Privacy Policy

Questo Labs operates this website (questolabs.com) and the Questo app (app.questolabs.com), a go-to-market work platform with AI agents. This policy explains what data we collect, why, and what your rights are. If anything is unclear, write to us at privacy@questolabs.com.

Questo is a business tool for adults. It is not directed at children, and we do not knowingly collect children's personal data.

When you browse questolabs.com, we collect analytics data through Google Analytics 4: usage data such as pages visited, approximate location, device and browser information, and your IP address. Google Analytics sets cookies to distinguish visitors (see Cookies below).

If you join the waitlist, we collect the details you enter in the form: your name, email address, company, and how you heard about us. This is delivered to our Slack workspace, where we use it to contact you about access to Questo. Nothing else.

You sign in to Questo with your Google account. From Google we receive your basic profile: email address, name, and profile picture.

How we use Google user data: we use it only to authenticate you and to identify your account inside your workspace (for example, showing your name and picture to your teammates). We do not use it for advertising, we do not sell it, and we do not share it with anyone beyond the service providers listed below, who process it solely to run Questo for you.

As you work in Questo, we store the content you create or connect: tasks, missions, documents, files, knowledge entries, and data from integrations you choose to connect, such as Slack or Google services. This content belongs to you and your workspace. We process it to provide the service, and in automated form to evaluate and improve how Questo works - except for data from connected Google Workspace accounts, which we use only to provide the features you connected it for. Our team accesses your workspace only when you grant us access, or when we need to diagnose and fix a production failure.

If you connect Gmail, Google Drive or Google Calendar, Questo requests only the access those features need: reading and labelling your mail and creating drafts, sending a message when you approve it, reading the files in your Drive, and reading and writing calendar events. Nothing is connected unless you choose to connect it, and disconnecting it in Settings revokes our access straight away.

Questo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In practice that means we use this data only to provide the features you connected it for. We never use it for advertising, never sell it, and never use it to train generalized AI models. We share it only with the providers listed below that those features depend on - in particular Anthropic, whose Claude models process the content to power Questo's agents - or where the law requires it. Nobody at Questo reads your Google Workspace data except with your explicit permission, to resolve a support request you raised, to investigate a security incident, or where we are legally compelled.

We use a small number of service providers to run Questo. Each one processes data only on our instructions, to provide the service:

• Amazon Web Services - hosting and storage, in the EU (Frankfurt, eu-central-1).
• Anthropic - AI processing. Workspace content is sent to Anthropic's Claude models to power Questo's agents.
• Google - sign-in (Google OAuth) and website analytics (Google Analytics 4).
• Slack - waitlist intake on the website, and any Slack integration you connect in the app.
• Composio - integration layer for third-party tools you connect in the app (for example Reddit, Google Analytics, or HubSpot). Composio holds the connection credentials and relays data between those tools and Questo.

Some of these providers are based in the United States. Where your personal data leaves the European Economic Area, we rely on safeguards recognized under the GDPR, such as the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

We do not sell your personal data to anyone, ever.

We process your data to provide and operate Questo, to keep your account secure, to respond when you contact us, to understand how the website and the product are used so we can improve them, and to meet legal obligations. Where we use your content to evaluate or improve the service, we do so solely by automated means; our personnel do not review your content for this purpose. We don't use your data for anything unrelated to running the product.

Our legal bases under the GDPR are: performance of our contract with you (providing Questo), our legitimate interests (securing, evaluating, and improving the service), your consent where we ask for it (analytics cookies), and compliance with legal obligations.

Your data is encrypted in transit and at rest, access to production systems is limited to the people who need it, and everything is hosted in the EU region listed above. No system is perfectly secure, but if a breach affects your personal data, we will notify you and the supervisory authority as the GDPR requires.

We keep your account data and workspace content for as long as your account exists. We delete your personal data when you ask us to - write to privacy@questolabs.com. Waitlist details are kept until you get access or ask us to remove them. Beyond that, we do not keep personal data longer than we need it for the purposes described above, and in any event no later than 10 years from when it was uploaded or created.

Under the GDPR you can ask us to access, correct, delete, or export your personal data, and you can object to or restrict our processing of it. Email privacy@questolabs.com and we'll act on it. You also have the right to lodge a complaint with your local data protection supervisory authority.

questolabs.com uses cookies set by Google Analytics 4 to measure how the site is used. The Questo app uses a session cookie to keep you signed in. You can block or delete cookies in your browser settings; the website works without the analytics cookies.

If we change this policy, we'll update this page and the date at the top. Questions, requests, concerns: privacy@questolabs.com.