Querywright Privacy Policy
Effective Date: September 18, 2026
This Privacy Policy explains how A&C, LLC, operator of Querywright, collects, uses, stores, and discloses information when you use querywright.com, app.querywright.com, Querywright’s hosted MCP service, and related services.
1. Information We Collect
We collect information you provide directly, information generated when you use Querywright, information observed from public websites at your direction, and limited information received from service providers.
Account and contact information
This may include:
- email address;
- authentication identifiers;
- account and customer identifiers;
- confirmation and recovery status; and
- account status and related metadata.
Billing and subscription information
This may include:
- Stripe customer, Checkout, subscription, invoice, and price identifiers;
- billing status;
- billing-period information;
- payment and reconciliation status; and
- related accounting records.
Stripe processes complete payment-card details directly. Querywright does not need to store your complete payment-card number.
Research and product information
This may include:
- website URLs submitted for Research;
- publicly available website content observed during Research;
- crawl and technical-response information;
- sitemap, robots, link, and page observations;
- search and keyword inputs;
- measured-demand data;
- Research evidence and snapshots;
- strategy and approval artifacts;
- generation context;
- reviewed copy; and
- verification results.
Connection and authorization information
This may include:
- MCP grants;
- connected AI-client identifiers;
- authorization records; and
- technical metadata needed to connect Querywright to an AI service you authorize.
Technical, usage, and security information
This may include:
- IP address;
- timestamps;
- request metadata;
- browser or device information;
- session identifiers;
- error and diagnostic information;
- security events; and
- service-performance information.
Communications
If you contact us, we may collect the content of your support, legal, privacy, or business communications.
2. Information We Do Not Intentionally Request
Querywright is a professional SEO product and is not designed to collect sensitive personal information such as government identification numbers, health information, biometric information, precise geolocation, or information about children.
Please do not intentionally submit sensitive personal information unless it is genuinely necessary and you have a lawful basis and authority to do so.
Public websites researched at your direction may incidentally contain information about individuals. Querywright treats those observations as part of the requested website Research.
3. Sources of Information
We may obtain information:
- directly from you;
- from public websites you ask Querywright to research;
- from connected AI services at your direction;
- from Stripe, Supabase, Resend, DataForSEO, Cloudflare, and other service providers used to operate Querywright; and
- from security and operational systems used to protect and maintain the service.
4. How We Use Information
We use information to:
- provide and operate Querywright;
- authenticate users and maintain sessions;
- maintain customer isolation and authorization;
- perform website Research;
- measure search demand;
- retain evidence and workflow history;
- create and retrieve customer-scoped artifacts;
- connect Querywright to authorized AI clients;
- manage subscriptions and billing;
- send transactional account and security emails;
- prevent abuse and fraud;
- secure and troubleshoot the service;
- maintain provider-cost and accounting records;
- comply with legal obligations; and
- improve the reliability and functionality of Querywright.
We do not use customer provider costs as a separate customer billing meter under the current Founding Beta offer.
5. Public Website Research
Querywright is designed to research publicly accessible websites.
When you ask Querywright to research a public URL, the service may retrieve and retain information that is publicly available at that URL, including page content, metadata, links, HTTP response information, robots or sitemap information, and related observations.
Public websites may contain information about individuals. Querywright may therefore incidentally retain personal information that a third party has made publicly available as part of Research evidence.
6. Connected AI Services
When you connect Querywright to an AI service such as Claude or ChatGPT, information returned by Querywright through MCP may be transmitted to and processed by that AI provider at your direction.
Those services are independently operated and have their own terms, privacy policies, retention practices, and account settings.
Querywright does not control how an independently operated AI provider processes information after it is transmitted through your authorized connection.
7. Service Providers and Disclosures
We disclose information to service providers when reasonably necessary to operate Querywright.
Current categories and examples include:
- Cloud infrastructure and networking: Cloudflare;
- Authentication and database infrastructure: Supabase;
- Payment processing: Stripe;
- Transactional email delivery: Resend;
- Search and keyword measurement: DataForSEO; and
- AI services: the AI provider you choose to connect, such as Claude or ChatGPT.
These providers may process information on our behalf or under their own terms, depending on the service and context.
We may also disclose information when reasonably necessary to:
- comply with law or legal process;
- investigate fraud, abuse, or security incidents;
- enforce our agreements;
- protect users, A&C, LLC, or third parties; or
- complete a merger, acquisition, financing, reorganization, or sale of business assets.
