PRIVACY POLICY

Last updated: April 16, 2026 · Effective: April 16, 2026

Noel Innovations LLC DBA Qntyx
Freeport, NY · hello@qntyx.io

1. Information We Collect

Information you provide directly:

• Account information: email address, password (hashed), name
• Payment information: processed by Stripe — we never store card numbers
• Usage data: API calls, features used, timestamps
• Technical data: IP address, browser type, device information

Information collected automatically:

• Log data: API requests, response times, error logs
• Analytics: page views, feature usage (no third-party tracking pixels)

2. How We Use Your Information

• To provide and improve Qntyx services
• To process payments via Stripe
• To send transactional emails (account confirmation, password reset)
• To send product updates (you can unsubscribe at any time)
• To detect and prevent fraud and abuse
• To comply with legal obligations

3. Data Storage and Security

• Data in transit is protected with TLS; storage encryption at rest is provided by our hosting providers
• API keys are stored as SHA-256 hashes — we cannot recover them
• Secrets stored in Vault are encrypted with a separate key per secret (Fernet). Our service can decrypt them to serve your requests — Vault is not zero-knowledge
• Our product backends and databases run on Railway in the European Union (Netherlands, europe-west4). Account sign-in data is held by Supabase in the USA (us-east-1). Dashboards and websites are served by Vercel and Cloudflare

4. Quantum Entropy

• QuantumRand draws a random seed from IBM Quantum hardware through IBM's cloud service (if IBM is unreachable it uses the operating system's random generator instead)
• Those requests to IBM contain no personal information — only a request for random bits
• Some products request randomness from QuantumRand; those requests carry no personal information either

5. Data Sharing (Subprocessors)

We do not sell your personal information. We share data only with these service providers, and only as needed to run Qntyx:

• Stripe (USA): payment processing
• Supabase (USA): accounts and sign-in
• Railway (EU — Netherlands): backend servers and databases
• Vercel (global network): dashboard hosting
• Cloudflare (global network): website hosting, DNS, and traffic protection — sees IP addresses and request data
• Resend and SendGrid (USA): transactional email delivery — receive your email address and the message
• Sentry (USA): error monitoring, where enabled — may receive request details and IP addresses when an error occurs
• IBM Quantum (IBM Cloud): quantum random-number generation — receives no personal information

We may disclose information if required by law or to protect our rights.

6. Your Rights (GDPR / CCPA)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data in machine-readable format
• Opt out of marketing communications
• Lodge a complaint with your supervisory authority (EU users)

To exercise these rights, email hello@qntyx.io

7. Data Retention

• Account data: retained until account deletion
• API logs: retained for 90 days
• Billing records: retained for 7 years (tax compliance)
• Deleted accounts: data purged within 30 days

8. Cookies

We use only essential cookies:

• Session cookie: keeps you logged in
• CSRF protection cookie: security requirement

We do not use advertising or tracking cookies.

9. Children

Qntyx is not directed at children under 13. We do not knowingly collect data from children.

10. Changes

We will notify users of material changes via email at least 30 days before they take effect.

11. Contact

Noel Innovations LLC DBA Qntyx
Freeport, NY
hello@qntyx.io