Privacy Policy

Effective 13 July 2026

This policy explains how QUIVRR collects, uses and shares information when you use quivrr.app, quivrr.surf and related QUIVRR services.

Information we collect

• Account and identity: authentication identifier, email address, display name and sign-in/session information supplied through Microsoft Entra External ID.
• Rider profile: details you choose to provide, such as region, ability, volume preferences, goals, home break, preferred brands, current boards and quiver information.
• Saved activity: saved boards, searches, comparison choices and other account features.
• Bodhi: messages you send, conversation context, recommendations and feedback needed to provide the surfboard assistant.
• Technical information: IP address, approximate region, device and browser details, requested pages, referral information, timestamps, diagnostics, security events and API logs.
• Local browser data: authentication state, theme, region, chat state and preferences stored using cookies, local storage or session storage.
• Advertising data: Google and its partners may receive device identifiers, IP address, page URL, browser information, cookie data and ad interaction information when advertising services load.
• Retailer interactions: QUIVRR records search and availability requests; a retailer receives information under its own policy when you follow an external retailer link.

How we use information

QUIVRR uses information to authenticate accounts; provide profiles, saved boards and quivers; personalise Bodhi; search catalogues and regional availability; maintain security; diagnose failures; improve services; measure usage; comply with law; and fund the service through advertising.

Advertising, cookies and consent

QUIVRR uses Google AdSense. Google may use cookies or similar technologies to deliver, measure and personalise ads, prevent fraud and limit repeated ads. Learn how Google uses information from sites that use its services and manage ad personalisation in Google Ads Settings. Where required, QUIVRR uses a Google-certified consent platform so you can accept, reject or manage advertising purposes.

Privacy and cookie settings

When information is shared

Information may be processed by service providers that operate QUIVRR, including Microsoft Azure and Entra for hosting and identity, Azure OpenAI/OpenAI services for Bodhi, Google for advertising, and technical providers supporting security and delivery. QUIVRR may also disclose information when required by law, to protect users and the service, or as part of a business reorganisation. QUIVRR does not sell personal information for money. Advertising-related disclosure may be treated as a “sale” or “sharing” under some privacy laws; available consent and opt-out controls apply.

Retention and security

QUIVRR keeps information only for as long as reasonably needed for the purposes above, account operation, security, dispute resolution and legal obligations. Retention varies by data type. Reasonable technical and organisational safeguards are used, but no online service is completely secure.

Your choices and rights

You can edit supported profile fields, remove saved items, sign out, manage browser storage and advertising choices, or request access, correction or deletion where applicable. Browser settings can block cookies, although authentication and saved preferences may then work differently. Privacy requests may be submitted through QUIVRR’s official support channel.

International processing and children

Information may be processed in countries other than your own, subject to applicable safeguards. QUIVRR is not directed to children under 13 and does not knowingly collect their personal information.

Changes

QUIVRR may update this policy as services or legal requirements change. The effective date above identifies the latest version.