Privacy

For personal information processed through this deployment of the Service, QEDGE AM is the data controller. For privacy-related requests about this Service, contact us at privacy@qedgeam.com.

Platform software. FR Copilot incorporates software licensed from RealFintech Limited. Depending on how your organization has deployed the Service (for example on your own infrastructure or through a hosted environment), RealFintech may process personal information only as a processor on QEDGE AM's instructions, under a subcontractor arrangement, or not at all for certain components. Your administrators can explain which deployment model applies to you.

Account and authentication. We process identifiers needed to create and secure your account—for example your name, work email address, hashed credentials, organization or team affiliation, and role (such as user or administrator). If your employer uses single sign-on, we may receive tokens or profile attributes from your identity provider.

Workspace and usage data. We process content you submit in the Service, including chat threads, prompts, attachments, model responses, tools logs, and associated metadata. We also record operational and billing events (such as API and model usage metering) where prepaid credits or invoicing apply.

Research and document content. When you upload PDFs or other materials, or run ingestion jobs, we process those files and derived text, structure, embeddings, or indexes as needed to provide search, retrieval, and copilot answers. Administrators may manage a shared corpus available to your organization; individual users may have a private library limited to their account. See the user manual for how those modes work.

Technical and security data. We automatically collect information such as IP address, device type, browser type, approximate location derived from IP, diagnostic logs, and cookies or similar technologies where we use them (see below). We use this data to secure the Service, troubleshoot, and understand aggregated usage.

Support and sales. If you contact us, we keep correspondence and related details to resolve your request.

We use personal information to operate and improve the Service; authenticate users and enforce access controls and allowlists; process transactions and credits; communicate about the Service (including service and policy updates); detect, investigate, and prevent fraud, abuse, and security incidents; comply with legal obligations; and defend legal claims.

Service providers. We engage carefully selected subprocessors to host infrastructure, run analytics, process payments, send email, and—where necessary—to call third-party artificial intelligence and search providers on our instructions. They may access personal information only to perform services for us and are subject to contractual confidentiality and security obligations.

Administrators. If your access is managed by an organization, its designated administrators may be able to view usage, billing, corpus configuration, and invite flows associated with your workspace.

Legal and safety. We may disclose information when required by law, regulation, legal process, or governmental request, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of QEDGE AM, our users, or the public. our users, or the public.

No sale of personal information. We do not sell personal information as that term is commonly defined in privacy law. We do not use your private research content to train publicly available foundation models unless you or your organization expressly opt in to a product feature that does so.

We and our service providers may process personal information in Hong Kong and in other countries where we or they maintain facilities. Where applicable law requires safeguards for cross-border transfers, we implement appropriate measures (such as standard contractual clauses) in line with regulatory guidance.

We use cookies and similar technologies that are strictly necessary to operate the Service (for example session and security cookies). Where we introduce optional analytics or preference cookies, we will describe them here and, where required, obtain your consent before use.

We retain personal information for as long as your account is active, as needed to provide the Service, and as required to comply with law, resolve disputes, or enforce agreements. Thread history, uploaded documents, and ingestion artifacts may remain until you delete them, your administrator removes them, or we apply an agreed retention schedule. Residual copies in backups may persist for a limited period before aging out.

We implement technical and organizational measures designed to protect personal information—including encryption in transit, access controls, least-privilege access, logging, and personnel training. No online service is completely secure; please use strong passwords, protect your credentials, and report suspected incidents promptly to privacy@qedgeam.com.

Depending on where you live, you may have rights to access, correct, update, delete, or export personal information, or to object to or restrict certain processing. You can perform many actions inside FR Copilot (for example deleting chat threads or removing documents from Knowledge).

To exercise other rights, or to ask questions about this policy, email privacy@qedgeam.com. We may need to verify your identity before responding. You may also lodge a complaint with a supervisory authority in your country if you believe our processing violates applicable law.

The Service is not directed to individuals under 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

We may revise this policy from time to time. We will post the updated version on this page and change the "Last updated" date. Where changes are material and required by law, we will provide additional notice (for example by email or in-product message). Your continued use of the Service after the effective date constitutes your acceptance of the revised policy, except where your explicit consent is required.