Privacy Policy

We collect information you provide when you create and manage an account, use the Reqnora mobile app or website, configure a project or integration, or submit a request through the Reqnora API. We also receive technical and security data when you use the service.

Collected information may include your name and email address; account and project identifiers and project metadata; API key hashes; request titles, messages, action labels and your approval or reply; device push tokens; notification and webhook delivery records; login and security events; timezone and notification preferences; and subscription status and transaction identifiers. Do not include sensitive personal information in request content unless it is necessary for your workflow.

We use account and technical data to authenticate users, operate and secure accounts, deliver requests and notifications, process approvals and replies, provide support, enforce quotas, prevent abuse, and maintain service records. We use subscription identifiers and status to manage plan entitlements and customer support. We do not use request content to train AI models.

Reqnora does not include or call a third-party AI model/service to analyze or generate content from your data. Reqnora is an approval inbox: a customer or an automation they configure may send request content to Reqnora through its API. That content is stored by Reqnora and shown to authorized project members and notification recipients.

We do not sell personal information. We share only the information needed to operate features you use, with service providers acting on our instructions: Expo's push notification service receives the push token and notification title/body to deliver mobile notifications; RevenueCat receives an app user identifier and purchase/subscription information to validate and synchronize entitlements; and our configured email delivery provider receives an email address and the message needed to send account verification or recovery codes.

If an account administrator connects a Slack channel, Reqnora sends that channel the request title, message, severity and available action labels so the team can review and respond in Slack. Slack then handles that information under its own privacy terms. A project administrator controls this optional integration and should only connect a channel authorized to receive the project content.

We do not send account or request data to OpenAI, Anthropic, Google Gemini, or another third-party AI service. If you configure an external AI agent or other integration to call the Reqnora API, that external service's own data handling is governed by its provider and your configuration; Reqnora does not initiate that transfer.

We require service providers to protect information they process for Reqnora and to use it only to provide their contracted services, consistent with this policy and applicable data-protection requirements. Providers may also process information under their own published privacy terms.

For in-app subscriptions, Apple processes payment. Reqnora does not receive your full payment card number.

We retain account and request information while needed to provide the service, maintain history and security records, resolve disputes, and meet legal obligations. You can delete your account from Settings; deletion removes or de-identifies associated information subject to limited records we must retain for security, billing, or legal purposes.

You can manage device notifications in the app and your device settings, revoke API keys, disconnect integrations, and request access or deletion by contacting reqnora.com@gmail.com.

Passwords and API keys are stored as one-way hashes. We use HTTPS for production traffic and access controls to protect account and request information. No internet service can guarantee absolute security.

Protect your password, API keys, session tokens, and device access. You can revoke API keys and enable authenticator two-factor authentication for approvals in account settings.