Privacy Policy (FADP/GDPR)

Data Controller: Quanta AI | Address: 2017 Boudry, NE, Switzerland
Privacy Contact: privacy@quanta-ai.ch | Effective Date: 01.01.2026

1. Scope

This policy applies to Quanta AI websites, applications, APIs, and AI agent services.

2. Categories of Data Collected

Identification data (name, email), account data, entered content (prompts, files), technical logs and metadata (IP addresses, session IDs), billing data, support communications.

3. Sources

Directly from the User, through Client system integration, and automatically via our platforms (logs, cookies, SDK).

4. Purposes and Legal Bases

Service delivery (contract performance), security and maintenance (legitimate interest), feature improvement (legitimate interest), billing (legal/contractual obligation), marketing and communication (consent where required). Under FADP, we comply with principles of proportionality, purpose, and security.

5. Recipients and Subcontractors

Cloud providers (e.g., Microsoft Azure), support and email tools, payment processors (if used). We require equivalent contractual commitments and monitor compliance.

6. International Transfers

When data is transferred outside Switzerland/EEA, we apply recognized safeguards (e.g., standard contractual clauses, adequacy decisions) and inform clients of locations and mechanisms.

7. Retention

We retain data as long as necessary for purposes, then delete or anonymize it. Typical periods: accounts (contract duration + 12 months), technical logs (90 days, unless security requires longer), billing (10 years under accounting law). These periods may be contractually adjusted.

8. Security

Proportionate measures: access controls, encryption, monitoring, security testing, and backups. Incidents are managed under documented procedures and, where applicable, notified to the Client.

9. Data Subject Rights

FADP/GDPR: rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Requests are handled via privacy@quanta-ai.ch (or contractual channel).

10. Automated Decisions and Profiling

Our AI agents perform automated processing; where decisions produce legal or significant effects, human intervention and explanations will be provided when required.

11. Cookies and Trackers

We use cookies/trackers for authentication, preferences, performance, and, where applicable, marketing (under consent). A banner and preference center allow choice management.

12. Subcontractors and List

An up-to-date list of main subcontractors is available upon request or in the DPA (Annex C).

13. Contact and Complaints

Contact: privacy@quanta-ai.ch. Competent authority: Federal Data Protection and Information Commissioner (FDPIC) for Switzerland; EU supervisory authorities for GDPR.

14. Changes

We may amend this policy; substantial changes will be notified with reasonable notice.

In case of any discrepancy between language versions, the French version shall prevail.