Account data is kept in a PostgreSQL database on a Hetzner Cloud server in Nuremberg, Germany. Logos and signature images are files on the same server.
Every day the database and stored files are backed up. One copy stays on the same server for 14 days. An encrypted copy goes to a Hetzner Storage Box in Helsinki, Finland, which keeps 14 daily, 8 weekly, and 6 monthly copies. So data you delete can remain in backups for up to about 6 months, until those copies are replaced.
Good to know
- Email from Qufy, such as client links, reminders, and account emails, goes through Resend, an email delivery service.
- Cloudflare is used only for qufy.app, the public site. It processes visitors’ IP addresses to deliver and protect that site.
- Text you give the assistant goes through OpenRouter to a model provider. See the article on the assistant for details.
- Market data for the rate calculator is refreshed from public sources. Those requests carry none of your data.
- Five of these companies are in the United States, and each gets only what it needs: OpenRouter, and then OpenAI or Google, get the text you send to the assistant; Resend gets each email Qufy sends (address, subject, message, and link); Cloudflare gets the IP address and requests of visitors to qufy.app, including its waitlist form.
- Deleting your account removes your workspace from the server at once, along with your feedback, your invite records, and any waitlist entry with the same email. Copies in backups age out as described above. The full details are on /privacy.
Last updated 3 Oct 2026
Was this helpful?