Privacy Policy

Reqord ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect information when you use our website, application, Salesforce package, or related services ("Services").

By using the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily submit, including:

  • Name, email address, and company information
  • Discovery documents (notes, transcripts, documents, images)
  • Prompt input, workflow descriptions, and demo instructions
  • Support requests and related communications
  • Configuration settings, usage preferences, and template data

1.2 LLM API Keys (Bring Your Own Key)

If you provide an external LLM API key (OpenAI, Anthropic, etc.), we use it solely to process your requests. We never use your API key for any purpose other than serving your account.

1.3 Automatically Collected Information

We may collect:

  • Log data (IP address, browser type, device information)
  • Usage analytics (features accessed, volume of activity)
  • Platform metadata required to operate the Salesforce integration

We do not collect Salesforce customer records unless you upload or include them in discovery inputs.

We use collected information to:

  • Process and analyze discovery content
  • Generate workflows, personas, requirements, and demo outputs
  • Provide, maintain, and improve the Services
  • Monitor usage limits and enforce edition restrictions
  • Deliver support and respond to inquiries
  • Enhance performance, security, and reliability

We do not use customer content to train our internal AI models.


3. How We Use Third-Party LLM Providers

Reqord uses external AI models (e.g., OpenAI, Anthropic) to generate structured outputs from your discovery inputs. Depending on your configuration:

  • We may process inputs through your own API key, or
  • We may process inputs through our managed infrastructure (Standard or Premium editions)

Your data is sent only for the purpose of generating outputs you request. We do not allow third-party AI providers to train on your data.


4. Data Storage & Retentions

We store processed data only as needed to provide the Services, including:

  • Workflow steps
  • Requirement sets
  • Persona information
  • Demo generation history
  • Template data

You may request deletion at any time. We retain logs for security and audit purposes for a limited period, after which they are deleted automatically.


5. Data Sharing

We do not sell or rent personal data. We may share data only with:

  • Service providers that support hosting, processing, analytics, and secure storage
  • LLM providers, solely for your requested operations
  • Salesforce, when required to support AppExchange licensing or package functionality
  • Regulators, if required by law

All third-party providers are required to maintain confidentiality and adequate security.


6. Security

We use administrative, technical, and physical safeguards to protect your data, including:

  • Encryption in transit and at rest
  • Access controls and logging
  • Infrastructure isolation
  • Role-based access inside Salesforce

No system is completely secure. You are responsible for securing your Salesforce org and the data you choose to upload.


7. Customer Responsibilities

You agree not to upload:

  • Sensitive personal data (health, financial, government ID, minors)
  • Regulated data (HIPAA, PCI, etc.)
  • Content that violates laws or intellectual property rights

You are responsible for:

  • The content you upload
  • Managing access within your organization
  • Securing your own LLM API key (if used)

8. Your Rights

Depending on your location, you may have the right to:

  • Access your data
  • Correct inaccurate information
  • Request deletion
  • Export your data
  • Submit complaints regarding data handling

To exercise rights, contact: privacy@reqord.ai


9. International Data Transfers

Your data may be processed in regions where our service providers operate. We use appropriate safeguards for cross-border transfers, including standard contractual clauses when required.


10. Changes To This Policy

We may update this Privacy Policy periodically. The "Last Updated" date will reflect the most recent version. Material changes will be communicated through the website or product.


11. Contact Us

For questions or concerns regarding this policy, contact us at: