Your rows are yours.

qCRM stores what your org types in: contacts, companies, deals, activities, members, webhooks and an audit log of who changed what. It stores nothing it doesn't show you.

What we keep

Your account (email, name, a password hash, or a GitHub or Google account if this host offers those sign-ins), your sessions (expiry, IP and browser string, for your own session list), and your orgs' rows. Deploy logs drop query strings. We never log emails or row contents.

Where it lives

One Cloudflare D1 database for the hosted service, in Cloudflare's network. The desktop app keeps a sqlite file in your home folder and talks to no server unless you add a sync target.

Who can see it

Members of your org, by role. QNTBR's super admin account can list orgs and grant an admin when an owner is locked out; it is never a member and every use is in your audit log.

Take it or bury it

An owner downloads every row of the org as one JSON file from Settings (GET /api/orgs/:org/export). Anyone deletes their account, the orgs they own and all of their rows from Settings (DELETE /api/me). Both happen at once, not after a review.

Agents

An agent connected through MCP acts under an API key an owner made, with that owner's org and no more. Keys show their first eight characters and last use, and revoke at once.

Demo

The demo org is seeded with made-up people and is deleted within 24 hours of being made. Don't type anything real into it.

Questions: hello@qntbr.com