Privacy Policy

1. Introduction

Quanta ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered construction cost consulting platform (the "Service"). By using Quanta, you consent to the data practices described in this policy.

We comply with the EU General Data Protection Regulation (GDPR), Egypt's Data Protection Law (Law No. 151 of 2020), and other applicable privacy regulations.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, Google profile information when you sign in via Google OAuth
• Profile Information: Company name, job role, phone number (optional)
• Chat Content: Messages, questions, and prompts you send to the AI
• Uploaded Files: Documents, images, spreadsheets you upload for analysis
• Payment Information: Transaction ID, payment amount, subscription tier (processed securely by xPay - we don't store card details)

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies: Essential cookies for authentication and session management (see our Cookie Policy below)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI-powered construction cost consulting services
• Process your payments and manage your subscription
• Respond to your questions and provide customer support
• Send you service-related communications (updates, security alerts)
• Monitor and analyze usage patterns to improve our platform
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations under Egyptian and international law

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your personal data includes:

• Contract: Processing necessary to provide our services under our Terms of Service
• Legitimate Interests: Improving our services, fraud prevention, security
• Consent: Where you have given explicit consent (e.g., marketing communications)
• Legal Obligation: Compliance with applicable laws and regulations

5. Data Sharing and Disclosure

We share your information only in the following circumstances:

• Service Providers: With third-party vendors who process data on our behalf:
  • Google Cloud Platform (hosting and AI processing)
  • xPay (payment processing)
  • Neon Technology (database hosting)
  • Vercel Inc. (deployment and hosting)
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)

We do NOT sell, rent, or trade your personal information to third parties.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active, deleted within 30 days of account deletion
• Chat Messages: Retained for 1 year, then automatically deleted
• Uploaded Files: Retained while your account is active
• Payment Records: Retained for 7 years to comply with tax and accounting laws
• Inactive Accounts: Accounts inactive for 2+ years may be deleted with prior notice

You can request immediate deletion of your data at any time (see "Your Rights" below).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Restriction: Request limitation of processing
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, go to Settings or contact us at privacy@qsmind.site. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• EU Standard Contractual Clauses (SCCs) for transfers outside the EEA
• Data Processing Agreements with all third-party processors
• Encryption of data in transit (TLS/SSL) and at rest

9. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure coding practices and code review
• Incident response plan for data breaches

In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR.

10. Cookie Policy

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and security (cannot be disabled)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use our platform (can be disabled)

You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling essential cookies will prevent the site from functioning.

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it immediately.

12. AI-Specific Disclosures

• AI Processing: Your chat messages are processed by Google's Gemini AI models to provide responses
• Human Review: Conversations may be reviewed by our team to improve AI accuracy and safety
• Accuracy Disclaimer: AI-generated cost estimates are approximate and should be verified by qualified professionals
• Prohibited Content: Do not share sensitive personal information, trade secrets, or confidential data in chats

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification for material changes
• Displaying a notice on our platform

Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Information

For privacy inquiries, data requests, or complaints, contact us at:

If you are in the EEA and believe we have violated GDPR, you have the right to lodge a complaint with your local data protection authority.

15. Data Controller

For GDPR purposes, the data controller is: