Privacy policy clauses for Qdrant
Qdrant is a vector similarity search engine that powers AI-driven features like semantic search, recommendations, and similarity matching. Websites integrate Qdrant to process and index vector embeddings that represent user data, content, or queries for machine learning applications.
Free scan · No signup · Results in 60 seconds
What data Qdrant collects
Your privacy policy must disclose each of the following data types when you use Qdrant.
When does Qdrant trigger privacy obligations?
Installation triggers immediate obligations
The moment you integrate Qdrant into your application, you begin collecting and processing vector embeddings. Even if those vectors are mathematically transformed representations of user data (e.g., embeddings of user text, images, or behavioral signals), they remain personal data under GDPR Article 4(1) if they relate to an identified or identifiable natural person. This is true regardless of whether Qdrant is self-hosted or cloud-based.
Jurisdiction thresholds
GDPR applies if: You offer services to EU residents (GDPR Article 3(2)) or process data of EU residents. Since Qdrant Solutions GmbH is EU-based (Germany), inbound DPA/processor requirements under GDPR Article 28 apply immediately.
CCPA applies if: You are a for-profit entity doing business in California, collecting personal information (including inferred data like embeddings), and meet one of three thresholds: $25M+ annual revenue, buy/sell personal data of 100,000+ consumers/households, or derive 50%+ revenue from selling/sharing consumers' personal data (CCPA Section 1798.100).
