Privacy Policy

1. Controller

Klickrendite UG (haftungsbeschränkt) i. G., Mühlenstraße 4, 06686 Lützen, mail@getqueris.com.

2. What data we process

Free registration: phone number (one-time verification via WhatsApp or SMS). Account: name, email address and password (the password is stored only as a hash). Usage data: your queries (keywords, country and language) as well as your quota status. AI suggestions: when you use the AI keyword expansion, the keywords you enter are transmitted to our AI service provider. AI connector: when you connect Queris to an AI app, access tokens (stored only as hashes), the name and redirect addresses of the connected app, and the queries made through it. Referral program: your referral code, the number of clicks on your link and the purchases resulting from them. For payment: processing via Stripe; card data is not stored with us.

3. Purposes and legal bases

Performance of a contract (Art. 6(1)(b) GDPR); legitimate interest in preventing abuse, attributing referrals and improving the product (Art. 6(1)(f)); consent, where required, for example for the Meta Pixel (Art. 6(1)(a)); legal obligations (Art. 6(1)(c)).

4. Services and processors used

Hosting: Hetzner Online GmbH (Germany). Payment processing: Stripe. Verification via SMS and WhatsApp: Twilio. Transactional and onboarding emails: MailerSend (MailerLite, EU). AI keyword expansion and AI-assisted drafts of support and onboarding messages: Anthropic (Claude); in this process the keywords you enter, or your name, plan, usage status and previous message history, are processed, and a transfer to the USA takes place on the basis of appropriate safeguards (standard contractual clauses). Provision of search volume, domain and competition data: specialized data service provider (EU and USA). Anonymous, cookieless audience measurement: Plausible Analytics (EU-hosted, no cookies, no personal data, therefore without consent). Audience and marketing measurement: Meta Pixel (Meta Platforms), only with your consent (see Cookies), where applicable with a transfer of data to the USA. Contracts pursuant to Art. 28 GDPR are in place with all processors.

5. Cookies and tracking

Technically necessary: a session cookie for your login (always active, no consent required). Functional: a referral cookie (qref) that is set only if you arrive via a referral link and stores the referral code for up to 90 days in order to attribute a commission correctly. If you sign up via an invite link, we store in your account who invited you and whether you have made a first query, in order to attribute the invite promotion and the commission. Also functional is an attribution cookie (q_jrny) that stores, first-party, the source of your visit (referring page, UTM parameters and timestamps) on your device for up to 90 days, so we can understand which channels lead users to us; the legal basis is our legitimate interest (Art. 6(1)(f) GDPR), we use the data only for our own analysis; when you make a purchase it is attached to the order at our payment provider, and it is not shared with advertising networks. Conversion events (e.g. registration and purchase): when you register or make a purchase, we send these events server-side to Meta via the Conversions API, transmitting your email address, phone number, name and account identifier only in irreversibly hashed (pseudonymized) form. In addition, your IP address and browser identifier (user agent) are transmitted and, if you have consented to the Meta Pixel, its click and browser identifiers. The legal basis is our legitimate interest in measuring advertising effectiveness (Art. 6(1)(f) GDPR); no cookies are set in this process. Optional and only with your express consent: the Meta Pixel (Facebook and Instagram) for extended audience and marketing measurement. Also only with your consent: Google Ads conversion tracking by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We then load the Google tag (gtag.js), which sets cookies such as _gcl_au and _gcl_aw, and store the click ID of an ad (gclid, gbraid or wbraid, for Meta ads fbclid) for up to 90 days in our own cookie (q_click). When you sign up or make a purchase, we report the event with click ID, order value, order number and time to Google, also server-side via the Google Data Manager API; your email address and phone number are only transmitted hashed (pseudonymised) so that Google can attribute the event to your ad. Without a click ID from a Google ad we send nothing to Google server-side. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Google may transfer data to the USA and is certified under the EU-US Data Privacy Framework. We store your choice in a technically necessary cookie (qcc) so that our server respects it too. Without consent, no marketing cookies are set; you can withdraw your consent at any time via the cookie settings.

6. Onboarding and marketing emails

After you register, we send you a short series of emails that introduce you to Queris and its features. The legal basis is our legitimate interest in informing our own users about our services (Art. 6(1)(f) GDPR, § 7 Abs. 3 UWG (German Act Against Unfair Competition)). You can object to this at any time by using the unsubscribe link in each of these emails; you will continue to receive important transactional emails (for example for resetting your password) independently of this.

7. AI connector for Claude and ChatGPT

When you connect Queris to an AI app (for example ChatGPT or Claude) via our connector, you sign in with your Queris account and approve the connection. From the AI app we receive only what is needed to answer a request: the keywords or the domain, the country, the language and the type of analysis. We do not receive your chat history. We return the requested estimates together with the status of your allowance. We store the name and redirect addresses of the connected app and the access tokens (only as hashes, never in readable form) and process the requests like normal Queris queries, including counting them against your allowance. You can end the connection at any time in the settings of the AI app; on request we also invalidate all access tokens on our side (mail@getqueris.com). The provider of the AI app (for example OpenAI or Anthropic) is a separate controller; what it does with your inputs and with the results is governed by its terms and privacy notices.

8. Referral program

If you take part in the referral program, we process your referral code, the clicks on your link and the purchases resulting from them in order to calculate and pay out your commission. The legal basis is the performance of a contract as well as our legitimate interest in a functioning referral system.

9. Retention period

Account and usage data until the account is deleted, or for as long as legal obligations exist. Verification codes are deleted after 10 minutes. Connector access tokens expire after one hour and are renewed by the connected app; they are kept until the connection is revoked or the account is deleted. To delete your account, write to mail@getqueris.com from the email address of your account; we delete the account and the data linked to it within 30 days, unless statutory retention duties apply (for example for invoices).

10. Your rights

Access, rectification, erasure, restriction, data portability, objection as well as the right to lodge a complaint with a supervisory authority. For users in Switzerland, the Swiss Federal Act on Data Protection (revFADP) applies in addition; you can report suspected violations to the Federal Data Protection and Information Commissioner (FDPIC). Contact: mail@getqueris.com.