Privacy Policy

This Privacy Policy applies to BLAZON LLC, doing business as Questri (Questri, we, us, or our), and to personal information processed through Questri.ai and related websites, the hosted web application, mobile applications, Digital Barn Board, support, subscriptions, client payment features, and related services (collectively, the Service).

Questri is generally responsible for account registration, subscription, marketing, support, security, and product-usage information that we decide how to use. When a facility, business, nonprofit, school, or other customer organization enters information into its workspace, that organization usually decides why the information is used and who may access it. For that Customer Content, Questri generally acts as a service provider or processor on the organization's behalf.

This policy does not govern an independent website, app, or service that merely links to Questri or is operated by a Customer or other third party.

Please do not place full payment credentials, government identification numbers, passwords, protected human health information, student education records, or similar high-risk human data in horse notes, chat, comments, files, or free-text fields unless Questri has expressly agreed to that use in writing.

We collect personal information from:

• You, when you create an account, use the Service, submit content, contact us, configure a feature, make a privacy choice, or complete a transaction.
• Your Customer organization and other Authorized Users, when they invite you, assign work, add contact or rider details, send a message, manage a horse, or otherwise use the shared workspace.
• Your device and browser, through cookies, local storage, application logs, software-development kits, and similar technologies.
• Service providers, such as identity, payment, analytics, app-store, notification, customer-support, and communication providers.
• Public or business sources, when you ask us for help, apply for a program, or when we need to verify an organization or business contact.

Questri does not use personal information to make solely automated decisions that produce legal or similarly significant effects about a person. If that changes, we will provide any notice and choice required by law before the new use begins.

Questri is a multi-user organization service. Depending on permissions and the feature, workspace owners, administrators, staff, clients, riders, and other Authorized Users may see a user's name, avatar, role, assigned work, completion activity, messages, shared files, horse records, schedules, or other Customer Content. Organization administrators may add or remove users, change permissions, manage content, and restrict access.

Customers can use invitations, notifications, client invoices, exports, and public or shareable horse links to disclose content to people outside the workspace. These disclosures occur at the Customer's or user's direction. A person with an active public link may be able to view the information the link exposes. Customers should review content and recipients before sharing and disable links that are no longer needed.

If you use an email address supplied by an employer or organization, or join its Questri workspace, that organization may be able to manage your Service relationship and related data.

We disclose information to providers that help us operate Questri. They may process only the information reasonably needed for their role, subject to their agreements with Questri. The provider categories and features we use can change as the Service develops.

We may also disclose personal information:

• To a Customer organization and its Authorized Users as described above.
• At your direction or with your consent.
• To professional advisers, auditors, insurers, and financing partners subject to appropriate confidentiality obligations.
• To law enforcement, regulators, courts, or others when we reasonably believe disclosure is required by law or needed to protect rights, safety, property, or service integrity.
• In connection with a merger, financing, reorganization, acquisition, bankruptcy, or sale of all or part of our business, subject to appropriate protections.

Questri may use artificial intelligence and workflow automation for selected product, support, communication, and operational workflows. Depending on the feature and how it is used, the information processed can include prompts, instructions, Customer Content, text, audio or voice recordings, transcripts, generated output, workflow context, contact information, and technical identifiers.

These providers process information under their applicable agreements with Questri and the settings used for the relevant service. Their retention, safety-monitoring, and model-improvement practices can differ by provider, service, and configuration. Questri will provide additional notice or obtain consent when required before introducing a materially different use of personal information, including a use of recorded human voice that requires special notice or consent.

Questri.ai uses essential browser storage to remember privacy choices, protect forms, support navigation, and provide requested site functions. These technologies are necessary for the website and do not require optional analytics consent.

Optional website analytics, session replay, and advertising technologies remain off unless you select Accept optional in the privacy choices notice. If accepted, we use PostHog, Google Analytics, Microsoft Clarity, and the Meta Pixel to understand visits, navigation, product interest, website performance, conversion paths, and advertising results. You can select Reject optional without losing access to the website.

You can change or withdraw that choice at any time through Cookie settings in the footer. If your browser sends a Global Privacy Control signal, we treat optional analytics and advertising consent as denied for that browser. We do not respond to the older Do Not Track signal because there is no consistent industry standard for it.

The authenticated web and mobile applications use product analytics and diagnostic tools to understand whether features work, measure onboarding and adoption, investigate errors, improve performance, secure accounts, and make daily workflows more useful. This can include user and organization identifiers, screen or route names, feature interactions, timestamps, device information, network and performance data, error context, and session replay where enabled.

We configure analytics to reduce unnecessary collection. Depending on the platform, this includes masking input fields and images, removing sensitive query values, normalizing record identifiers in URLs, and disabling automatic capture or replay on selected sensitive routes. Session replay can still process visible interface structure, labels, and interactions, so users should not place high-risk human information in Questri free-text fields.

We may connect product events to a user and Customer organization so we can understand an account's experience, offer relevant support, troubleshoot a problem, and evaluate service adoption. We do not use session replay to collect full payment credentials.

The Questri mobile app requests a device permission only when needed for a related feature or platform function. Available permissions depend on your device and operating system.

You can deny or later change permissions in your device settings. The related feature may not work without the permission, but other Questri features should remain available.

