Privacy

Who we are

Quota is a product of Syrakon, the trade name of Pasqual Peñalver Collado, a natural person based in Spain. Tax ID and postal address are in the legal notice. For anything about your data, write to quota@syrakon.com.

Two roles

We are the controller for the data about you as a customer: your account, your billing and your support emails.

We are your processor for the traffic that goes through your node. You decide what your API does and who calls it, so you are the controller of your end users' data. We process it only to run your node, on your instructions, under a data processing agreement (Article 28 GDPR). Ask for it at quota@syrakon.com.

What we collect

Account: your email address, the name you give us, and the passkeys and email sign-in links you use.

Billing: Paddle handles the payment. We receive your name, email, country, VAT number if you give one, and the state of your subscription. We never see or store your card details.

Support: the emails you send us and our replies.

Our own logs: what our servers record to keep the service running and secure.

What your node records

For each request, your node keeps: the time, method, path and query string, status code, latency, bytes in and out, the client's IP address, user agent and referer, the country and city derived from the IP, and what the protection layer decided (the rule that matched and whether the caller looked like a person, a bot or an AI).

It does not store request bodies or response payloads. Do not put secrets or personal data in query strings: they are recorded with the path.

Each customer's data lives in a database file of its own. We do not sell it, share it, use it for advertising, or combine it across customers.

Why, and on what basis

To provide the service you signed up for (contract).

To bill you and keep billing records (contract and legal obligation).

To answer you when you write to us (contract).

To keep the service secure and prevent abuse (legitimate interest).

To email you about your node: alerts, monthly reports and changes to these terms (contract). We do not send marketing email.

Where it lives, and who helps

Your node, its data and our databases run in Gravelines, France, in the European Union. Three companies help us run Quota:

Your traffic data stays in the EU. Only billing data reaches Paddle, and only the email address and the content of our emails reach Resend. If this list changes, customers with a DPA hear from us in advance.

How long we keep it

When you close your account, your node and its data are deleted. Billing records stay for the period the law requires.

Your rights

You can ask us for access to your data, to correct it, delete it, restrict it, take it with you or object to how we use it. Write to quota@syrakon.com and we answer within one month.

If you are an end user of one of our customers' APIs, ask that customer first: they decide what happens to your data, and we help them answer you.

You can also complain to the Spanish data protection authority, the AEPD, or to the authority where you live.

Cookies

quota.at sets no cookies. The panel at app.quota.at uses only the cookies it needs to keep you signed in. No advertising, no third-party trackers.

To count visits to quota.at we use our own analytics, which runs on our servers in Gravelines. It sets no cookies and stores no IP address: a visitor is counted with a code that changes every day and cannot be traced back to you. We see pages, referrers, campaign tags, countries and browser types, never who you are.

Changes

If we change this policy in a way that matters, we email you at least 30 days before it takes effect. Small fixes, like typos, show up here with a new date.