The short version
-
This website sets one functional cookie,
qf_lang, for your language, and keeps a few preferences in your browser's own storage. Page views are counted with a cookie-free beacon. - Google Analytics loads only if we switch it on and only after you accept in the cookie banner. A Global Privacy Control or Do Not Track signal counts as a refusal, and you can change your mind at any time.
- The QualiFlow app uses only the cookies it needs to sign you in and keep your account safe. They can't be read by scripts on the page.
- We don't use advertising cookies, and we don't sell personal information.
This summary is here to help. The full policy below is what applies.
1. About this policy
This policy explains how Qualiflowai LLC, operating as QualiFlow AI ("QualiFlow," "we" or "us") uses cookies and similar browser storage on this website and in the QualiFlow app. A cookie is a small file a website asks your browser to keep and send back on later visits. Local storage and session storage are similar, but stay in your browser and are not sent to us automatically.
It adds detail to our Privacy Policy, which explains how we handle personal information in general.
2. This website
This website sets no advertising cookies. It loads no advertising pixels and no third-party fonts, images, videos, maps or other embeds. It sets one functional cookie and keeps a few items in your browser:
| Name | Purpose | Category | How long |
|---|---|---|---|
qf_lang |
Remembers the language you chose for this website and the app (English, Spanish or French). Set only once the language switcher is turned on; until then no language cookie is stored. | Cookie · functional · first party · no consent needed | 1 year, or until you clear your browser data |
qf-consent-v1 |
Remembers whether you accepted or rejected analytics, so the banner doesn't ask on every page. | Local storage · strictly necessary · first party · no consent needed | Until you change your choice or clear your browser data |
qf-motion-paused |
Remembers that you paused the page animations. | Local storage · functional · first party · no consent needed | Until you resume the animations or clear your browser data |
qf-nora-chat and qf-nora-chat-state
|
Keep your chat with Nora, the QualiFlow assistant, its last 50 messages and a form you are filling in while you move between pages. The form's answers are dropped when you send it or close Nora. | Session storage · functional · first party · no consent needed | Until you close the tab, reload, or start a new chat |
qf-contact-drafts |
Keep what you typed in a Contact page form when you visit another page and come back. Dropped once you send that form. | Session storage · functional · first party · no consent needed | Until you close the tab |
qf-demo-bar-dismissed |
Remember that you closed the Book a demo bar on your phone. | Session storage · functional · first party · no consent needed | Until you close the tab |
qf-help-nav-scroll |
Keeps the Help Center menu at the same scroll position as you move between articles. | Session storage · functional · first party · no consent needed | Until you close the tab |
Website Monitor. To count page views and see which pages work, the site sends a small first-party beacon to our own server. It sets no cookies and stores nothing in your browser. It reports the page, time on the page, how far you scrolled, named button clicks, form sends, errors and page speed. We do not keep your raw IP address; visits are grouped with a hash that changes every day, so a visitor can't be followed from one day to the next.
3. Analytics, only with consent
We may use Google Analytics 4, loaded through Google Tag Manager, to understand how visitors find and use this website, for example which pages are read and which links bring people here. They load only if we have switched them on for this website, and never before you agree: a cookie banner asks first, and no Google script loads until you choose Accept analytics. Advertising storage and ad personalization stay off even then.
| Name | Purpose | Category | How long |
|---|---|---|---|
_ga |
Set by Google Analytics. Tells visits from the same browser apart. | Cookie · analytics · set by Google's script on our domain · consent required | Up to 2 years |
_ga_followed by an ID |
Set by Google Analytics. Keeps the state of the current visit. | Cookie · analytics · set by Google's script on our domain · consent required | Up to 2 years |
- Reject, or never answering the banner, means none of these cookies is set and the site works the same.
- If you accepted and later reject, the page reloads without Google's tags and the Google Analytics cookies are deleted.
- Global Privacy Control and Do Not Track: if your browser sends either signal, we treat it as a refusal (an opt-out under US state privacy laws). Analytics never load and the banner doesn't ask.
Google processes analytics data under its own terms.
