Your account

Sign-in methods, confirming your email address, two-factor authentication, and what your plan allows.

Set it up

1. Open Your account from the workspace, or go to the account page directly. On a phone it is the same page in the mobile app.
2. Confirm your email address if the banner at the top asks you to. Until you do, you can look around but cannot start a plan or use anything that costs money.
3. Under Security, switch on two-factor authentication and save the ten backup codes somewhere you can reach without your phone. Two-factor needs a confirmed email address first.

What to know

• Plan builder starts with an idea that works with the picked upgrade and the other modules' Free limits. Each row says whether that upgrade alone is enough or names the additional Pro upgrades and their monthly price. A plan appears only when the solver finds it cheaper for that idea on one server. These examples assume room within Free limits, not unused capacity on your server. The basis line distinguishes enabled-module matches from general starting points. Q suggests, you decide.
• There are three ways to sign in: Discord, Google, and an email address with a password. They are three doors into one account, not three accounts.
• Two sign-in methods join into one account only when they share an email address the provider has confirmed. An unconfirmed address never links anything, which is what stops somebody typing your address into their own Google account and arriving inside your Qreate account.
• Discord is what connects your servers. Removing it disconnects them, and Qreate will not let you remove your last remaining sign-in method at all.
• Under Continue with Discord there is a box, ticked by default, to also join the Qreate Discord server. Discord asks you to confirm it on its own screen. Untick it to sign in without joining; signing in with Google or an email address never joins you anywhere.
• Changing your password signs you out on every other browser and device, so anyone who had your old password loses access straight away. The browser you changed it in stays signed in.
• Backup codes are shown once, at the end of two-factor setup. They cannot be looked up later. If you lose them and can still sign in, generate a new set on the account page: it replaces the old ones.
• Changing your email address does not move it until you follow the link sent to the new address. Your old address keeps working in the meantime, and is told that a change was requested.
• Usage shows how much of your allowance is used, as a percentage, and when each part comes back: a short part that refills over five hours and a weekly part that resets on Monday. One allowance covers every server on your plan, and the page lists which of them used it. Answers from Q, pictures, web search, voice, AI inside scenarios, AI moderation and address checks at verification all draw on it, including planning through a connected AI client such as ChatGPT or Claude; uploaded files have their own storage limit.
• Past the allowance, credits pay for the rest, so Q keeps working until the reset. The switch Continue with credits when the allowance runs out decides this; turn it off and Q stops at the allowance and your credits stay untouched. Typical costs: an answer from Q usually 1 to 3 credits, a setup session usually 5 to 10, a picture about 4. A typical server uses about 20 credits in a week of Q. These are typical figures, not fixed prices.
• Credits come from Top.gg votes, from the Qreate team, and later from packs. Credits from votes lapse after 90 days, and the Usage page warns you before they do; the others do not expire. The Usage page gives each server its own vote link: post it in your server, and every member who votes through it adds credits to your account, up to 200 credits a month from each person. Voters who are in the Qreate Discord server also get the Q Backer role, which stays while they vote at least every three days.
• Saving a plan does not buy anything. When you are ready, the receipt lists everything and you pay in your own checkout. Every paid plan starts with a 3-day free trial.
• Your plan on the account page shows what your active plan includes, grouped by server, renewal date and amount, and usage. You can select Change plan or open the Plan builder to add or remove services or move between tiers. Adding a service is charged for the rest of the period; removing one runs to the renewal date with no refund; moving to a tier credits the unused Personal plan; downgrades start at renewal. When you are on a paid plan, the same section shows the date and the amount of your next payment. Paid plans renew by themselves until you cancel, and cancelling stops the next renewal rather than ending access on the spot: you keep it until the end of the period you already paid for.
• The launch offer on the pricing page is a deadline to start, not a limit on how long the reduced price lasts. If you subscribe before it closes you keep that price for as long as you keep the plan.
• Download my data gives you your account, your servers and your account history as a file. It deliberately leaves out your password hash, your two-factor secret and your backup codes.
• Privacy and data is the page for the rest of it: the same download, a request to delete one server's configuration, a request to delete your account, and the state and due date of anything already running. A request for a server is only accepted from somebody who administers that server, and that is checked again when the work happens.
• Requests are acknowledged as they arrive and normally finished inside 30 calendar days. On a confirmed account deletion your access stops immediately. Removing the bot from a server deletes nothing immediately, because people remove it during a rebuild: that server's configuration is kept for 24 months so you can pick up where you left off, and can be deleted sooner on request.
• Deleting a file permanently is not a request and does not live here: it happens the moment you press it, in your files. Archiving a file keeps its bytes, and permanent deletion is the only thing that removes them. A file's address is public to anybody who has it, so nothing confidential belongs in one.
• Plan builder memory: under Privacy in account settings, you can control whether the plan assistant remembers your discussions across visits. It is off by default. When switched on, it keeps only the topics discussed and counts for 30 days to suggest relevant setups, without saving message content or server names. You can switch it off or select Forget now to delete it immediately, either here or in the Plan builder assistant widget.
• Data recipients and privacy rights: Qreate discloses personal data only to defined categories of service providers needed to run the service (Discord, EU-hosted infrastructure and hosting, network security and fraud prevention, AI processing providers, notification services, and payment processing once open). Primary production infrastructure is hosted within the European Union. Under Article 15(1)(c) GDPR, you can ask for the specific recipients that received your personal data by emailing [email protected] with "Recipients request" or through Privacy and data in the dashboard; Qreate provides the named providers, data shared, and processing locations within standard GDPR time limits. Authenticated administrators can also inspect the named subprocessor register in the dashboard and in the DPA flow regardless of plan.