MyQuest Ltd. (“myQuest,” “we,” “us,” or “our”) respects your privacy. This Privacy Notice explains how personal data is collected, used, shared, and retained in connection with myQuest Skills and related websites, communications, and support services (“Services”).
“Customer” means the organization providing access to the Services. “User” means an individual authorized to use the Services through a Customer.
Personal data means information relating to an identified or identifiable individual.
Our Role
When we process learner submissions, transcripts, assessments, and other program information on a Customer’s behalf, the Customer generally acts as the data controller and myQuest acts as its processor. Where the Customer acts on behalf of another organization, that organization may be the controller.
The Customer determines the purposes of that processing, program settings, access permissions, and its lawful basis for processing. Our processing is governed by the Customer’s instructions and the applicable Data Processing Addendum (“DPA”).
We act as controller where we independently determine the purposes and means of processing, such as managing business inquiries, Customer relationships, billing contacts, and our website communications.
For information about your organization’s use of your data, please also review its privacy notice or contact its designated administrator.
Depending on how you use the Services, we may process the following information.
Information may come directly from you, from the Customer, from enabled integrations, or from your interactions with the Services.
You should not submit identifiable patient records, payment card details, or other sensitive personal information unless the Customer and myQuest have expressly authorized the processing and appropriate arrangements are in place. Synthetic or appropriately anonymized examples should be used for practice involving sensitive situations.
Providing some information is necessary to create an account or deliver particular features. If required information is not provided, those features may be unavailable.
Processing on Behalf of Customers
We process program and learner information according to Customer instructions to:
The Customer is responsible for determining the lawful basis for these activities and providing any required notices.
Processing for Our Own Business Purposes
Where myQuest acts as controller, we use relevant information to respond to inquiries, manage Customer relationships and billing, provide business communications, maintain our websites, prevent fraud, and meet legal obligations.
Depending on the activity and applicable law, our legal bases may include:
We do not treat an organization’s contract as automatically establishing a contractual legal basis for processing every individual User’s data.
The Services use AI providers to support features such as live simulations, transcription, content authoring assistance, assessment, and feedback.
Depending on the enabled feature, providers may receive authored scenarios, character instructions, assessment criteria, spoken responses, transcripts, written answers, and related prompts.
Voice audio from simulations is processed to provide the Services and is not retained as recordings by myQuest. Transcripts and associated results may be retained.
myQuest does not use Customer content or learner interactions to train, fine-tune, or build AI models.
Diagnostic Logs
AI requests made by myQuest’s servers may be recorded in diagnostic logs containing prompts and model responses. Because assessment prompts can contain transcripts, these logs may contain conversation text and personal data.
Access is restricted to authorized personnel for troubleshooting, security, and investigation of service issues.
Customer content and learner data are not used for unrelated product development, cross-customer analytics, advertising, or creating content for other customers.
Scores and Assessments
AI-generated feedback and scores evaluate performance in the relevant activity and may sometimes be inaccurate. Skills profiles and reports may be generated from these results.
The Customer determines how assessments are configured and used. Our Terms require meaningful human review and additional relevant information before relying on results for decisions with legal or similarly significant effects.
Please contact the Customer for information about decisions it makes using your results or to request review of those decisions.
The Customer and Its Authorized Users
The Customer determines access permissions for administrators, managers, coaches, and other authorized people. Depending on those permissions, they may access submissions, transcripts, scores, feedback, and reports.
Information may also be shared with systems the Customer connects, such as its LMS or identity provider, according to the integration settings.
myQuest Personnel
Access by our personnel is limited to what is necessary to provide, operate, secure, and support the Services, including requested content development and implementation work. Personnel with access are subject to confidentiality obligations.
Service Providers and Affiliates
We use providers for hosting, AI processing, authentication, content delivery, support, and other relevant operations. Affiliates, including MyQuest Inc., may receive information where necessary for their authorized role.
Processing of Customer Personal Data by providers or affiliates is subject to the applicable DPA and contractual safeguards. Relevant providers are identified in our sub-processor list.
Legal Requirements and Business Transactions
Information may be disclosed where required by law or necessary to establish, exercise, or defend legal claims. Requests involving Customer-controlled information will be handled according to applicable law and the DPA.
