Legal
The pre-production notice, how we handle your data, and the terms for this website. Last updated .
qlaas is pre-production. Machines shown are simulated, and the WorldAuth Gate is tested reference code, not yet a hosted security boundary. Nothing here is a safety function. A Receipt proves authorisation, not safety or lawfulness.
qlaas is a non-safety supervisory layer. It sits above the manufacturer's certified safety controller and never replaces the e-stop. Regulatory material on this site is not legal advice.
This notice explains how we use personal data collected through qlaas.co.uk and the qlaas console, under the UK GDPR and the Data Protection Act 2018. We don't sell personal data, and we don't use it for automated decision-making.
qlaas is a trading name of [OWNER TO CONFIRM: registered company name], part of UIE Group. The controller of your personal data is [OWNER TO CONFIRM: registered company name], the business behind qlaas.co.uk. To contact us about your data, email hello@qlaas.co.uk or use the contact form.
Supabase stores our data in the EU (Ireland), which the UK recognises as adequate. Vercel, Stripe and Resend may process data in the United States. Where they do, the transfer is covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by the UK Extension to the EU-US Data Privacy Framework where the recipient is certified.
You have the right to access your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email hello@qlaas.co.uk or use the contact form. We reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab) or on 0303 123 1113. We'd appreciate the chance to put things right first.
This section covers hosted Qlaas DMI lines and the Verified Agent Lane. It adds to the privacy notice above; the service terms and refunds page sit beside it. A self-hosted line runs on your own server and we process nothing from it.
[OWNER TO CONFIRM: registered company name], trading as qlaas (ICO registration ZC210540), is the controller for your account, billing and for running the hosted service. The owner of a line is the controller for what their line collects from callers and agents: they set the policy, choose whether to record, and own the receipts. We process that data on the owner's instructions as their processor, under the service terms. If you called a line or sent an agent to one and want to use your rights, contact the line's owner first; if you cannot, contact us and we will pass it on or help.
A screened call starts with a short spoken and written statement that an automated assistant is taking the call for the owner, that the caller's words are transcribed for the owner, and that the owner can hear them. Where the owner has turned recording on, the statement says so. The owner must not remove it. An agent that connects to a line is told the same in the manifest and the first response, and an operator on the Verified Agent Lane must in turn say that it is an agent and name its principal.
We do not sell personal data from any line, do not use caller or agent data to train models, and do not use it for automated decisions with legal or similar effects on callers. The screening answer is a routing step for the owner, who takes the call or not.
An owner can change these periods for their line, or delete a transcript or recording at any time. When a line ends we suspend it and its data stays on the server, so its owner can still export it. Deleting an ended line is not yet automatic: we delete it when its owner asks. When we delete a line we keep a copy for its owner to export for 30 days, then delete that too.
Hosted lines run on a IONOS server in the UK or the EU, both of which the UK recognises as adequate. Stripe, Resend and, if an owner turns it on, Anthropic may process data in the United States under the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework where the recipient is certified.
qlaas is for people aged 14 and over. When someone sets up an account or a line we ask for their birth month and year and their country, work out whether they are a teen (14 to 17) or an adult, and keep only that group and the country. We do not keep the birth month or year, and we keep nothing about anyone we cannot admit because they are too young. Teen lines have higher privacy by default: no listing, no contact from strangers, no non-essential analytics, no marketing, no profiling and no precise location, and these cannot be switched off. Purchases are made by an adult. See Age and young people and Staying safe. We will carry out a data protection impact assessment before opening sign-up to the public.
If you called a line, you have the same rights set out above: access, correction, erasure, restriction, objection and portability. Ask the owner, whose contact details are on their door, or email hello@qlaas.co.uk or use the contact form and we will help. We reply within one month. You can complain to the ICO at any time.
A self-serve Replay audit reads your CSV in your browser. The raw log is processed on your device and is never uploaded to us.
When the audit finishes, you choose whether to save the report. A saved report holds aggregate counts of what would have been accepted, held or declined (by rule, by machine and for the most frequent action and resource pairs), suggested changes, and the starter policy inferred from your log. That policy includes your machine IDs and, for each machine, up to 40 action names and 40 resource names from the log, such as zones, doors and docks. It never holds the raw rows.
If you save it, we email you a link to confirm your address; we don't follow up until you click it. Saved reports are deleted automatically 180 days after they are saved. If you don't save, nothing is kept.
If you ask us to run the audit for you, we agree with you how the export is sent, stored and deleted before you send anything, and we use it only to produce your report.
This site sets no cookies. Visit and performance measurement (Vercel Web Analytics and Speed Insights) is cookieless.
If you use the motion switch in the footer, your choice is kept in your own browser's local storage so the site remembers it. It is never sent to us. If you pay by card, Stripe's checkout page sets its own cookies under Stripe's policy.
By using this website you accept these terms. The site is information about qlaas, a pre-production product, and we may change it at any time.
Site Authority prices on this site are for businesses: they are in GBP, exclude VAT and are indicative. Qlaas DMI prices are the total price a consumer pays, including any VAT. Submitting an order is a request, not an accepted order: a contract forms only when both parties sign an order form. Qlaas DMI is the exception: a hosted line, the Verified Agent Lane and a Self-host Pro licence are bought at checkout under the Qlaas DMI terms, with cancellation and refunds as set out on the refunds page.
Nothing on this site is legal, regulatory or safety advice. The text, images, wordmark and brand are owned by UIE Group or its licensors; please don't reuse them without permission.
We aren't liable for loss arising from use of this website, except where the law doesn't allow that liability to be excluded. These terms are governed by the law of England and Wales.
qlaas will publish a red-lines policy that limits what qlaas itself builds.
qlaas is part of UIE Group.
Email: hello@qlaas.co.uk
Each legal document has a version number and a date. When you buy, we record which versions you accepted.