Cookie Policy & GDPR Compliance

Cookie Policy

1. Introduction

This Cookie Policy explains how ResQ AI ("we," "us," or "our") uses cookies and similar technologies when you visit the ResQ platform ("Website") or use our AI-powered customer support service ("Service").

2. What Are Cookies

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit websites. They are widely used to make websites work efficiently, provide basic functionality, and collect information about user interactions.

3. Types of Cookies We Use

Category	Purpose	Duration
Essential/Necessary	These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and account access. You cannot opt out of these cookies.	Session/Persistent
Functional	These cookies enable us to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.	Persistent
Performance/Analytics	These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. They help us improve our website's functionality.	Persistent
Targeting/Advertising	These cookies may be set through our site by our advertising partners. They may be used to build a profile of your interests and show you relevant ads on other sites.	Persistent

4. Specific Cookies Used

The following specific cookies may be used on the ResQ platform:

• session: Secure HTTP-only cookie used to maintain your authentication session and security state.
• CSRF-TOKEN: Security cookie to prevent cross-site request forgery attacks.
• _ga, _gid, _gat: Google Analytics cookies that help us understand how you use our website.
• user_preferences: Stores your dashboard preferences and customization settings.

5. Third-Party Cookies

Some cookies are placed by third parties on our behalf. These include:

• Google Analytics: For website analytics and performance monitoring.
• LemonSqueezy: For processing payments and subscription management (only present during checkout and billing).

6. Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

• Delete cookies from your device
• Block cookies by activating the setting on your browser that allows you to refuse all or some cookies
• Set your browser to notify you when you receive a cookie

Please note that if you choose to block or delete cookies, some features of our service may not function correctly.

GDPR Compliance

1. Data Controller

ResQ AI is the data controller of the personal information collected when you use the ResQ service. Our contact details are:

• Email: support@resq-ai.com
• Website: https://www.resq-ai.com

2. Data Protection Principles

We adhere to the principles set out in the GDPR by:

• Processing personal data lawfully, fairly, and transparently
• Collecting personal data only for specified, explicit, and legitimate purposes
• Ensuring that personal data is adequate, relevant, and limited to what is necessary
• Keeping personal data accurate and up to date
• Storing personal data only as long as necessary
• Ensuring appropriate security, integrity, and confidentiality

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary for the performance of our contract with you, including subscription management and service delivery
• Consent: Where you have given clear consent for specific processing activities such as voice recordings and team data sharing
• Legitimate Interests: Where processing is necessary for our legitimate interests such as service improvement, security, and fraud prevention
• Legal Obligation: Where processing is necessary to comply with a legal obligation including audit logging and data retention requirements

4. Your Data Rights

Under the GDPR, you have the following rights:

• Right to Access: You can request a copy of your personal data
• Right to Rectification: You can request correction of inaccurate personal data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request restriction of processing in certain circumstances
• Right to Data Portability: You can request your data in a structured, machine-readable format
• Right to Object: You can object to certain types of processing, such as direct marketing
• Rights Related to Automated Decision Making: You can request human intervention in automated decisions

5. Data Security Measures

We implement appropriate security measures including:

• Encryption of personal data during transmission and storage using industry standards
• Regular security assessments and penetration testing
• Multi-layered access controls and authentication measures
• Regular backups and disaster recovery procedures
• Comprehensive audit logging of all data access and modifications
• Staff training on data protection and security practices
• Secure session management with HTTP-only and secure cookie attributes

6. International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure that adequate safeguards are in place through:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules where applicable
• Transfers to countries with an adequacy decision from the European Commission

7. Data Breach Procedures

In the event of a personal data breach, we will:

• Notify the relevant supervisory authority within 72 hours, where feasible
• Notify affected data subjects without undue delay when the breach is likely to result in a high risk to their rights and freedoms
• Document the breach, its effects, and the remedial action taken

8. Complaints

If you have concerns about how we handle your personal data, you can:

• Contact us directly at support@resq-ai.com
• Lodge a complaint with your local data protection authority

Last Updated: July 1, 2025