QEV privacy and data handling

Updated October 21, 2026. Bryan Leonard personally operates Qira under TREND. This policy distinguishes the local vault from the separately hosted gateway evaluation.

Local browser vault

The browser vault encrypts and decrypts selected content on your device. It requires no account. Your vault file and unlock phrase are not submitted to the gateway by that workflow. You choose whether to download and share the encrypted file. Keep its phrase separately; Qira cannot recover it.

Hosted gateway evaluation

The authenticated operator evaluation is for synthetic records only. Do not submit confidential customer data. Qira’s host processes submitted test plaintext before sealing and stores captured events, package metadata, encrypted packages and operational configuration. Authorized operator requests can decrypt a package with the correct phrase; this service is not a zero-access vault.

Private routes require a gateway bearer token and configured webhooks require a signature. Test data and backups remain while needed for evaluation and recovery checks; no automatic deletion period is promised. Contact Qira to discuss removal of an evaluation record. Never put tokens or phrases in public inquiries or URLs.

Customer-controlled deployments

Real-data pilots require a separately agreed deployment, data scope, key ownership, access and retention plan. On a customer-controlled host, that host processes plaintext and manages package keys. The operator evaluation does not establish security certification or an enterprise service commitment.

Hosting and operational metadata

Cloudflare delivers this website and routes gateway requests to Qira’s supervised host. Hosting and network operators can process IP addresses, request paths, times, status codes and other connection metadata needed to deliver and protect the service. Operational logs and backups can persist; no site-wide zero-collection claim is made.

Other QEV surfaces

The older chat/voice workspace is unavailable. Desktop, relay and mobile behavior depends on the installed version and deployment; this page does not assert that those services are currently operating. A relay operator can observe connection metadata and routing keys even when message envelopes are encrypted. Review the relevant source and deployment policy before using sensitive data.

Inquiries and purchases

Qira’s project inquiry privacy notice explains information submitted there. The local browser vault is free. Any paid pilot requires a separate written scope, price and terms.

Source and verification

The public repository and signed site manifest support inspection. A valid signature checks integrity and the signer; it does not independently establish source truth, legal compliance or security certification.

Contact

For privacy, correction, deletion or data-handling questions, email bryanleonard@imagineqira.com. Include a nonsecret reference and the surface involved. Do not email unlock phrases, tokens or confidential records.