Privacy Policy

1. Information We Collect

QuarterMaster collects only information strictly necessary to provide equestrian stable management services and AI assistant tools:

• Account & Identity: Name, email address, and authentication identifiers provided via our authentication provider (Auth0).
• Stable Data: Information you input into the platform regarding horses, equipment (tack), shows, events, appointments, vehicles, and notes.
• Sensor Telemetry: Environmental readings (temperature, humidity, motion, battery levels) from connected IoT sensor hardware that you explicitly register.
• Technical & Access Data: IP addresses, request logs, and device tokens for security monitoring and audit logging.

2. How We Use Information

Your data is used solely to operate and improve the QuarterMaster platform:

• Delivering equestrian yard management features, scheduling, and notifications.
• Servicing API requests and Model Context Protocol (MCP) tool executions initiated by authenticated users or their designated AI assistants.
• Ensuring tenancy isolation, security enforcement, and role-based access control.

3. AI Connectors & Third-Party AI Agents

When you connect QuarterMaster to AI platforms (such as Claude by Anthropic or ChatGPT by OpenAI via MCP):

• User-Initiated Delegated Access: Tools execute strictly on your behalf using OAuth 2.0 / PKCE authentication. The AI assistant can only access data belonging to stables you are authorized to view.
• No Data Harvesting: We do not collect extraneous conversation data, private prompt transcripts, or files from the AI platform.
• No Model Training: Your private yard and stable data is never used to train public AI models.

4. Third-Party Sharing & Data Selling

We do not sell, rent, or monetize your personal or operational data. We share data only with infrastructure providers necessary to operate the platform (cloud hosting, database storage, and authentication services), each bound by strict confidentiality and data protection agreements.

5. Data Retention & Security

We implement industry-standard encryption in transit (HTTPS / TLS 1.3) and encryption at rest for sensitive credentials. Data is retained for as long as your account is active or as needed to provide you with services. You may request the deletion of your account and associated stable data at any time.

6. Your Rights & Contact Information

Under applicable data privacy regulations (including GDPR), you have the right to access, rectify, export, or delete your personal data. For privacy inquiries or requests, contact us at:

info@quarter-master.ai