Information may also be disclosed in connection with a merger, acquisition, reorganization, or sale of relevant business assets, subject to appropriate confidentiality and data protection safeguards.
We do not sell Customer content or learner data.
The platform is currently hosted on Amazon Web Services in the United States, in the us-east-2 region.
Information may also be processed in countries where authorized personnel, affiliates, or service providers operate.
Where required by applicable data protection law, we use an appropriate mechanism for international transfers, including an applicable adequacy decision or standard contractual clauses approved by the European Commission.
You may contact support@myquest.co for information about the safeguards applicable to a transfer and how to obtain a copy or description of them.
Customer Program and Learner Information
Customer information is retained according to Customer instructions, the applicable DPA, and applicable law. Continued storage of an inactive account for possible reactivation may be agreed for a specified period.
Deletion requests are handled without undue delay and within applicable legal deadlines. Backups and logs may follow separate, defined retention cycles, provided that continued retention is lawful and subject to appropriate access and use restrictions.
Contact support@myquest.co for applicable retention periods and information about the deletion process.
Business and Website Information
Information processed for our own business purposes is retained for as long as reasonably necessary for the relevant purpose, taking account of the business relationship, legal requirements, security needs, and applicable limitation periods.
Marketing information is retained until you opt out or it is no longer needed. Limited suppression information may be retained to respect your choice not to receive marketing.
Where law requires retention of particular records, we retain only the information necessary for the required period and restrict its use accordingly.
We maintain technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, and destruction.
Our measures include access controls, encryption, logical separation of Customer environments, secure development practices, monitoring, personnel confidentiality obligations, supplier controls, and incident response procedures.
Further information about measures applicable to Customer Personal Data is provided in the DPA.
No system or transmission method can guarantee absolute security. Users should protect their credentials and promptly report suspected unauthorized access to support@myquest.co.
We use cookies and similar technologies where necessary for authentication, security, session management, and operation of the Services.
Our websites may also use optional functionality, analytics, or marketing technologies. These activities are distinct from processing learner submissions and assessments on a Customer’s behalf.
Where consent is required, optional technologies will be used only after consent. Applicable cookie notices or preference controls describe the technologies in use and allow you to manage your choices.
You may also manage cookies through your browser. Disabling necessary cookies may prevent certain features from functioning.
Third-party content embedded by a Customer, such as video or audio players, may collect device information or use cookies when loaded or played. The relevant provider’s privacy notice applies to its own processing.
We may send account, security, support, and other necessary service communications.
We may separately send relevant marketing communications to business contacts where permitted by law. Where consent is required, we will obtain it.
You can unsubscribe from marketing emails using the link provided or contact support@myquest.co. Opting out of marketing does not stop necessary service communications.
Learner submissions, transcripts, scores, and feedback are not used for marketing.
Mobile phone information will not be shared with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with third parties or affiliates, except with service providers as necessary to deliver the messaging service or as required by law.
Depending on applicable law and the circumstances, you may have rights to:
These rights are subject to applicable conditions and exceptions. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
For information processed on behalf of your organization, contact the Customer or its designated administrator. We will assist it as required by the DPA and law. You may also contact us, and we will direct your request appropriately.
For information for which myQuest acts as controller, contact support@myquest.co. We may request proportionate information to verify your identity and will respond within applicable legal time limits.
Requests are generally handled without charge. Any permitted fee or refusal will be limited to circumstances allowed by law.
The Services are intended primarily for adults. Self-service registration and trials are restricted to individuals aged 18 or older.
Participation by Users aged 13 to 17 is permitted only through an organization or educational institution under arrangements approved in writing by myQuest. These arrangements must address the applicable legal basis, privacy notices, and parental or guardian authorization where required.
The Services are not intended for children under 13. If you believe a child is using the Services outside these arrangements, please contact support@myquest.co so that we can investigate and take appropriate action.
We may update this Notice to reflect changes in our processing or applicable law. The updated version will state its revision date. Material changes will be communicated through an appropriate notice, such as an in-service message or email.
Where a change requires consent or another legal step, we will take that step before carrying out the relevant processing.
MyQuest Ltd.
7 HaAhim Ben Ezer, Petach Tikva, Israel
Company registration number: 514951441
Email: support@myquest.co
For processing controlled by your organization, its privacy notice provides the relevant controller’s identity and contact details.
Last updated: October 2026