Legal

Privacy Policy

What personal data qzila processes, why, who else handles it, how long we keep it, and your rights.

Version 1.0 — 28 September 2026 · Effective from 28 September 2026

1. Who is responsible

The controller of your personal data is adcore s.r.o., registered seat Svätojurská 2, 902 01 Pezinok, Slovakia, Company ID (IČO) 51285495 (“we”, “us”). For anything about your data, write to hello@qzila.com.

This policy covers qzila.com, the account at identity.qzila.com, the tools at tools.qzila.com and their subdomains, and the qzila API. The rules for using the service are in the Terms of Service.

2. What we process and why

  • Your account. Your sign-in email address, and your password stored only as a hash by our identity service (we cannot read it), plus the language you chose. We use them to create your account, sign you in and keep it secure. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Billing. Your billing details (such as company name, address, VAT ID and billing email), your invoices, and the usage records behind them: which tool was used, for what and when. We use them to apply the monthly free credit and your spending cap, and to invoice you. Legal basis: contract; and our legal obligations under accounting and tax law (Art. 6(1)(c)).
  • Your card. Your card is entered directly with Stripe, and Stripe holds it. We never receive or store your card number; we keep only Stripe's reference to it. Legal basis: contract.
  • What you submit to the tools. The domains, hosts, URLs, email domains, pages and files you check or monitor, the results and history, and the alert destinations you configure. Where this includes personal data of other people, we process it on your behalf as your processor (see the Terms). Legal basis: contract.
  • Checks without an account. The target you submit, and the technical data of the request, such as your IP address, which we use to prevent abuse. Legal basis: legitimate interest in protecting the service (Art. 6(1)(f)).
  • Bot check on sign-up. Cloudflare Turnstile checks that a sign-up comes from a person. To do that, it processes technical data about your browser and connection. Legal basis: legitimate interest in keeping automated sign-ups out.
  • Emails. What you write to us, and the service emails we send you: address verification, invoices, the alerts you set up, and important notices about the service. Legal basis: contract; legitimate interest in answering you.
  • Analytics and marketing on qzila.com. These run only if you agree in the cookie banner. With your consent, we use Google Analytics 4 to see which pages and tools are used, and Google Ads to measure whether our ads lead to sign-ups and to show qzila ads to past visitors. Legal basis: consent (Art. 6(1)(a)). You can withdraw it at any time under “Cookie settings” in the footer.

You need to give us your account and billing details for us to provide the service; without them, we cannot open an account. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

3. Cookies

  • qzila_consent (necessary, on .qzila.com, 12 months). Stores your cookie choice, shared by qzila.com and tools.qzila.com.
  • Session cookies (necessary, on identity.qzila.com and the tools). Keep you signed in; they end when you sign out or the session expires.
  • Google Analytics cookies (such as _ga). Set only after you accept Analytics.
  • Google Ads cookies. Set only after you accept Marketing.

If you choose “Only necessary”, only the necessary cookies are set. To change your choice, use “Cookie settings” in the footer of any page.

4. Who else processes your data

We use these service providers, bound by data processing terms:

  • Amazon Web Services: hosting and storage in the EU (Frankfurt and Ireland regions).
  • Stripe: card payments, invoices and tax calculation.
  • Google: analytics and advertising, only with your consent.
  • Cloudflare: the Turnstile bot check on sign-up.

We also disclose data to public authorities where the law requires it, and to our professional advisers, such as accountants and lawyers, where needed. We do not sell personal data.

5. Transfers outside the EU

We keep the service's data in the EU. Stripe, Google and Cloudflare are international companies and may process some data outside the European Economic Area, notably in the United States. When they do, the transfer relies on the EU–US Data Privacy Framework, where the recipient is certified, or on the European Commission's standard contractual clauses.

6. How long we keep it

  • Account data and what you submit to the tools: for as long as you have the account. Items you remove are deleted, and some tools keep history for a set period, such as page snapshots for 12 months by default. After you close your account, we delete this data, except what the law requires us to keep.
  • Invoices and accounting records, including the usage behind them: 10 years, as required by Act No. 431/2002 Coll. on Accounting.
  • Checks without an account: only as long as needed to run the check and prevent abuse.
  • Emails with us: as long as needed to deal with the matter and any follow-up.
  • Cookie choice: 12 months. Analytics data: for the retention period set in Google Analytics.

7. Your rights

Under the GDPR you have the right to:

  • access your data;
  • have it corrected;
  • have it erased;
  • restrict its processing;
  • receive it in a portable format;
  • object to processing based on our legitimate interest;
  • withdraw your consent at any time, without affecting processing done before you withdrew it.

To use any of these rights, write to hello@qzila.com. We answer within one month.

You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

8. Security

Data is encrypted in transit. Passwords are stored only as hashes, and card data never reaches our servers. Access to production systems is limited to the people who run them.

9. Changes to this policy

We update this policy when what we do with data changes. The version number and date are at the top. We tell account holders about material changes by email.

10. Contact

adcore s.r.o.
Svätojurská 2, 902 01 Pezinok, Slovakia
Office: Dunajská 12, 811 08 Bratislava, Slovakia
Email: hello@qzila.com

Terms of Service →Pricing →Contact →