Privacy Policy

Q4 is a research platform for Saudi-listed companies, bringing financial data, filings, earnings calls, and AI-assisted analysis into one workspace. This Privacy Policy covers the Q4 website, the Q4 dashboard, Q4 MCP and the Q4 Connector (together, the “Service”).

Q4 is operated by Q4 Intelligence Company, a limited liability company registered in Riyadh, Saudi Arabia (Commercial Registration No. 1010976680), which is responsible for the personal information described here.

Account data. Your name, email address and a one-way hash of your password (never the password itself), your account type and subscription status, and a profile picture if you add one. Accounts are created by the Q4 team, who send you your sign-in details by email, or by you when you sign up to connect an AI tool through Q4 MCP.

Chat history. Your Q4 AI conversations are saved to your account so you can return to them: your questions, the answers, citations, and any files generated. We keep your 80 most recent conversations; older ones are removed automatically. A copy is also kept in your browser so your history loads quickly.

Your questions in usage records. Each question you ask Q4 AI is also recorded in your account’s activity records, which we use to apply plan limits and to understand how the product is used. If you rate an answer, we keep the question, the answer and any comment you add together with your rating.

Usage and technical data. The pages and features you use, the companies, filings and earnings calls you open, how long you spend on them, when you were last active and which page you were on, plus standard technical data such as your browser type. For Q4 MCP we record the tool used, the company, the first 200 characters of a search, whether it succeeded, how long it took, and the name and user agent of the AI tool that called it. Our hosting provider also keeps standard request logs, including IP addresses, and our own server logs record details such as your account email on MCP requests and short extracts of tool requests, which we use to run and troubleshoot the Service.

Your saved companies. The companies you add to your favourites.

Payment and subscription data. Paid Q4 MCP plans are processed by StreamPay. We share your name, email address and account identifier with StreamPay so it can bill you. Your card details go directly to StreamPay; Q4 stores only your subscription status, its dates, and the invoice or subscription reference, never your card number.

Information from forms. If you sign up for the Q4 API we collect your email address and anything you tell us you'd build with it. If you apply for a role, we collect your name, email address, LinkedIn profile and CV, and an optional video introduction. You can record that video in your browser, which asks for your permission to use the camera and microphone.

We use the information above to provide and operate Q4: authenticating you, running the research and AI features you use, saving your history, applying the limits of your plan, billing paid subscriptions, responding to support requests and job applications, keeping the Service secure and preventing misuse, and understanding how Q4 is used so we can improve it. We do not sell your personal information or use it for advertising.

Our internal log of AI cost and usage records which model handled a request, the token counts and the cost. It does not store your questions or the answers; those are kept only in your chat history and the records described in section 2.

When you ask Q4 AI a question, your question, the recent turns of that conversation and the relevant excerpts from public filings are sent to the AI model provider that answers it: OpenAI, Anthropic, xAI or Moonshot AI, depending on the model you choose or the default. To find the relevant passages, your question is also sent to OpenAI to create a search embedding and to Cohere or Jina AI to rank results. The same search providers process searches made through Q4 MCP.

Public company material is processed by other providers before it reaches you: filings are parsed by Reducto, Mistral AI, Landing AI and OpenAI, and public earnings call audio is transcribed and summarized by AssemblyAI. These providers process Q4’s research library, not information about you.

Q4’s research library is made up of public material: financial reports, board reports, investor presentations and earnings calls published by Saudi-listed companies, collected from Saudi Exchange and company investor relations pages. Q4 parses and indexes this material, including into a searchable, embedded form, so answers can point to the exact page, line or moment they came from.

The Service does not currently let you upload your own documents for analysis. The only files you can give us are a profile picture and, if you apply for a role, your CV and video.

Essential. These are needed for the Service to work and are always on:

• q4_auth: a secure, HTTP-only cookie that keeps you signed in for up to 7 days.
• app-settings: a cookie that remembers interface preferences such as light or dark mode.
• Browser storage: your sign-in token and basic profile, recent chats, your cookie choice, display and playback preferences, and cached company logos and spreadsheet models, so the dashboard loads quickly.