4. The QualiFlow app
The dealership app (after you log in) uses only cookies that are strictly necessary to sign you in and protect your account, plus the functional language cookie. They are first-party, sent only over HTTPS, and the sign-in cookies can't be read by scripts on the page. They are not used for analytics or advertising, so they don't need consent.
| Name | Purpose | Category | How long |
|---|---|---|---|
__Host-qf_session |
Keeps you signed in. | Strictly necessary · first party · no consent needed | Until you sign out; the session ends after 30 minutes without activity and after 8 hours at most |
__Host-qf_csrf |
Protects your account against forged requests from other websites. | Strictly necessary · first party · no consent needed | At most 8 hours |
__Host-qf_email_code |
Links the 6-digit email code you were sent to this browser while you enter it. | Strictly necessary · first party · no consent needed | At most 70 minutes |
__Host-qf_device |
Recognizes a browser you have verified with an email code, so you aren't asked again on every sign-in. | Strictly necessary · first party · no consent needed | The browser stays trusted for 30 days; the cookie itself is kept up to 400 days |
__Host-qf_mfa |
Holds your place while you enter a 2-step verification code. | Strictly necessary · first party · no consent needed | At most 5 minutes |
__Host-qf_oidc, __Host-qf_oidc_pending and
__Host-qf_oidc_result
|
Complete sign-in with Google or Microsoft securely. | Strictly necessary · first party · no consent needed |
Up to 10 minutes; __Host-qf_oidc_result 2 minutes
|
qf_meta_popup |
Lets the window that connects Facebook, Instagram or WhatsApp report back to the app. | Strictly necessary · first party · no consent needed | At most 15 minutes |
__Host-qf_inspect |
Only when a dealership approves read-only support access: keeps a QualiFlow support person's view of that workspace open. | Strictly necessary · first party · no consent needed | Until the approved access ends |
qf_lang |
Remembers the language you chose. Set only once the language switcher is turned on. | Cookie · functional · first party · no consent needed | 1 year |
| App preferences | Local storage. Remembers choices such as chart views, the selected location, the visits view, a dismissed billing notice and browser notification setup. | Functional · first party · no consent needed | Until you clear your browser data |
| Unsent work | Session storage. Keeps a message, campaign, template or instruction you are still writing if the page reloads. | Functional · first party · no consent needed | Until you close the tab |
| Name | Purpose | Category | How long |
|---|---|---|---|
qf_admin_session |
Keeps QualiFlow staff signed in to the admin console. | Strictly necessary · first party · no consent needed | 1 hour |
qf_admin_csrf |
Protects the admin console against forged requests. | Strictly necessary · first party · no consent needed | 1 hour |
qf_admin_challenge |
Holds a staff member's place while they finish sign-in. | Strictly necessary · first party · no consent needed | At most 10 minutes |
qf_admin_trusted |
Remembers a staff browser verified with 2-step sign-in. | Strictly necessary · first party · no consent needed | Up to 30 days |
QualiFlow's own staff sign in to a separate admin console that uses its own strictly necessary cookies, listed above. Dealership users never receive them.
5. Sign-in, payments and connections on other sites
Some steps open another company's site, which sets its own cookies under its own policy. QualiFlow does not load their scripts on our pages and does not read their cookies:
- Sign in with Google or Microsoft: on accounts.google.com or login.microsoftonline.com.
- Payments: Stripe Checkout on checkout.stripe.com, when a dealership pays for a plan or credits.
- Connecting Facebook, Instagram or WhatsApp: in a Meta window on facebook.com.
- Booking a demo: when you book a demo with Nora or on the Contact us page, our booking calendar comes from Cal.com (cal.com). It loads only after you send your demo request; until then nothing from Cal.com is on the page. Once open, Cal.com may set its own cookies inside the calendar, under its own policy. You can always skip the calendar and our team will email you instead.
6. Chat on dealership websites
When a dealership puts the QualiFlow chat widget on its own
website, the widget sets no cookies. It keeps a chat session
token in session storage (qualiflow-widget:
followed by the widget ID) so your conversation survives a page
reload. It is cleared when you close the tab. The dealership's
own website may use its own cookies; its cookie policy explains
them.
7. Your choices
- Analytics: accept or reject in the cookie banner, and change your choice at any time with Cookie settings in the footer (see Section 3). Rejecting never limits what you can do on the site.
- Browser signals: turn on Global Privacy Control or Do Not Track in your browser to refuse analytics on every visit.
- Your browser: you can block or delete cookies and site storage in your browser settings. If you block the app's strictly necessary cookies, you won't be able to sign in.
-
Language, animations and chat: clearing your
browser data removes the website's saved preferences,
including
qf_lang; nothing else changes.
8. Changes to this policy
When we add, remove or change a cookie or storage item, we update this page and the "Last updated" date at the top. If a change needs your consent, we ask again before it applies to you.
9. Contact us
Contact Qualiflowai LLC, the company behind QualiFlow AI, using the address that matches your request:
- Privacy and cookies: privacy@qualiflow.ai
- Terms and legal questions: legal@qualiflow.ai
- General questions: info@qualiflow.ai
Postal correspondence: Qualiflowai LLC, 16 Trafalgar CT, Nanuet, NY 10954, United States.