Privacy Policy

Effective date: July 4, 2026

Qnaat is an AI copilot for Qlik Sense Cloud, operated by Appunto("Appunto", "we"). This policy covers the Qnaat Chrome extension, the Qnaat portal (app.qnaat.com) and the Qnaat API (api.qnaat.com). Questions:[email protected].

Data we process

• Account data (Qnaat accounts): email address, display name, company name and role — used to create and operate your account, send magic-link sign-in emails, and manage your plan. If you sign in with Google, we receive your email and name from Google.
• Authentication credentials: your Qlik OAuth tokens and — if you use "bring your own key" — your Anthropic API key are stored locally in your browser viachrome.storage.local. They never touch the page DOM. Qlik tokens are sent only to your Qlik Cloud tenant; your Anthropic key is sent only toapi.anthropic.com. Qnaat session tokens are sent only toapi.qnaat.com.
• Qlik content you work with: when you chat, the extension sends your prompt plus relevant Qlik context (Data Load Editor script text, app and sheet metadata, field/dimension/measure names, and query results returned by Qlik's tools) to the AI provider — directly to Anthropic (your key) or through the Qnaat API, which forwards it to Anthropic via Cloudflare AI Gateway. This content is used solely to generate the assistant's response. We do not persist your prompts or Qlik content on Qnaat servers — it passes through in transit only.
• Usage and billing records (Qnaat plan users): model used, token counts, credit charges and timestamps, stored in our database to operate quotas and billing.
• Local diagnostics: performance traces stored only in your browser, exportable manually, with keys and tokens automatically redacted.

Service providers

We rely on: Anthropic (AI responses), Cloudflare(hosting, AI Gateway), Neon (database), Resend(transactional email) and Google (optional sign-in). The extension also talks directly to your own Qlik Cloud tenant (qlikcloud.com) on your behalf.

What we don't do

• We do not sell your data.
• No advertising, no tracking, no external telemetry in the extension.
• We do not use your content to train models.

Retention and deletion

Disconnecting Qlik or Qnaat in the extension's Options removes the corresponding local tokens; uninstalling the extension removes all locally stored data. Qnaat account and billing records are retained while your account is active and as required for accounting. To delete your account and associated data, email[email protected].

Your rights

You may request access, correction, deletion or a copy of your personal data (including under GDPR and Mexico's LFPDPPP, as applicable) by writing to[email protected]. Qnaat is not directed to children under 16.

Changes

We will post any changes on this page with a new effective date.

Qnaat is an independent tool for Qlik Sense and is not affiliated with, endorsed by or sponsored by QlikTech International AB.