Privacy policy.

1. Who we are

Threeqa ("Threeqa", "we", "us") is a private limited company registered in Slovenia, with its registered office in Ljubljana. We are the data controller for the personal data described in this policy. You can reach us at hello@threeqa.com.

2. What we collect

We collect personal data in two ways:

Information you give us

• Contact details - your name, work email, company and role when you book a demo, write to us, or sign up for an account.
• Message content - anything you choose to write to us by email or through a form on the site.
• Account & usage data - if your organisation uses the Threeqa platform, the records, requirements, risks, signatures and other artefacts you create inside it. We treat that content as your organisation's data; this policy covers only personal data within it (such as user names and audit trails).

Information collected automatically

• Technical data - IP address, browser, operating system, referring page, and the URLs you visit on our site.
• Diagnostic data - basic logs needed to operate the site and platform (e.g. error reports, response times).

3. How we use it

We use personal data to:

• respond to enquiries, demo requests and support tickets;
• provide and operate the Threeqa platform for your organisation;
• maintain security, prevent abuse and diagnose incidents;
• improve the website and product based on aggregate usage patterns;
• meet legal, accounting and regulatory obligations.

We do not sell personal data, and we do not use it to train third-party AI models.

4. Legal bases

Where the GDPR applies, we rely on the following legal bases:

• Contract - to provide a service you or your employer has requested.
• Legitimate interests - to run, secure and improve our business, where those interests are not overridden by your rights.
• Consent - for any optional communications you opt in to. You can withdraw consent at any time.
• Legal obligation - to comply with tax, accounting and other applicable laws.

5. Sharing & processors

We share personal data only with parties that help us run the business, and only to the extent needed. Typical categories include:

• hosting and infrastructure providers that run the website and platform;
• email, communication and customer-support tools;
• analytics services used in an aggregated way to understand traffic;
• professional advisers (accountants, lawyers) under confidentiality obligations.

We do not share personal data with any third party for their own marketing.

We may disclose personal data when required by law, court order or a valid request from a competent authority.

6. Data retention

We keep personal data only for as long as needed for the purpose it was collected, plus any period required by law (for example, accounting records). Typical periods:

• website enquiries and demo requests: up to 24 months after our last interaction;
• customer account data: for the life of the contract, plus the retention period agreed in our customer terms;
• invoicing and accounting records: as required by Slovenian and EU law.

7. International transfers

We are based in the EU and prefer EU-based suppliers. Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses, and we apply additional measures where needed.

8. Your rights

If the GDPR or a comparable law applies to you, you have the right to:

• access, correct or erase the personal data we hold about you;
• restrict or object to certain processing, or receive your data in a portable format;
• withdraw any consent you have given;
• lodge a complaint with a supervisory authority.

To exercise any of these rights, email hello@threeqa.com. We will respond within the timeframe required by applicable law.

9. Cookies

We use a small number of cookies and similar technologies to make the site work, remember your preferences and understand aggregate traffic. Where the law requires it, we ask for your consent before setting non-essential cookies. You can disable cookies in your browser at any time; some parts of the site may then not work as intended.

10. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure and loss. No system is perfectly secure; if we become aware of a personal-data breach that affects you, we will notify you and the competent supervisory authority in line with applicable law.

11. Children

Threeqa is a business product. Our website and platform are not directed at children, and we do not knowingly collect personal data from anyone under 16.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. Material changes will be communicated separately to active customers.

13. Contact

For any privacy question, including requests to exercise your rights:

Threeqa
hello@threeqa.com