Privacy Policy

1. Information We Collect

We collect information to provide and improve our Service. The types of information we collect include:

• Account information. When you register, we collect your name, email address, and password. You may optionally provide a profile picture and organization details.
• Payment information. When you subscribe to a paid plan, payment details are processed by Stripe. We do not store your full credit card number on our servers.
• Usage data. We automatically collect information about how you interact with the Service, including pages visited, features used, time spent, and device/browser information.
• Communication data. If you contact us for support, we collect the content of your messages and any associated information.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process transactions and send related billing information.
• Send technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and support requests.
• Monitor and analyze trends, usage, and activities in connection with the Service.
• Detect, investigate, and prevent fraudulent or unauthorized activities.
• Personalize and improve your experience.

3. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.

We use the following types of cookies:

• Essential cookies. Required for the Service to function properly, including session authentication and security.
• Analytics cookies. Help us understand how visitors interact with the Service by collecting and reporting information anonymously.
• Preference cookies. Enable the Service to remember information that changes how it behaves or looks, such as your preferred language or theme.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Service may not function properly without cookies.

4. Third-Party Services

We use third-party services that collect, monitor, and analyze data to improve our Service:

• Supabase. We use Supabase for authentication, database storage, and file hosting. Supabase processes data on our behalf and is contractually obligated to handle your data in accordance with applicable data protection laws. For more information, see the Supabase Privacy Policy.
• Stripe. We use Stripe to process payments. Stripe may collect and process your payment information independently. For more information, see the Stripe Privacy Policy.

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this Policy.

5. Data Storage and Security

Your data is stored on secure servers managed by Supabase and hosted in compliance with industry standards. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account data. Retained for the duration of your account and up to 90 days after deletion for recovery purposes.
• Usage data. Retained for up to 2 years for analytics, then anonymized or deleted.
• Billing records. Retained for as long as required by tax and financial regulations, typically 7 years.
• Communication records. Retained for up to 3 years for quality and support purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request that we correct inaccurate or incomplete information.
• Deletion. Request that we delete your personal information, subject to legal retention requirements.
• Portability. Request a copy of your data in a structured, commonly used format.
• Objection. Object to our processing of your personal information in certain circumstances.
• Withdrawal of consent. Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Policy on this page with a new "Last updated" date. We encourage you to review this Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@quantoxt.com.