8. No Sale or Targeted Advertising
Querywright does not sell personal data for monetary consideration.
Querywright does not currently use personal data for targeted or cross-context behavioral advertising.
If this practice changes, we will update this Privacy Policy and provide any choices required by applicable law before using personal data in that manner.
9. Payment Information
Payments are processed by Stripe.
Stripe may collect and process payment-card details and other billing information directly.
Querywright receives billing and subscription information needed to determine payment status, subscription periods, entitlement, and account state.
10. Transactional Email
Querywright uses transactional email for account confirmation, confirmation-email resend, password recovery, security, and similar service functions.
Transactional authentication email currently uses Supabase authentication infrastructure and Resend delivery.
These messages are operational and are not marketing communications.
11. Cookies and Session Technologies
Querywright uses cookies and related browser mechanisms that are necessary to operate and secure the service.
These may include authentication cookies, refresh-session cookies, recovery-session cookies, deletion-status cookies, and similar security state.
Third-party hosted services such as Stripe may use their own cookies subject to their own privacy practices.
Querywright does not currently use these technologies for cross-site targeted advertising.
12. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide Querywright, maintain legitimate business and security records, meet accounting and legal obligations, resolve disputes, and enforce agreements.
Active customer product data may be retained while an account remains active.
When you permanently delete your account, Querywright removes customer-owned product data covered by the deletion workflow, including customer-scoped sites and product history, subject to limited retention described below.
We may retain limited pseudonymous records necessary for:
- financial accounting and payment reconciliation;
- fraud prevention and security;
- contractual and dispute records;
- deletion integrity and audit history; and
- permanent Founding-seat accounting.
Provider accounting may be retained in de-identified or disassociated form after customer deletion so that Querywright can preserve accurate cost and operational records.
Some deleted information may remain temporarily in backups until those backups are overwritten, expire, or are replaced through ordinary backup-management processes.
External providers may retain information under their own policies and legal obligations.
13. Account Deletion
You can initiate permanent account deletion from Querywright Settings.
Deletion ends normal Querywright access and connected AI access.
The deletion workflow is designed to remove customer-owned product records and the associated Supabase authentication identity after required billing and cleanup steps are completed.
Some limited financial, security, accounting, contractual, deletion, and Founding-cohort records may remain where reasonably necessary.
Deleting your Querywright account does not automatically delete information held independently by Stripe, an AI provider, or another third party under that party’s own obligations or policies.
14. Security
We use administrative, technical, and organizational safeguards designed to protect information.
These include authenticated access controls, customer-scoped authorization, database isolation controls, secure session handling, encrypted network connections, restricted service credentials, and related technical measures.
No system can guarantee absolute security, and we cannot guarantee that unauthorized access or security incidents will never occur.
15. Your Privacy Rights
Depending on where you live and whether applicable privacy law covers the relevant processing, you may have rights to:
- confirm whether we process your personal data;
- access personal data associated with you;
- correct inaccurate personal data;
- request deletion;
- obtain a portable copy of certain data;
- obtain information about how data is used or disclosed;
- opt out of certain forms of sale, targeted advertising, or profiling where applicable; and
- exercise other rights provided by applicable law.
Querywright does not currently sell personal data or use personal data for targeted advertising.
Querywright provides self-service account deletion for account and customer-owned product data.
For privacy requests that cannot be completed through the product, contact:
We may need to verify your identity before completing a request.
Some records may be retained where permitted or required for financial, legal, security, fraud-prevention, contractual, or other legitimate purposes.
Maryland residents may have rights under the Maryland Online Data Privacy Act, subject to that law’s scope, thresholds, and exceptions.
16. Appeals
Where applicable law gives you a right to appeal our response to a privacy request, you may submit an appeal by emailing:
Please state that the message is a privacy appeal and identify the earlier request or decision you are appealing.
17. Children
Querywright is intended for adults and is not offered to people under 18.
We do not knowingly provide Querywright accounts to children.
If we learn that an account was created in violation of this age requirement, we may close the account and take appropriate steps regarding associated information.
18. International Processing
Our providers may process information in the United States and other jurisdictions where they operate.
Where applicable law requires specific protections for an international transfer, we will use an appropriate lawful mechanism for that transfer.
19. Changes to This Privacy Policy
We may update this Privacy Policy as Querywright, our providers, or applicable legal requirements change.
If a change is material, we will provide reasonable notice through the service, email, or another appropriate method where required by law.
20. Contact
Querywright is operated by:
A&C, LLC
Privacy, legal, and data-rights inquiries: