Q agent: how it works and what data it processes

1. What Q is

Q is an AI agent that answers questions about QA10. It answers only from the content of qa10.io and names the source of each answer. It does not replace talking to the team. Check important information in the source it gives.

Q's voice is synthetic. This notice is given under art. 50 of Regulation (EU) 2024/1689 (the AI Act): you should know that you are interacting with an AI system.

Q does not take enquiries. If you want to ask about a quote or working together, Q will point you to the contact page or to hello@qa10.io.

2. Who is responsible for the data

The controller of the data processed by Q is:

Contact for data matters: hello@qa10.io.

3. What data we process

• The text of your question. Typed by you, or recognised from speech (see section 4). QA10 receives only text, not a recording.
• Your IP address as a hash (HMAC). We use it only in daily rate-limit counters, to protect Q from abuse. We do not store the IP address in plain form in them.

We do not ask for your name, email address or phone number. Do not type passwords, payment details, health data or other people's data.

4. Microphone and speech recognition

• You can always type. Voice is an extra, not a requirement.
• The microphone turns on only when you press and hold the button. Your browser may first ask for permission to use the microphone.
• Speech is turned into text by your browser's built-in speech recognition service, on its provider's terms. For example, Chrome uses Google and Safari uses Apple. QA10 does not choose that provider and does not receive the recording.
• For the terms of the browser's speech processing, see its provider.

5. Voice of the answers

Q's voice is generated by ElevenLabs. It receives the finished answer text prepared by QA10. That text does not contain your data.

6. How long we keep data

• A session with Q lasts at most 180 seconds.
• The content of the conversation is held only in server memory. It does not go to logs or to a database.
• The IP hash is used in daily rate-limit counters.

7. Cookies and browser storage

The Q widget does not use cookies or localStorage.

8. Legal basis

We process data under art. 6(1)(f) GDPR, that is, QA10's legitimate interest. That interest is:

• answering a question that you ask on your own initiative,
• protecting Q from abuse.

9. Recipients of data

Data may reach providers that supply parts of the service:

• your browser's provider, for speech recognition, if you use it (section 4),
• ElevenLabs, for turning the answer text into voice (section 5),
• the hosting providers on which the website and Q run.

Providers may process data outside the European Economic Area. Each provider describes its own terms.

10. Your rights

You have the right to access your data, to have it corrected or erased, and to restrict its processing. You also have the right to object to processing based on legitimate interest (art. 21 GDPR). Because the content of the conversation is held only in server memory and disappears after the session, we will usually have nothing to give you or erase.

Write to us at hello@qa10.io. You can also lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO).

11. Related documents

This page covers only the Q agent. The general rules on data processing at qa10.io are in the Privacy Policy, and cookies are covered in the Cookie Policy.