Privacy Policy

01 Information We Collect

We collect information necessary to deliver our services effectively and securely. This includes:

• Business contact details such as name, email address, company name, and job title provided through forms, meetings, or correspondence.
• Usage and technical data including browser type, IP address, device information, and site interaction data collected automatically through standard web technologies.
• Customer input processed by AI systems — data you provide to our AI agents as part of service delivery, processed strictly within the scope of our engagement.

We do not collect sensitive personal data (such as health, biometric, or political data) unless explicitly necessary for a specific engagement and with your prior consent.

02 How We Use Your Data

We use collected data for the following purposes:

• Delivering and operating our AI advisory and development services.
• Providing customer support and responding to inquiries.
• Improving the performance, reliability, and security of our services and platform.
• Meeting legal and regulatory compliance obligations.

We never sell your data to third parties. Your data is used exclusively in connection with the services we provide to you.

03 Data Storage and Localization

All data is stored on secure cloud infrastructure provided by our certified technology partners. We maintain compliance with UAE data protection requirements and align our practices with GDPR standards.

For clients operating within the Kingdom of Saudi Arabia (KSA), we offer sovereign data infrastructure options that ensure data residency within KSA borders, in compliance with local regulatory requirements.

04 Data Security

We implement robust security measures to protect your data, including:

• Strong encryption in transit (TLS) and at rest (AES-256).
• Strict access controls with multi-factor authentication and least-privilege principles.
• Continuous monitoring, vulnerability management, and regular penetration testing.

For full details on our security practices, please refer to our Security Policy.

05 Data Sharing and Vendors

We may share limited data with trusted third-party service providers who assist in the delivery of our services (such as cloud hosting, analytics, and communication tools). All third-party vendors are contractually bound to maintain the confidentiality and security of your data and are prohibited from using it for any purpose other than providing their services to us.

We do not share, sell, or disclose your personal data to any other parties unless required by law or with your explicit consent.

06 Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete your personal data, subject to legal retention obligations.
• Restrict the processing of your data in certain circumstances.
• Portability — request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at security@quantumspirit.ai.

07 Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymized in accordance with our data retention policies.

08 Updates

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy regularly.