Security
Version 0.1 · Effective date: [to be set on approval]
Qlear holds records of money between people who know each other. Here’s how we look after them — and what we never keep in the first place.
What we never store
For a credit card, Qlear keeps the bank and the last 4 digits and nothing more. There is no place in Qlear for a full card number, an expiry date or a CVV. If an imported statement contains a full number, it isn’t saved.
Households are kept apart
Every record belongs to one household, and every read is filtered to the household you’re signed into. That filter is applied automatically to every kind of record, and if it can’t tell which household you’re in, it returns nothing. Asking for another household’s record gives the same “not found” as asking for one that doesn’t exist.
Roles
Owners, Members and View-only members get only what their role allows, and the server enforces it, not just the screen. In a Business workspace, a collector sees only the people assigned to them, and only what collecting needs.
Borrower links
- A borrower’s page is reached through a long random link. We store only a scrambled (hashed) form of it, so the link can’t be read back out of our database.
- Links expire after 90 days by default, and you can revoke one at any time.
- An expired, revoked or wrong link gets the same “not found”.
- The page shows that person’s own loans and how to pay you. It never shows your other borrowers, your cards or your contact details.
- The page is rate-limited, hidden from search engines, and loads no analytics or third-party scripts.
Attachments
Receipts and documents you upload are stored privately and opened through short-lived links, never a permanent public address.
A history that can’t be edited
Creating, changing or voiding a loan, payment, card, debt, reminder rule or link is recorded with who did it and when. That history can’t be changed or deleted from inside Qlear. Records are voided or archived, not erased, so a mistake can be traced. The one exception is deleting a whole household, which removes everything.
The coach can’t act for you
The AI coach can read your figures and draft a loan, a message or a payoff plan for you to review. It can’t record a payment, send a message, settle a loan or change a reminder. Only you can.
In transit
Qlear and this website are served only over HTTPS.
Reporting a vulnerability
If you think you’ve found a security problem, email hello@over-biz.com [dedicated security address to be confirmed] with the details. Please give us a chance to fix it before sharing it publicly. We won’t take action against good-faith research that avoids other people’s data.