Your files and accounts stay yours.

Who we are

KiQHub Office — documents, spreadsheets and presentations at kiqhub.app — is a product of KiQ Apps. We are responsible for the personal data described here. Questions go to Kiq_Team@kiqhub.app.

What we keep

• Your account: your name, email address, a hash of your password (never the password itself), your plan, your language and a few settings. If you sign in with Google or Apple, we also keep the account id and email address they give us, so you can sign in again.
• Your files: documents, spreadsheets and presentations, their version history, comments and the pictures in them. File names and contents are encrypted at rest with AES-256-GCM; the key is kept apart from the database. The people who run the service see how much space an account uses, never file names or contents.
• Sharing: who you shared a file with, and the people in your circle.
• Usage counts: storage used and how many KiQ AI tokens you used — not what you asked or what the AI answered.
• Payments: your plan and whether it is paid. Card details go straight to Stripe; we never see or store your card number.

We keep this while your account exists. Files in Trash stay until you empty it or delete them forever.

Connected accounts

You can connect your own Google, Microsoft and Zoom accounts in the account menu › Connected accounts, and in Home › Meetings. You sign in on the service's own page: KiQHub never sees your password there. The service then gives KiQHub Office a sign-in (an access token and a refresh token) for the permissions you allowed.

What we store for each connected account

• The access and refresh tokens, encrypted with AES-GCM using a key derived from the server's secret key, and bound to your KiQHub account — a copied token does not open for anyone else.
• The email address and name of the connected account, to show you which account is connected.
• The permissions you granted and when the access token expires.
• For Zoom: a keyed hash of your Zoom user id — not the id itself — so we can find and delete your connection when Zoom tells us you removed the app.

What we do not store

Your Zoom meetings, registrants, cloud recordings, transcripts and AI Companion summaries, your calendar events and your Drive or OneDrive file lists are fetched from the service when you open them, passed to your browser and not kept on our server. A file you open from Google Drive or OneDrive, and a document you make from a Zoom transcript or summary, becomes a KiQHub file in your account — because you asked for it — and you can delete it like any other file.

The tokens stay on our server; your browser only receives the results. The one exception is the Google file picker, which runs in your browser and gets a short-lived Google access token limited to the files you pick or save with KiQHub Office.

We use data from connected accounts only to do what you ask in KiQHub Office. We do not share it with other users, sell it, use it for advertising or use it to train AI models.

What each permission is for

Disconnecting and deleting

• In KiQHub Office: account menu › Connected accounts › Disconnect. We revoke the access at Google and Zoom and delete the stored tokens immediately. Microsoft has no way for an app to revoke itself, so after disconnecting, remove KiQHub Office in your Microsoft account's app settings — the app shows you the link.
• In Zoom: in the Zoom App Marketplace, choose Manage › Added Apps and remove KiQHub Office. Zoom tells us right away and we delete your stored Zoom connection.
• At Google or Microsoft: removing KiQHub Office from the apps with access to your Google Account or your Microsoft account stops our tokens from working; we delete them the next time they are used, or when you disconnect.
• Your whole account: write to Kiq_Team@kiqhub.app from your account's email address and we delete your account, your files and your connected accounts. If encrypted backups are switched on, older copies of the database are removed as the backups rotate, within 12 months.

KiQ AI

When you ask KiQ AI to do something, the text you asked about is sent to the AI provider that runs KiQ AI for us, which sends back the answer. We keep no prompts and no answers, only how many tokens you used. KiQ AI reads a file only when you ask it to.

Companies that help us

A hosting company runs our server. Stripe handles payments. Migadu sends the service's emails (sign-up codes, password resets and notes about your plan). An AI provider answers KiQ AI requests. If cloud storage is switched on, an S3-compatible storage company keeps copies of pictures and backups — encrypted before they leave our server. Each of them gets only what it needs for its part. Google, Microsoft and Zoom receive requests only for the accounts you connected, when you use them.

Cookies and your device

We use a sign-in cookie that keeps you signed in and a language cookie. The app keeps your settings on your device and, if you switch on Work offline, copies of your files so you can open them without a connection. We use no advertising or tracking cookies.

Your rights

You can see and correct your account details, download your files in Word, Excel, PowerPoint and PDF formats at any time, and ask us for a copy of your data or to delete it. Write to us and we will help. If you live in the European Union or the United Kingdom, you can also complain to your data protection authority.