Privacy Policy

Last updated: June 2026

This document is provided for transparency. SkyLight is a limited liability company established under Law No. 72 of 2017 (Investment Law) and its Executive Regulations, Arab Republic of Egypt. Buyer support: contact@quote-lens.com · +20 101 992 8994.

SkyLight (a limited liability company under Law No. 72 of 2017, Egypt) is the data controller for personal data processed through Nazmiq (nazmiq.com). This Policy aligns with the EU/UK GDPR, the US CCPA/CPRA, and Egypt's Personal Data Protection Law (Law No. 151 of 2020).

1. Data we collect

Account data: email, authentication identifiers (via Firebase Authentication), and your subscription plan.
Content you upload: quotation PDFs/images, extracted data, and any projects/folders you create.
Usage data: comparisons run, quota counters, log/diagnostic data, IP address, device/browser info.
Payment data: handled by Paddle as Merchant of Record. We do not receive or store full card details.
Telegram link data: if you link Telegram, your Telegram user ID and its mapping to your account.
Cookies: a session cookie for login. We do not use third-party advertising cookies.

2. How we use data & lawful bases (GDPR Art. 6)

Purpose	Lawful basis
Provide the Service (extraction, comparison, storage)	Performance of a contract
Process payments & manage subscriptions	Contract / legal obligation
Enforce quotas, secure the Service, prevent abuse	Legitimate interests
Service / transactional emails	Contract
Comply with tax, accounting, legal obligations	Legal obligation

3. AI sub-processors — important

To deliver the core feature, documents you upload are transmitted to third-party AI providers for processing. Current sub-processors:

Provider	Purpose	Location
OpenRouter	LLM routing / comparison	United States
Google (Gemini)	Vision extraction	United States / EU
Groq	Fallback inference	United States
Anthropic	Chat / assistance	United States
Firebase / Google Cloud	Auth, database, storage, hosting	United States (us-central1)
Paddle	Payments / Merchant of Record	United Kingdom / EU

Each provider processes data under its own terms. Do not upload data you are not permitted to share with these providers.

4. International transfers

Some providers are outside your country (e.g. the US/EU). Where required, such transfers rely on Standard Contractual Clauses or equivalent safeguards offered by the relevant provider.

5. Retention

Account data: while active and for 90 days after closure, then deleted or anonymised.
Uploaded documents & extractions: until you delete them or close your account; deletable any time from the app.
Financial records: payment records are held by Paddle (Merchant of Record); our own corporate tax/accounting records are retained for 5 years as required by Egyptian tax law (Law No. 206 of 2020).
Logs: 90 days.

6. Your rights

Subject to your jurisdiction, you may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. EU/UK users may lodge a complaint with a supervisory authority. California residents may know, delete, correct, and opt out of "sale/share" — we do not sell personal data. Exercise any right via contact@quote-lens.com.

7. Security

We use reasonable technical and organisational measures (encrypted transport, access controls, isolated per-user storage). No system is perfectly secure; processing by third-party AI Providers is governed by their own security programs.

8. Children

The Service is not directed to anyone under 18 and we do not knowingly collect their data.

9. Changes

We may update this Policy; material changes will be notified in-app or by email. The "Last updated" date reflects the current version.

10. Contact

Privacy questions or requests: contact@quote-lens.com.