Optional analytics. Off by default. PostHog loads only if you choose “Accept all” in the cookie card, or turn analytics on from “Cookie preferences” in the footer. Once accepted, PostHog records page views, clicks and errors on our public pages and, where enabled, session replays of those pages. If you reject or ignore the prompt, it doesn’t load, and turning analytics off later removes its cookies from your browser. Q4 does not use advertising cookies or trackers.

We share information with the service providers that help us run Q4, only as needed for the purpose each one serves. They are listed in “Subprocessors and Service Providers” below. We may also disclose information if required by law or to protect the rights, safety and security of Q4, our users or others. We do not sell personal information.

Core infrastructure. Every use of Q4 runs on these:

• Vercel: hosting, serverless functions and file storage.
• A managed PostgreSQL provider: Q4’s primary database.

Feature-dependent providers. These are only involved when the feature that needs them is used:

• OpenAI, Anthropic, xAI and Moonshot AI: generating answers in Q4 AI.
• OpenAI, Cohere and Jina AI: searching and ranking the research library for your question, in Q4 AI and Q4 MCP.
• Reducto, Mistral AI and Landing AI: parsing public filings.
• AssemblyAI: transcribing and summarizing public earnings call audio.
• Recall.ai: recording public earnings calls that Q4 captures.
• Google (Calendar API): reading the earnings calendar Q4 connects for the Earnings Calendar feature.
• StreamPay: payments for paid Q4 MCP plans.
• Our email provider: sending account emails, such as your sign-in details when we create your account, and passing demo requests to our team.
• PostHog: website analytics, only if you accept analytics cookies.

We keep your account data for as long as your account is active and as needed to operate Q4. Chat history is limited to your 80 most recent conversations.

When your account is deleted, we delete your account details, chat history, favourites, activity and MCP usage records, and answer ratings, together with your current profile picture. Some information is kept afterwards: our AI cost log keeps its entries without any link to you; earlier profile pictures you replaced may remain in file storage until cleaned up; payment records are kept by StreamPay under its own legal obligations; and copies of our database used for internal testing may hold your information until they are next refreshed.

Waitlist sign-ups and job applications are kept until we no longer need them or you ask us to delete them.

We use reasonable technical and administrative measures to protect information in Q4. Connections are encrypted, passwords are stored only as one-way hashes, the sign-in cookie cannot be read by page scripts, and administrative tools are limited to approved Q4 staff and designated managers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Many of the providers described in this policy, including our hosting, database, AI and analytics providers, process information outside Saudi Arabia, for example in the United States and the European Union. We take reasonable steps to protect information wherever it is processed.

Depending on where you are, including under Saudi Arabia’s Personal Data Protection Law, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to obtain a copy of it, and to withdraw consent you have given, such as for analytics cookies. Contact us at contact@q4.sa with any request, including to delete your account. Email us from the address on the account so we can verify it is yours.

Q4 accounts are individual. There is no shared organization or workspace data model, so if several people at your company use Q4, each has their own account and their own history. The Earnings Calendar is shared: it shows events from one calendar connected by Q4 to every signed-in user.

Q4 is intended for professional and business use by people aged 18 and over. It is not directed at children, and we don’t knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

Q4 MCP. You can connect Q4 to AI tools that support the Model Context Protocol, such as Claude, ChatGPT and Cursor, so you can ask them questions using Q4’s data. Here the AI tool calls Q4 on your behalf with your Q4 sign-in; what we record about those calls is described in section 2, and what the tool does with the answers is governed by its own terms. The Q4 MCP privacy notice has the details.

Q4 Connector. If you choose to answer Q4 AI questions with your own Claude account, the Q4 Connector app on your computer receives your question and a Q4 sign-in token, runs Claude under your own Anthropic account, and calls Q4 MCP for the data. Anthropic’s terms for your account apply to that conversation.

Booking a demo. When you request a demo, we keep what you enter in the form (your name, work email, company, company type and size, and how you heard about Q4) and email it to our team so we can contact you to arrange it. You can ask us to delete it at any time.

We may update this Privacy Policy as Q4 evolves. If we make material changes, we’ll update the date at the top of this page and, where appropriate, tell you directly.

Questions about this Privacy Policy? Contact us at contact@q4.sa.