Privacy Policy

This policy applies to the Quzo AI web application at xtendai.expresstech.io, the assessment-taking app at xtendxm.expresstech.io, and any related services. We design the platform to ensure you retain ownership of the assessments you create and have visibility into how the data we collect is handled.

If your organisation uses Quzo AI to assess third parties (for example, candidates or students), you remain the controller of that data and we act as your processor.

Account information

When you create an account we collect your name, email address, and a securely stored password (or, if you sign in with a third-party identity provider, the limited profile information it shares with us). You may also choose to add a profile image and team workspace details.

Content you create

• Forms, questions, scoring rules, and any other content you build or upload
• Responses submitted to your forms (including candidate identifiers when you invite them by email)
• Team membership and role assignments

Billing information

If you subscribe to a paid plan, we collect the billing email associated with your subscription and high-level invoice metadata (plan, status, amount, date). Card details are collected and stored by our payment processor — we never see full payment card numbers.

Usage and technical data

• IP address, used for rate limiting and abuse prevention
• Browser, device, and operating system information
• Pages and features you interact with
• Server logs and aggregated usage metrics

• Operate the platform — host your forms, deliver assessments, store responses, and calculate scores
• Generate AI questions when you request them, by passing your prompt to our AI provider
• Process subscription payments and renewals
• Send transactional messages (account verification, billing receipts, security alerts, and important service notices)
• Prevent fraud, abuse, and excessive use of the platform
• Improve the product based on aggregated usage signals

We share personal information only in the situations described below.

Trusted service providers

We use a small set of carefully selected service providers to run Quzo AI — for example, cloud hosting, payment processing, email delivery, and AI generation. Each provider receives only the information necessary to perform its function and is contractually required to protect your data and to process it only on our instructions.

With your direction

When you invite collaborators to a team workspace or send an assessment link to candidates, the relevant data is shared with the people you choose, governed by the permissions you set.

Legal reasons

We may disclose information when required by law, in response to a valid legal request, or to protect the rights, property, or safety of Quzo AI, our users, or the public.

Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you before personal information becomes subject to a different privacy policy.

We use industry-standard administrative, technical, and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or loss. These include encryption in transit, restricted internal access, role-based permissions inside team workspaces, and ongoing monitoring of our infrastructure.

No online service can guarantee absolute security. If you believe you have discovered a vulnerability that affects Quzo AI, please report it to [email protected] and we'll respond as quickly as we can.

We retain personal information only for as long as we need it.

• Account information is kept while your account is active. You can request deletion at any time.
• Forms and responses are kept while the owning account is active or until you delete them.
• Proctoring records are retained according to your plan's retention setting and are then automatically removed.
• Billing records are retained for the period required by applicable tax and accounting law.
• Server logs and usage metrics are rotated on a short schedule.

Depending on where you live, you may have the following rights with respect to your personal information:

• Access the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Export your forms and responses in a portable format
• Withdraw consent for optional processing at any time
• Lodge a complaint with your local data-protection authority

To exercise any of these rights, write to [email protected]. We respond within a reasonable timeframe and at most within the period required by applicable law.

We use cookies and similar technologies to keep you signed in, remember your preferences (such as your active team workspace), and understand how the platform is used. You can control cookies through your browser settings; some features will stop working if you block essential cookies.

On our public website we use Google Analytics 4 to measure traffic and understand how visitors use the site. Analytics cookies load only after you accept them in our cookie banner (Google Consent Mode), and IP addresses are anonymized. We do not send your name or email to Google Analytics. You can decline analytics in the banner at any time, or clear/block these cookies in your browser; declining does not affect access to the product. Analytics are not used inside the signed-in application.

Quzo AI may transfer personal information to service providers in countries other than your own. Where required by law, we rely on appropriate transfer safeguards such as Standard Contractual Clauses to protect your information during those transfers.

Quzo AI is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. If a customer uses the platform to deliver assessments to minors (for example, in a school setting), that customer is responsible for obtaining the parental consents required by their jurisdiction.

We may update this policy as the product and applicable law evolve. When we make a material change we'll update the "Effective date" at the top of this page and, where appropriate, notify you by email. The current version is always published at this URL.

For privacy questions or to exercise any of the rights above, write to [email protected].

For general support, write to [email protected].