Privacy Policy

2. How We Use Your Information

We collect and log your Personal Information to:

•    Provide and manage your account and Services.
•    Authenticate and authorize your access to the Services.
•    Communicate support information.
•    Carry out statistical analysis of the Services and their usage, to improve them.
•    Ensure system security and prevent fraud.
•    Comply with legal and contractual obligations.

3. Lawful Basis for Processing

We process your data under one or more of the following legal bases:

•    Performance of a contract: To provide the Services our customers have subscribed to.
•    Legitimate interests: To maintain, improve, and secure our Services.
•    Legal obligations: To comply with applicable law and regulatory requirements.

When we obtain your Personal Information through one of our customers, we will only use that information for purposes of our Services to that customer, on the customer’s behalf, and in accordance with our contract with such customer.

4. Information Sharing

We may disclose aggregate statistics about users of the Services in order to describe our Services to prospective partners, sponsors and other reputable third parties and for other lawful purposes, but these statistics will include no Personal Information.

We may disclose your Personal Information:

• as required by law, such as to comply with a subpoena, or official investigations or legal proceedings initiated by governmental and/or law enforcement officials, as well as private parties, including, for example, in response to subpoenas, search warrants, court orders, or other legal process;

• when we believe in good faith that disclosure is necessary to protect Our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;

  to any other third party with your prior consent;

• as our business changes, we may buy or sell various assets. In the event all or a portion of the assets owned or controlled by us, our parent or any subsidiary or affiliated entity are sold, assigned, transferred or acquired by another company (including, without limitation, via merger), the Personal Information and information from and/or about our Service users may be among the transferred assets;
• We reserve the right to use, transfer, sell, and share aggregated, anonymous data about our users as a group for any lawful business purpose, such as analyzing usage trends and seeking compatible advertisers, sponsors, clients and customers;

• your information, including Personal Information, may be transferred and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction;

• to service providers we use to provide certain services in support of the Services. These service providers may need to have access to your Personal Information in order to provide their services; and

4.1.    Information Disclosed with respect to A Viewer:

For purposes of this Section, a “Viewer” means a person or entity that is not a QorusDocs customer but who You have allowed on the Services to view Your Personal Information that we process as part of our Services under our Data Processor Addendum or other data processing terms in place between QorusDocs and each customer.
You may request that a Viewer provide you with information via the Services in order for the Viewer to view your content. In particular, in order to access any of your content that you want to share with the Viewer, the Viewer may be asked to provide their email address upon clicking on a ProposalHub User’s link. When they do, we store this information on your behalf. In the event the Viewer provides you with such information, the Viewer provides such information under their own responsibility. 

We are not responsible for the any information provided to you by a Viewer, and when that information is shared with us, we only use it with your permission and solely in order to provide the Services and related support and assistance. If the Viewer no longer wants to be contacted by you, the Viewer shall contact you directly to make such request.  
If a Viewer obtains viewing rights to your content with respect to the above, we will also share with you the activities the Viewer performs on your content (such as whether the Viewer reads the content or created new documents from such content).

4.2.    Information Disclosed When Working with Provider Content:

You may elect to view content from third party providers (when adding content via the Services catalog or by entering a content event with any organization you are partnering with) on our Services (“Provider Content”).  In such case your email address will be provided to such provider and any partner of the provider who provides the Provider Content to you (any such provider partner who will be providing the Provider Content will be specified on the Services).
We will also share with the provider and the provider partner (if any) the activities you perform on the Provider Content (such as whether you read the Provider Content or created new documents from such Provider Content). 

4.3.    Sub-processors

A list of Authorized Sub-Processors may be found at https://www.qorusdocs.com/subprocessors/.

5. Data Retention

We will retain Personal Information we process on behalf of our customers for as long as needed in order to provide services to users of our Services. Customer data (including Personal Information) is archived upon termination of the service agreement with the related customer, and permanently deleted 30 days thereafter.

We will also retain and use this Personal Information as necessary to comply with Our legal obligations, resolve disputes, and enforce Our agreements.

6. Data Subject Rights

When using our Services as a registered user, you may review the Personal Information provided in the Services account and change certain elements such as Time Zone, Language Preference, and Country. First name, Last name, State, and Email Address cannot be updated in our Services. To modify these, please contact the customer that collected your personal information in connection with your use of our Services.

If you no longer desire to use our Services, you may request for your account and data to be deleted by sending an email to security@qorusdocs.com

In some cases, we may retain copies of your information as described in the Section entitled “Information Sharing” above. 

