Privacy and data

Operator and data controller

longogi group italia di longo gianluca
Contrada Chillino 1A, 73010 Arnesano (LE), Italia
VAT: 05033280750
assistenza@lnggroup.it
assistenza@lnggroup.it

Data and purposes

Account and authentication details, adult self-declaration, conversations, saved preferences, projects, generated images and usage records support the requested service. Selected attachments and audio are sent to the AI provider for the requested operation. Chat attachments are not saved as account files. Temporary chats do not save their text to the Quadra database and do not use saved memory; usage counters still remain. If you explicitly save a temporary reply, its export text is held only in server memory for up to 60 seconds, with authenticated access and no chat-history or file storage. The AI provider may retain request data under its own contractual policies.

Providers and transfers

Quadra One uses OpenAI APIs for AI requests; Contabo is the hosting provider. Configured SMTP or Resend processes account emails. PayPal processes recurring payments; bank transfers require actual credit verification. Quadra stores orders, payment references and the billing details you provide (customer name, address, declared country, account email and any tax identifier or invoice request), separately from chats, for purchase administration and accounting. Quadra does not use these billing details as input to its own AI models. Never enter card numbers or security codes in these fields. Hosting is provided in Lauterbourg, France. OpenAI acts as processor under its Data Processing Addendum (openai.com/policies/data-processing-addendum/); its agreement provides safeguards for transfers outside the EEA, including standard contractual clauses or adequacy decisions. EU-only AI processing and zero data retention are not configured or promised. Provider-specific retention and processing locations depend on the requested feature and applicable provider terms (developers.openai.com/api/docs/guides/your-data). Responses API requests disable response storage. The programming laboratory temporarily stores an isolated session at the AI provider; generated files are downloaded before deletion of a successfully completed session. Interrupted sessions require recovery or explicit deletion. This does not promise zero provider retention.

AI sharing permission

Before using AI features, you explicitly authorize sharing the content needed for your requests with OpenAI. This permission is recorded separately from the service terms and can be withdrawn in Settings after current requests end. Withdrawal pauses AI scheduled tasks and prevents new AI requests; account access, data controls and payment management remain available. Past provider requests follow the stated retention policies.

Content reports

Using Report shares only the selected AI response, any generated image and your description with authorized Longogi administrators for safety review. Reports are not sent to AI providers. Reporting a temporary response explicitly saves that selected text for support. Report details are cleared on closure; reports expire within 30 days, and are removed earlier when the account or the linked saved conversation is deleted. Encrypted backups follow the retention below. This processing supports the requested assistance and proportionate safety interests.

Accounting management

Billing and payment details needed for accounting are transferred by the operator to Sibill for tax-document management; chat content is not transferred to Sibill by this workflow. Sibill may process accounting data through its own AI features and providers under its processing agreement.

Additional features

Scheduled task prompts and results, laboratory instructions, execution results and downloaded files are stored in your account. Connected service tokens are encrypted on the server. Read previews are temporary and are sent to AI only after your explicit request. Disconnecting removes local tokens; revoke provider permissions in Google or Microsoft separately. Live voice sends microphone audio to the AI provider; this version does not save its transcript or recording in Quadra.

Google account data

Quadra One uses Google API data only for the connected features you request and follows the Google API Services User Data Policy, including its Limited Use requirements (developers.google.com/terms/api-services-user-data-policy). Access is read-only. Google data is not sold, used for advertising or used to train general AI models. Previews are shown to you; transfer to the AI provider requires your separate explicit request and AI sharing permission. Test connections are restricted to the verified operator until the required public approvals are complete.

Local project tools

Supported desktop candidates let you choose a project folder, read and edit text files and keep local copies before overwriting. Files and command results stay on your device until you choose to copy text into a Quadra draft and send it. Local copies are not encrypted. Commands require a native confirmation, run with your user permissions and are not sandboxed: they can access files outside the project and the network.

Assisted device control

Desktop test app 0.5 captures only your chosen window or a separate browser. The preview stays on your device; each suggestion requires a separate authorization to share the screenshot, objective and descriptions of executed steps with Quadra and OpenAI. Review the image for data you do not want to share. These contents are not saved in Quadra history; usage counters and the provider retention described above still apply. Clicks, text, scrolling and supported keys also require native approval. Sessions expire after 20 steps or 10 minutes. The separate browser uses a private session. Sending, purchases, sign-in, deletion and security changes require a manual handoff. Mac screen-recording and accessibility permissions are managed by the user in system settings. Commercial signing and device-testing status are shown on the Apps page.

Retention and rights

Account content, including chats, projects, preferences and activities, is retained until deletion by the user or account closure. Deletion removes content from the active system. Encrypted backup copies are normally retained for 30 days; failures may delay their expiry and require action by the operator. Data strictly necessary for accounting, tax documents and evidence of the contract is retained separately to meet applicable obligations: accounting records and documents are ordinarily retained for ten years, subject to longer periods required by law or ongoing proceedings. At expiry, the operator checks whether further retention is necessary. Account deletion does not erase accounting documents that must be retained. Providers apply their contractual terms and data processing agreements; this service does not promise immediate deletion of every copy held by third parties. Export and account deletion are available in Settings. Configured backups retain copies until their scheduled expiry. Contact the verified privacy address for access, correction, erasure, restriction, portability and applicable objections. You can complain to the competent supervisory authority.

Legal bases

Contractual necessity for requested service, applicable legal obligations for accounting and proportionate legitimate interests for security must be validated for each processing operation. Optional marketing, tracking and training are not enabled by this version.

Service administration and usage statistics — revision 2026-10-04

Authorized Longogi administrators can view account email, identifier, plan, request counts, token counts and estimated API costs for service delivery, billing support, cost control and security. This dashboard does not provide access to conversation text or attachments; selected content reports remain a separate support workflow. Account-specific limits and configuration changes require administrator re-authentication and an audit reason. Technical usage records and configuration audit entries are removed from the active database after 366 days; account-specific overrides expire automatically. Account deletion removes linked usage and overrides and removes linked account identifiers from the configuration audit. Usage totals without account identifiers remain for aggregate cost reporting, with the same 366-day technical retention. Commercial and tax records, and encrypted backups, have distinct retention schedules as described in this notice. These administrative statistics are not sold, used for advertising or sent to AI providers. Restrict access to authorized personnel, review the processing record and contact the privacy address to exercise rights. During maintenance, account access, data rights, withdrawal requests and renewal cancellation remain available. App personalization applies while connected; installed local tools and OS icons require separate updates.

Version 2026-10-03 · Longogi