Privacy Policy
Last updated: February 17, 2026
1. Who We Are
Quinn FAQ is a WordPress plugin developed and distributed by Position5. Our licensing and payment infrastructure operates at api.position5.org. This Privacy Policy covers data collected through:
- The quinnfaq.com website ("Site")
- The Quinn FAQ WordPress plugin ("Plugin")
- Our licensing API at api.position5.org
2. Information We Collect
2a. When You Purchase a License
When you purchase a Pro or Pro+ plan, we collect:
- Name — your first and last name, as provided during checkout
- Email address — for license delivery, receipts, and account communication
- Payment information — processed and stored exclusively by Stripe. We never see or store your full credit card number.
- Stripe Customer ID — to link your payments to your license
2b. When You Activate the Plugin
When you activate a license on a WordPress site, we collect:
- Site URL (stored as a normalized SHA-256 hash)
- Instance ID — a unique identifier for the WordPress installation
- IP address and user-agent at the time of activation
This data is used solely for license validation and to enforce activation limits. We do not use it for advertising or sell it to third parties.
2c. When You Generate FAQ Content
When you use the Plugin to generate FAQs, the text content of the pages you select is transmitted to our API, which forwards it to Anthropic (Claude) for AI processing. Specifically:
- Your page content is sent to our API for the sole purpose of FAQ generation
- We do not store your page content after the generation request completes
- Anthropic processes your content under their own Privacy Policy and data retention policies
- Generated FAQ content is returned directly to your WordPress site and stored locally in your database
2d. When You Visit This Site
We do not use cookies for tracking or analytics on quinnfaq.com. We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. The Site is a static HTML site with no user tracking.
3. How We Use Your Information
- Deliver and validate your license key
- Process payments and send receipts via email
- Enforce activation limits per your plan
- Send subscription-related emails (renewal confirmations, payment failures, cancellations)
- Provide customer support when you contact us
We do not send marketing emails, newsletters, or promotional content unless you explicitly opt in.
4. Third-Party Services
We use the following third-party services:
Stripe — Payment processing. Stripe receives your payment details and email. See Stripe's Privacy Policy.
Anthropic (Claude API) — AI content generation. Your page content is transmitted for FAQ generation only. See Anthropic's Privacy Policy.
Resend — Transactional email delivery (license keys, receipts, payment notifications). See Resend's Privacy Policy.
DigitalOcean — Database hosting. See DigitalOcean's Privacy Policy.
5. Data Retention
- Customer records (name, email, Stripe ID) — retained as long as your account is active or as required for tax/legal compliance
- License records — retained for the life of the license and a reasonable period after expiration for support purposes
- Transaction records — retained as required by applicable financial regulations
- Activation records — retained while the license is active; deactivated site records may be purged periodically
- Page content submitted for AI generation — not retained after the request completes
6. Data Security
We take reasonable measures to protect your data:
- All API traffic is encrypted over HTTPS/TLS
- License keys are cryptographically signed using Ed25519
- API keys are stored as SHA-256 hashes (never in plain text)
- Admin passwords are hashed with Argon2
- Database connections use SSL and connection pooling
- Webhook payloads are verified via Stripe HMAC-SHA256 signatures
No system is 100% secure. We cannot guarantee absolute security but we follow industry best practices.
7. Your Rights
You have the right to:
- Access — Request a copy of the data we hold about you
- Correction — Request correction of inaccurate data
- Deletion — Request deletion of your data (subject to legal retention requirements)
- Portability — Request your data in a machine-readable format
To exercise any of these rights, email officialquinnfaq@gmail.com. We will respond within 30 days.
8. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the email associated with your license. The "Last updated" date at the top reflects the most recent revision.
10. Contact
For privacy-related questions or data requests, contact us at:
- Email: officialquinnfaq@gmail.com