Privacy Policy

Effective date: September 30, 2026

1. Who we are

This Privacy Policy explains how Robinson Innovations LLC, a Florida limited liability company doing business as QNAAPI ("QNAAPI," "we," "us," or "our"), collects, uses, discloses, and protects personal information through qnaapi.com, the QNAAPI API, and related services (together, the "Services").

Robinson Innovations LLC is the controller of the personal information described in this policy, except where we process data on behalf of our customers as described in Section 3.

We have not appointed a Data Protection Officer. You can reach us about any privacy question using the details in Section 16.

2. Scope of this policy

This policy applies to personal information about:

• visitors to qnaapi.com;
• people who register for a QNAAPI account, including developers and team members of our customers; and
• customers and prospective customers who contact us, subscribe, or do business with us.

It does not cover the data our customers collect from their own audiences using the Services. That data is described in Section 3.

3. Data we process on behalf of customers

QNAAPI lets publishers and other businesses ("Customers") create surveys, polls, forms, and quizzes and collect responses from their own audiences ("Respondents"). When a Respondent submits a response through a Customer's survey, poll, form, or quiz, the Customer decides what is collected and how it is used.

For this Respondent data:

• the Customer is the controller (or "business," under U.S. state privacy laws), and QNAAPI acts as a processor (or "service provider");
• we process Respondent data only to provide the Services to that Customer and according to their instructions, as set out in our Data Processing Addendum;
• we do not sell Respondent data, use it for our own advertising, or combine it with data from other Customers; and
• each Customer's privacy policy, not this one, governs how that Customer uses Respondent data.

If you responded to a survey, poll, form, or quiz on a website or app that uses QNAAPI and want to access, correct, or delete your responses, please contact the organization that ran it. If you contact us instead, we will refer your request to the relevant Customer and help them respond to it.

4. Information we collect

Information you give us

• Account information: name, email address, company name, and login credentials when you register.
• Billing information: billing name, address, and plan details. Payment card details are collected and processed directly by our payment processor, Stripe. We do not receive or store full card numbers.
• Communications: the content of messages you send us, such as support requests and sales inquiries.

Information collected automatically

• Device and usage information: IP address, approximate location derived from IP address, browser type, device identifiers, pages viewed on qnaapi.com, and referring URLs.
• API usage information: API keys, request logs, timestamps, and usage volumes associated with your account.
• Cookies and similar technologies: as described in Section 9.

5. How we use information and our legal bases

Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on the legal bases shown below.

6. How we disclose information

We disclose personal information only as described here:

• Service providers: companies that help us operate the Services, such as cloud hosting (Laravel Holdings Inc., through Laravel Cloud), payment processing (Stripe), email delivery (Twilio Inc., through SendGrid), error monitoring (Sentry), customer support (ClickUp), and analytics. They may use personal information only to perform services for us, under written agreements that include data protection terms.
• Advertising partners: as described in Section 9, subject to your cookie choices.
• Legal and safety: when we believe disclosure is required by law or legal process, or necessary to protect the rights, property, or safety of QNAAPI, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
• With your direction: when you ask us to or give us permission.

A current list of the service providers that process Respondent data on behalf of Customers is available at qnaapi.com/subprocessors.

7. Storage and security

Personal information is stored on servers in the United States. We use administrative, technical, and physical safeguards designed to protect personal information, including:

• encryption of data in transit and at rest;
• access controls that limit personal information to authorized personnel with a business need, with permissions reviewed regularly; and
• security monitoring and periodic reviews to identify and address vulnerabilities.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. How long we keep information

We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law:

• Account information: for as long as your account is active, and for up to 90 days after closure.
• Billing and transaction records: for 7 years to meet tax and accounting obligations.
• API request logs: for up to 90 days.
• Support communications: for up to 2 years after the issue is resolved.
• Marketing data: until you unsubscribe or withdraw consent.
• Respondent data: as directed by the Customer and described in our Data Processing Addendum.

9. Cookies and tracking technologies

qnaapi.com uses cookies and similar technologies, such as pixels and web beacons, in these categories:

• Essential: required for the site to work, such as login and security. These do not require consent.
• Functional: remember your preferences.
• Analytics: help us understand how visitors use the site so we can improve it.
• Advertising: allow us and our advertising partners to show you QNAAPI ads on other websites and measure how well they work.

When you first visit qnaapi.com, a cookie banner lets you accept all cookies, reject non-essential cookies, or choose by category. You can change your choices at any time using the cookie settings link in the site footer.

10. International data transfers

We are based in the United States and process personal information there. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws from your country.

When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. You can request more information about these safeguards by contacting us.

11. Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and learn how we process it;
• correct inaccurate or incomplete information;
• delete your personal information;
• restrict or object to certain processing, including processing for direct marketing;
• receive your information in a portable, machine-readable format;
• withdraw consent at any time, where we rely on consent, without affecting processing that took place before; and
• lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@qnaapi.com. We will respond within the time required by applicable law. We may need to verify your identity before acting on your request. If your request concerns Respondent data, see Section 3.

12. Additional information for U.S. residents

If you live in California or another U.S. state with a comprehensive privacy law, this section applies to you in addition to the rest of this policy.

Categories of personal information

In the past 12 months, we have collected the following categories of personal information, from the sources and for the purposes described in Sections 4 and 5: identifiers (such as name, email address, IP address, and device identifiers); commercial information (such as plan and purchase history); internet or other electronic network activity (such as site and API usage); and approximate geolocation derived from IP address.

Sale and sharing

We do not sell personal information for money. Our use of advertising cookies on qnaapi.com may be considered "sharing" for cross-context behavioral advertising, or "targeted advertising," under some state laws. You can opt out by selecting "Reject non-essential cookies" or turning off advertising cookies in our cookie settings. We also honor Global Privacy Control (GPC) signals sent by your browser as a request to opt out.

We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information

We do not use or disclose sensitive personal information for purposes other than those permitted by law, such as providing the Services you request.

Your rights

Subject to certain exceptions, you have the right to know what personal information we have collected about you, to delete it, to correct it, and to opt out of sale, sharing, or targeted advertising. We will not discriminate against you for exercising any of these rights.

How to submit a request

Email privacy@qnaapi.com or call +1 (850) 491-2166. We will verify your request by matching the information you provide with the information we hold. You may use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization and ask you to verify your identity directly.

Appeals

If we decline your request, you may appeal within 60 days of our response by emailing privacy@qnaapi.com with the subject line "Privacy Appeal." Include your original request, the date of our response, and why you believe our decision was incorrect. If you disagree with our decision on appeal, you may contact your state attorney general.

13. Marketing communications

We may send you information about QNAAPI products, features, and offers:

• by email, where you have consented or where permitted by law because you are an existing customer; and
• through retargeted ads on other websites and social media, subject to your cookie choices.

Every marketing email includes an unsubscribe link. We will still send you service-related messages, such as billing notices and security alerts, after you unsubscribe.

14. Children's privacy

The Services are intended for businesses and are not directed to children under 13 (or under 16 where required by local law). We do not knowingly collect personal information from children for our own purposes. If you believe a child has provided us with personal information, contact us and we will delete it. Customers are responsible for complying with children's privacy laws, such as COPPA, when using the Services with their audiences.

15. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. If we make material changes, we will notify you by email or through a notice on qnaapi.com before the changes take effect, and we will ask for your consent where the law requires it.

16. Contact us

If you have questions about this policy or our privacy practices, contact us at:

Robinson Innovations LLC (d/b/a QNAAPI)
880 NW 33rd Way
Fort Lauderdale, FL 33311
Email: privacy@qnaapi.com
Phone: +1 (850) 491-2166