Stripe processes payment-card, bank-account, identity-verification, and connected-account information for Questri subscription billing and Customer Payment Features. Questri receives limited identifiers and status information needed to manage subscriptions, invoices, connected accounts, payouts, refunds, and disputes. Questri does not receive or store full payment-card numbers or security codes.

When a Customer enables payment processing for its own clients, the Customer and Stripe may independently determine how certain transaction and verification information is used. The Customer is responsible for its own privacy notices and client relationship. Stripe processes personal information under its Privacy Policy and applicable payment-service terms.

We keep personal information only as long as reasonably necessary for the purposes described in this policy, including providing the Service, meeting the Customer's instructions, maintaining security and continuity, resolving disputes, enforcing agreements, and complying with legal, tax, accounting, and reporting obligations. The exact period depends on the type of information, the Customer relationship, sensitivity, legal requirements, and operational need.

• Customer Content and account information retention depends on whether the organization account is active, the Customer's instructions, applicable deletion requests, and the support, backup, security, and legal needs described above.
• Subscription, invoice, payment, tax, and transaction records are retained for the periods required by financial, tax, anti-fraud, and legal obligations.
• Support, security, and legal records are retained as needed to resolve the issue, protect the Service, document decisions, and establish or defend legal claims.
• Analytics and diagnostic information is retained according to our configuration and the provider's retention rules. Microsoft Clarity recordings are generally available for 30 days, while favorited or sampled recordings and some labels can remain available for up to nine months.
• AI and automation inputs and outputs are retained according to the feature or workflow, the Customer Content lifecycle, provider configuration, and our security, support, and legal needs.

Deletion from active systems and backups may occur on different schedules. When information is no longer needed, we delete it, deidentify it, or isolate it until deletion is practical. Customers should contact support before subscription cancellation if they need help retrieving Customer Content.

Questri uses administrative, technical, and organizational safeguards designed to protect personal information. These include access controls, individual user accounts, role-based permissions, transport encryption, monitoring, backups, and service providers selected to support secure operations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Questri is based in the United States, and we and our providers may process information in the United States and other countries. Privacy laws in those locations may differ from the laws where you live. Where applicable law requires a transfer mechanism, we take steps intended to use recognized contractual or other safeguards. Contact us for more information about safeguards relevant to your situation.

If you believe your account or information has been compromised, contact support@questri.ai promptly.

Depending on where you live and subject to legal exceptions, you may have the right to access, know about, correct, delete, or receive a portable copy of personal information; restrict or object to processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; and appeal a decision about a privacy request.

You can exercise available rights by:

• Updating information available in your Questri profile or through an organization administrator.
• Using the Privacy and Data Request Form.
• Emailing privacy@questri.ai.
• Using Cookie settings in the Questri.ai footer for optional website technologies.

We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification. We will not discriminate against you for exercising a privacy right. If we deny a request, you may appeal by replying to our decision or emailing privacy@questri.ai with the subject Privacy appeal.

When Questri processes Customer Content for an organization, we may direct the request to that organization or assist it in responding. We may retain information when an exception applies, including for security, fraud prevention, transaction records, legal compliance, or the rights of another person.

People in the European Economic Area or United Kingdom may also lodge a complaint with their local data-protection authority. We encourage you to contact us first so we can try to resolve the concern.

State privacy laws may require specific disclosures about information collected, used, and disclosed during the preceding 12 months. The categories are described in Information we collect, the sources in Where information comes from, the purposes in How and why we use information, and recipients in Service providers and other disclosures.

We do not sell personal information for money. When a visitor accepts optional analytics and advertising technologies on Questri.ai, disclosure of identifiers and internet or device activity to Google or Meta may be considered a sale, sharing, or targeted advertising under some state laws. Visitors can opt out by selecting Reject optional, changing Cookie settings, or enabling Global Privacy Control. We honor Global Privacy Control for that browser on Questri.ai.

We do not knowingly sell or share personal information of people under 16 for targeted advertising, and we do not use sensitive personal information to infer characteristics about a person. The rights and request methods in the prior section apply where state law grants them, including rights to know, access, correct, delete, opt out, appeal, and receive equal service and pricing.

Questri is designed for professional equestrian operations and is not directed to children under 13. A person under 13 may not create or use a Questri account. If we learn that a child under 13 created an account or submitted personal information directly to Questri without legally valid authorization, we will take appropriate steps to delete it.

A Customer may authorize a person from age 13 to the age of legal majority to use Questri only when the Customer has obtained any required parent or guardian consent and complies with applicable law. Customer organizations, including schools, nonprofits, lesson programs, rescues, and therapeutic or access programs, may also enter information about minor riders, clients, or participants. The Customer is responsible for having lawful authority, providing required notices, limiting access, and collecting only what is appropriate for its program.

A parent or guardian who believes Questri holds a child's information without proper authorization should contact privacy@questri.ai.

We may update this Privacy Policy as our Service, providers, or legal obligations change. If an update materially changes how we use personal information, we will provide reasonable notice through the Service, by email, or on this page before the change takes effect when required. The dates at the top identify the current version.

Questions, privacy requests, and complaints can be sent to privacy@questri.ai or submitted through our Privacy and Data Request Form.

BLAZON LLC, doing business as Questri