Privacy Policy

Who We Are & Legal Basis

Data controller. This website and the QNSQY billing/account services are operated by QNSQY (QuaNtum SeQuritY), operated by its founders. You can reach the people responsible for your data at [email protected]. These services and our Terms are governed by the laws of the State of Delaware, United States.

Legal basis for processing (GDPR Art. 6). Where the EU or UK GDPR applies, we rely on the following bases:

• Performance of a contract (Art. 6(1)(b)) — to create your account, license and deliver the software, and process purchases.
• Consent (Art. 6(1)(a)) — for our anonymous website event log and the Sentry error-monitoring SDK, both of which load only after you accept the cookie banner. You can withdraw consent at any time via “Cookie Settings” in the footer.
• Legitimate interests (Art. 6(1)(f)) — to secure our services (e.g. Cloudflare DDoS protection and rate limiting) and to respond to support requests, balanced against your rights and freedoms.
• Legal obligation (Art. 6(1)(c)) — to retain billing and tax records where required by law.

1. Information We Do NOT Collect

QNSQY is designed with privacy as a core principle. The Software does NOT collect, transmit, or store:

• Your passwords - Passwords are processed locally and never leave your device
• Your encryption keys - Keys are derived locally using Argon2id
• Your data or its contents - All encryption happens on your device
• Data-operation telemetry - No analytics on encrypt/decrypt/sign/verify, no phone-home from the CLI, no crash reports from the data path
• Device identifiers - We do not fingerprint your device. A machine key is derived locally from sorted MAC addresses solely to bind a billing subscription to a device; the raw MAC addresses are not transmitted
• Your IP address (from the encryption software itself) - Data encryption runs locally. Note: the billing client (login and subscription check-ins) does contact billing.quantumsequrity.com over HTTPS; that request necessarily exposes your IP to our billing server and to Cloudflare (which fronts the billing worker). The website you are reading now is also served through Cloudflare

2. Information We May Collect

We only collect information when you explicitly provide it:

Website Visits

Our website uses Cloudflare Web Analytics for aggregated traffic patterns. This data does not include personal identifiers.

Website Error Tracking

Our website loads the Sentry JavaScript SDK to capture unhandled errors so we can fix bugs quickly. Sentry receives browser error stack traces, basic session metadata (browser, OS, URL), and a truncated IP address for geolocation. Sentry loads only after you accept the cookie banner (consent), and it is never loaded on the login, account, or admin pages. Sentry is scoped to the public website only; the QNSQY desktop software itself has no Sentry SDK and no analytics. You can also block Sentry with any tracker-blocking browser extension without affecting the encryption functionality of the downloaded software.

Anonymous Event Tracking

To measure how the website performs (which pages load, where the signup flow drops people, how many users reach checkout) we operate our own anonymous event log at analytics.quantumsequrity.com. No third-party analytics provider is involved — the events go to a Cloudflare Worker we run, write to Cloudflare's Workers Analytics Engine, and are deleted after 90 days.

• Anonymous distinct ID — a random UUID is generated locally in your browser the first time you accept this banner and stored in localStorage. It is not derived from your account, email, IP, or any device identifier. Reject the banner or clear site data to wipe it.
• UTM attribution — if you arrive from a link with utm_source/utm_medium/utm_campaign parameters, those values are stored locally for 30 days so we know which traffic source produced an account.
• Page path and event name — e.g. page_view, plan_select, checkout_start. The full list is published in our public tracking plan.
• Country — derived by Cloudflare from your IP at the edge. The IP itself is not stored; it is hashed with a rotating server-side pepper and lives only as a rate-limit dedup key for at most 120 seconds.
• What we do NOT collect: your IP, your user agent (used only as part of the rate-limit hash), referrer URLs from outside our site, mouse movements, scroll depth, session replay, fingerprints.

The QNSQY desktop software (CLI, GUI, TUI, MCP server) sends no usage telemetry. This event log applies to website behaviour only.

Purchases

When you purchase a license, we collect:

• Email address (for license delivery)
• Name (optional)
• Payment information (processed by Razorpay; we don't store card details)

Waitlist & Contact Forms

If you join our waitlist or contact us, we collect your email address and any information you provide in your message.

Support Requests

If you contact support, we retain your email and the content of your request to assist you.

3. How We Use Collected Information

Information we collect is used only to:

• Deliver your purchased license
• Notify you about product updates (if you opted in)
• Respond to your support requests
• Improve our website (aggregated analytics only)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage & Security

Any data we collect (email addresses, purchase records) is stored securely using industry-standard encryption. We use:

• HTTPS encryption for all website traffic
• Secure cloud infrastructure (Cloudflare)
• Encrypted databases for any stored data

5. Third-Party Services

We use the following third-party services:

Razorpay (Payment Processing)

Payment processing is handled by Razorpay. Your payment information is processed according to their Privacy Policy. We do not store your credit card details.

Cloudflare (Hosting & Security)

Our website and API are hosted on Cloudflare. See their Privacy Policy.

Sentry (Website Error Monitoring)

Our public website loads the Sentry error-monitoring SDK only after you accept the cookie banner. Sentry may process a truncated IP address and browser/error metadata to help us fix bugs. See their Privacy Policy. Sentry is not loaded on login, account, or admin pages, and the desktop software contains no Sentry SDK.

6. Your Rights

You have the right to:

• Access - Request a copy of any personal data we hold about you
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your data ("right to be forgotten")
• Portability - Receive your data in a structured, commonly used, machine-readable format
• Restriction - Request that we restrict processing of your data
• Objection - Object to processing based on our legitimate interests
• Withdraw consent - Withdraw any consent you gave (e.g. analytics or error monitoring) at any time, without affecting processing carried out before withdrawal
• Opt-out - Unsubscribe from marketing emails at any time
• Complain - Lodge a complaint with your local data-protection supervisory authority (e.g. an EU member-state authority or the UK ICO)

To exercise these rights, contact us at [email protected]

7. Cookies

Our website uses minimal cookies:

• Theme preference - Stores your light/dark mode preference (localStorage)
• Cloudflare security - Essential cookies for DDoS protection

We do not use advertising cookies or cross-site tracking. Non-essential storage (our anonymous website event log and the Sentry error-monitoring SDK, which is a third-party processor) loads only after you accept the cookie banner, and you can withdraw consent at any time via “Cookie Settings” in the footer.

8. Children's Privacy

QNSQY is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Our services are operated from India and the United States. If you are accessing our services from the European Union, United Kingdom, or other regions, your information may be transferred to and processed in countries with different data protection laws. Where personal data of EU/EEA or UK residents is transferred outside those regions, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and the equivalent transfer mechanisms operated by our sub-processors Cloudflare and Razorpay.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website. Your continued use of the Software after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or concerns:

Email: [email protected]