Privacy Policy

Account and Contact Information

• Name, email address, and company name when you contact us or sign up for the Service
• Billing contact information and payment method details (processed by our payment processor; we do not store full payment card data)
• Communications you send to us, including support requests and correspondence

Service Data (Governance Events)

The QHUB Service is designed to receive, record, and permanently preserve AI governance events submitted by our clients ("Client Data"). Client Data includes:

• Governance event payloads submitted to the Ingest API (event type, payload, timestamps, chain identifiers)
• HMAC authentication credentials (client-specific secret keys used to authenticate API requests)
• Hash chain metadata stored in our database (sequence numbers, event hashes, chain hashes)
• Audit log entries generated by the nightly chain verifier

Client Data is processed on behalf of our clients and is subject to the data processing terms in our Master Service Agreement. Quantex does not use Client Data for any purpose other than providing the Service.

Technical and Usage Information

• Log files including IP addresses, browser type, pages visited, and access timestamps when you use our website or API
• AWS CloudWatch and CloudTrail operational logs for security monitoring and service reliability
• Cookies and similar tracking technologies on our website (see Section 6)

We use the information we collect to:

• Provide, operate, and maintain the QHUB Service
• Process and authenticate API requests using HMAC credentials
• Perform nightly chain integrity verification and generate alerts
• Respond to your inquiries and provide customer support
• Send service-related communications, including security alerts and maintenance notices
• Monitor, analyze, and improve the performance and security of the Service
• Comply with legal obligations and enforce our Terms of Use
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

Service Providers

We use Amazon Web Services (AWS) to host the Service, including S3 for WORM storage, DynamoDB, Lambda, and AWS Secrets Manager. AWS processes Client Data on our behalf in accordance with our data processing agreements.

Legal Requirements

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Quantex, our clients, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before personal information becomes subject to a different privacy policy.

We retain different categories of data for different periods:

• Client Data (governance events): retained for the duration specified in the client's service agreement, subject to WORM Object Lock retention periods (default 7 years). Once written to S3 COMPLIANCE-mode Object Lock, event data cannot be deleted or modified by any party during the retention period.
• Account and contact information: retained for the duration of the client relationship and for a reasonable period thereafter as required by law.
• Technical logs: retained for 90 days for security and operational purposes.

We implement appropriate technical and organizational measures to protect your information, including:

• Per-client HMAC authentication secrets stored in AWS Secrets Manager with encryption at rest
• S3 COMPLIANCE-mode Object Lock preventing modification or deletion of event data
• TLS encryption for all data in transit
• AWS CloudTrail audit logging for all API and infrastructure access
• CloudWatch alerting for anomalous activity and integrity failures

Our website uses essential cookies required for the site to function (session management, security) and analytics cookies to understand how visitors use our site. We do not use advertising or behavioral tracking cookies. You may control cookie settings through your browser preferences.

Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to certain processing. To exercise any of these rights, contact us at carlos@quantex-tech.com. Note that Client Data stored in WORM storage cannot be deleted prior to the end of the applicable retention period as a matter of system architecture. California (CCPA) and EU/EEA (GDPR) residents may have additional rights — please contact us for more information.

The Service is operated in the United States. If you are accessing the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us: