Privacy Policy

Who operates Quairs

Quairs is operated by Medembark, based in Uzbekistan, at 19 Katta Qani, 100117, Tashkent, Uzbekistan. This policy explains how Quairs handles information when you use quairs.com, its professional workspace, and its optional account connections.

For privacy questions, access or correction requests, or help deleting your information, contact info@medembark.com. Please do not send passwords, verification codes, account tokens, or patient information.

Information you provide

Quairs helps physicians organize their own professional background and evidence. You may provide your name, contact details, specialty, qualifications, employment, professional registrations, publications, presentations, courses, professional case descriptions, social-profile links, photographs, documents and saved CVs. Some fields and features are optional.

Quairs is intended for professional career information. Do not upload identifiable patient information or clinical records containing personal patient details. Review and remove confidential information from material before uploading or sharing it.

We also process the account identifiers needed to sign you in, your preferences, and information you send us when requesting support. If you choose a sign-in provider, it sends the account information you authorize, such as an identifier, name or email address. Signing in and connecting a social account for statistics are separate choices.

Optional social statistics

You choose whether to connect an account and approve access on the provider's own website. Quairs receives an authorization token, rather than your social account password. The connection is used to identify the selected account and collect dated follower or subscriber counts for your professional workspace.

Quairs requests read access for these features. Its statistics collection does not publish posts, upload videos, send messages, or retrieve a list of your individual followers. Collection starts after authorization succeeds. The service checks for due accounts every 15 minutes and normally collects a new observation about once a day while access remains valid. You may also request a refresh. Provider availability and limits can delay collection.

We store the account identity, dated observations, connection status, last update time and encrypted access or refresh tokens. Tokens are used by the server to maintain the connection; they are not displayed to other Quairs users or included in shared profiles. Manually entered and imported observations are identified separately from provider data.

Quairs uses YouTube API Services. Google's handling of information is explained in the Google Privacy Policy. You can review and remove Quairs' Google access in your Google account permissions. Using the YouTube features is also subject to the YouTube Terms of Service.

Google account information is used for the features you choose, subject to the Google API Services User Data Policy and its Limited Use requirements. The provider-specific deletion and retention controls are described below. Authorized YouTube API observations stay in your own workspace; they are excluded from public and unlisted profile links and are not used to calculate audience growth metrics.

How information is used and shared

We use information to maintain your account, organize and display your records, produce the CVs and exports you request, run authorized statistics collection, provide selected file-processing features, answer support requests, and protect the service from unauthorized use. Limited operational records help enforce usage limits, investigate failures and complete deletion requests.

You control the records, fields, documents and permitted social statistics included in a shared profile. YouTube API observations are excluded from these links. A public profile can be viewed by anyone who has its address. An unlisted sharing link can be used by anyone who holds it until it expires or you disable it. Downloadable CVs and case packages contain the information you chose when creating them. Disabling a link prevents future access through that link; it cannot remove copies a recipient already downloaded.

Service providers process information to operate Quairs. These include Supabase for accounts, databases and associated storage and functions; Cloudflare for configured network, storage and file-processing services; and Fornex for the configured authentication email service. Social providers process their own authorization and API requests. Medembark's authorized operators may access information when necessary to operate, secure and support the service, subject to the applicable access restrictions.

If you use an enabled AI assistance feature, the text you submit, reviewed source text and selected context are sent to OpenAI to produce suggestions. The reviewed source filename may accompany that text. Source files are not automatically sent to that AI service. Quairs does not automatically save suggestions as records; you review and choose what to save. Application chat is held in the current session rather than saved as a conversation history. Provider processing and retention are governed by the applicable provider settings and terms.

Browser storage and service records

Quairs uses browser storage and session information to keep you signed in and support workspace preferences. Our infrastructure providers also process request and security information, which can include an IP address, browser information, timestamps and errors. Optional reviewer activity records aggregate daily link activity when the owner enables that feature.

Retention, disconnection and deletion

Workspace records, files and saved CVs remain until you change or delete them through their available controls or complete account deletion. Retention also depends on the kind of information, applicable obligations, security needs and the time needed to complete verified deletion. We do not promise that every stored copy disappears immediately when a request is submitted.

For Instagram and LinkedIn, Disconnect in Social profiles stops automatic tracking and removes the stored connection tokens. Saved observations remain until you delete the social-profile record or an applicable provider removal request is processed. Instagram's account identifier remains privately associated with saved API observations so Quairs can honor a later removal request, including after an incomplete reconnect. Verified Instagram removal requests erase the associated API observations, connection identity and credentials. A private request record, including the account identifier and request time, is retained for up to 30 days to provide a confirmation and prevent delayed responses from restoring deleted information.

For YouTube, Disconnect and remove YouTube data immediately removes API observations, channel identity and active connection tokens from the workspace. Manually entered and imported counts remain. Quairs also requests removal of its Google authorization. That removal can affect other Quairs connections using the same Google account. If Google cannot complete removal immediately, Quairs keeps only an encrypted credential and the identifiers needed to retry it for up to six days. You can also revoke access through your Google account permissions.

YouTube collection checks access during each successful refresh. If access has not been verified for 29 days, the next scheduled cleanup removes the saved API data and queues access removal. Service outages can delay scheduled work; contact us if a removal has not completed. Deleting a social-profile record removes its observations and connection, and queues Google access removal where applicable. These actions do not delete your Instagram, LinkedIn or YouTube account or content.

In Settings, you can export structured records and saved CV versions and request account deletion. Original documents have their own download controls. Account deletion requests pass through an ownership and administrative review and the service's cleanup process. Requesting account deletion immediately removes YouTube API data and stops collection, with Google access removal processed on the next scheduled run. This proceeds while any wider account review remains pending. Withdrawing the request does not restore the removed observations. We will explain any unresolved hold or remaining processing when responding to a request.

Optional reviewer activity is retained for the current and preceding 29 UTC dates; disabling it clears that link's history. Operational counters use a separate cleanup window of about 31 days. Other infrastructure logs, support messages and required deletion evidence may be retained for the time needed to resolve a request, investigate failures, demonstrate completed removal or meet applicable obligations. Infrastructure backups and logs have separate lifecycles; contact us for information about a particular deletion request.

Security and international processing

Quairs uses HTTPS, account-based access restrictions, private storage controls and encryption for stored social authorization tokens. No system eliminates every security risk. Keep your sign-in methods secure and share links only with the audience you intend.

Medembark is based in Uzbekistan. Service providers may process information in other countries. Contact us for information about the providers and processing locations relevant to your account. This notice does not represent that all information stays in one country.

Your requests and policy changes

You can update your information through Quairs and contact info@medembark.com for assistance. Depending on the law that applies to you, you may have additional rights to access, correct, delete, restrict or object to processing, withdraw consent, or complain to the relevant authority. We may need to verify your identity before acting on a request.

We will date changes to this policy and explain material changes in the service or through an appropriate account contact. If a new use of connected-account information needs fresh consent, we will request it before that use begins.