Privacy Policy

The controller is Quandtec Ltd., a company registered in Canada (Province of Ontario). In accordance with the accountability principle, we have designated a privacy officer reachable at legal@quandtec.com.

We process personal data in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian law.

Where a user is mandatorily subject to the data-protection law of their own jurisdiction (for example, the GDPR for EU residents), that law prevails to that extent. If the user's jurisdiction has no applicable data-protection law, we apply, as a minimum, PIPEDA-equivalent safeguards and international good practice, so that no user is left without protection.

We collect only the data we need: contact details you provide (name, email, company, message), contractual and billing data, and technical browsing data (approximate IP address, device type and pages visited) through analytics tools.

We use your data to respond to inquiries, to provide and bill services, to operate and secure our products, and to improve the site. The legal basis is performance of the contract, your consent, compliance with legal obligations, and our legitimate interest in operating and improving the service.

We use first- and third-party cookies to analyze traffic and improve your experience. You can accept or reject them through the consent banner.

We rely on infrastructure and technology providers acting as data processors, for example Vercel, Supabase, Cloudflare, GitHub, Google, Microsoft, Amazon Web Services, Stripe, OpenAI and Anthropic, in addition to Quandtec's own infrastructure.

These providers may host or process data outside your country; in such cases we apply appropriate contractual safeguards (such as data-protection and transfer clauses) to protect your information to a standard equivalent to the one described here.

Where a product uses artificial intelligence, we may process data with our own or third-party models solely to deliver the contracted functionality. We do not make automated decisions with significant legal effect without human involvement or a legal basis and, unless expressly agreed, we do not use your confidential data to train models.

We retain data for as long as necessary for the purposes described and to comply with legal, accounting and tax obligations.

You can request access, rectification, deletion, objection or portability of your data, and withdraw your consent, by writing to legal@quandtec.com. Depending on your jurisdiction, you may have additional rights under applicable local law.

We apply reasonable technical and organizational measures (encryption in transit, access control and good development practices) to protect your data.

In the event of a security breach posing a real risk of significant harm, we will notify affected individuals and the relevant authority as required by applicable law.

If you believe we have handled your data improperly, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC — priv.gc.ca). We ask that, whenever possible, you contact us first at legal@quandtec.com so we can resolve your request.

We may update this Policy; the version in force is the one published on this site. To exercise your rights or resolve questions, contact us at legal@quandtec.com.