Soma QI
Privacy Policy
Last updated:
This policy explains how we handle information when you use Soma QI, including information from private app inspections.
1. Information we collect
We collect your email address and account information; the product URLs, stage, industry and optional context you submit; page content and technical evidence gathered during inspections; generated reports; and assessment usage counts, credit balances and credit activity.
If you choose to send feedback, we store your rating, feedback type, message and the page you were viewing. Feedback sent while signed in is linked to your account; visitors can also send feedback without signing in. We use it to improve Soma QI and investigate problems. Feedback is not public and is not sent to the assessment AI.
When payments launch, we will also record purchase details such as the pack, amount, currency, transaction reference and payment status. Purchases are not currently available.
2. Why we use this information
We use this information to sign you in, inspect your product, generate and save reports, show your history, enforce account allowances, restore credits after failures, prevent misuse and respond to support requests. Once payments launch, purchase information will also be used to confirm payments and maintain your credit balance.
3. Page content is processed by AI
Content and evidence from assessed pages are sent to an AI model through the Lovable AI service to generate findings and recommendations. This includes content from login-gated pages when you request a private inspection. The AI receives page evidence and the assessment context you provide.
Only submit products and content you are authorised to share. Use test data where possible. Avoid pages containing personal, financial, health or other confidential information unless you have the necessary permission for this processing. AI processing providers handle submitted information under their own terms and privacy policies.
4. Private inspection credentials
Session cookies, bearer tokens and custom authentication headers you supply are used only during the active crawl request to access your target site. They are not saved as credentials in your account, assessment records or browser storage, and are not included as credentials in reports or exports. Reports record only whether an authenticated inspection was requested and the authentication method used.
Use a test account or short-lived token, and revoke access when you no longer need it. A private page’s content may still contain sensitive information; that page content is handled as assessment evidence as described above.
5. Storage and service providers
Account information, saved assessments and credit records are stored on Lovable Cloud. Assessment history is restricted to the owning account. Your browser also keeps a device cache of reports and local task completion choices. Reports on the device can be uploaded to your account when you sign in.
Lovable Cloud and the AI processing providers help us operate the service. When payments launch, Paystack will process payments and share payment confirmation details with us; card details will be handled by Paystack rather than stored by Soma QI. These providers may process information outside your country.
6. Retention and deletion
We retain account details and saved reports while needed to provide your account and assessment history. Usage and credit records are retained as needed to operate allowances, resolve disputes, prevent abuse and meet legal obligations. The 24-hour result cache is a reuse window, not an automatic deletion period for saved reports.
You can request deletion of your account or reports by emailing us. We may need to verify your identity, and some records may need to be retained for legal, accounting or security reasons. Clearing your browser’s site data removes the device cache but does not delete cloud-saved records; request those separately.
7. Your choices and security
You choose whether to supply optional context or credentials for private inspections. You may contact us to request access to, correction of or deletion of your information. We use account access controls to protect stored records, but no online service can promise absolute security. Do not share account access or exported reports with people who should not see them.
8. Policy updates and contact
We will publish changes to this policy here with an updated date. For privacy questions, access requests or deletion requests, contact us at thenerveconsult@gmail.com.