be reflected by updating this page and its effective date. Questions or privacy requests can be sent to hello@querysafe.ai.