Depending on your location, you may have certain rights with respect to your personal information under applicable laws.

If you are a EU or UK resident you have the following rights under EU or UK law, as applicable:

•    Access, correct, or delete your personal data.
•    Withdraw consent where applicable.
•    Object to or restrict processing.
•    Data portability
•    Lodge a complaint with a supervisory authority (e.g., the UK ICO or local EU data protection agency)

If you are a California resident, please see the Note for California Residents in Section 1 above, which sets out the categories of personal information we process and how to exercise your rights.

Connecticut Residents
Connecticut consumers may send a Universal Opt Out Mechanism (UOOM) or browser level GPC signal to block use of their email for targeted ads or data sales. We recognize and act on such signals automatically. Confirmation of your choice arrives within 45 days.

Florida Residents
Floridians can opt out of (i) the sale of their personal data, (ii) targeted advertising, and (iii) certain profiling. Our footer link “Florida Privacy Choices” provides a one click method to exercise these rights; our processing of opt out requests completes in ten business days.

Illinois Residents
We do not link biometric identifiers—such as voiceprints gathered by call center IVR—to marketing email lists unless we first obtain the written release required by BIPA and disclose our retention schedule. We never sell or profit from biometric data.

Iowa Residents
Under the ICDPA you may opt out of any processing of your email address for targeted advertising or data sales. Requests are acknowledged immediately and fulfilled within 45 days. Since Dec 31st, 2025, we also accept recognized UOOM signals.

Missouri Residents
We comply with Missouri’s unsolicited email rule that subject lines for standalone adverts begin with “ADV:”. Each email includes a valid return address or toll free number; a single opt out request stops all further messages.

New Jersey Residents
New Jersey residents may opt out of the sale of personal data, targeted advertising, and profiling. We must honor universal opt out signals and process manual opt out requests within 15 days. Sensitive data (e.g., health or precise location) is used for marketing only with your explicit consent.

North Carolina Residents
All marketing claims in our emails must be truthful, not misleading, and substantiated to comply with the law. Any false or deceptive statement is prohibited, and unsubscribe requests are processed within CAN SPAM’s ten business day window.

Texas Residents
Texans have the right to opt out of the processing of personal data for targeted advertising, sale, or certain automated profiling. Our “Texas Privacy Choices” link and recognized browser level UOOM signals honor these preferences. Appeals of request denials may be submitted via email and will be reviewed within 45 days.

Wisconsin Residents
Under Wis. Stat. § 100.18 it is unlawful to make untrue, deceptive, or misleading representations in promotional email. We therefore ensure subject lines and body content accurately reflect any offer and disclose all material terms. Opt out requests are completed in ten business days.

Residents of Other U.S States
As additional state privacy laws take effect, we will extend the same opt out tools described above and update this policy at least 30 days before any new law’s enforcement date. Where no specific statute applies, we still avoid unfair or deceptive practices under each state’s consumer protection law and process email opt outs within CAN SPAM timelines.

To exercise these rights, please contact security@qorusdocs.com

7. Testimonials

With your consent we may post your testimonial along with your name.

8. Data Storage and Security

QorusDocs upholds stringent security protocols and procedures to safeguard personal information, aligning with regulatory standards such as the GDPR. Technical measures encompass both physical and electronic protections, including encryption and access restrictions. Organizational measures pertain to the implementation of policies and procedures that guarantee secure data handling by employees, consistent with privacy legislation. 

For more information, refer to: https://www.qorusdocs.com/securitymeasures/ 

QorusDocs data is hosted on a secure Microsoft Azure infrastructure located in the United States. 

All data transfers are encrypted in transit and at rest using TLS and AES standards.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your jurisdiction.

We ensure that all cross-border transfers comply with applicable data protection laws through the use of Standard Contractual Clauses or other approved mechanisms.

10. Resolving Privacy Issues

Should you have any concerns regarding this Privacy Policy please contact us at security@qorusdocs.com and We will do our best to resolve your issue.

Where we are unable to satisfactorily address your queries or concerns, you have the right to raise your complaint with your national or state regulator for data protection matters. 

11. Contact Information

QorusDocs (Qorus Software Inc.)
3120 139th Ave SE, Suite 500,
Bellevue, WA, 98005

Email: security@qorusdocs.com 

Website: https://www.qorusdocs.com 

Tel: +1 425 708 8461

For product support, including questions about this Privacy Policy or your personal information, visit our Help Centre at https://helpcenter.qorusdocs.com.