Privacy Policy

Last updated: April 21, 2026

Quantum Scale ("we", "us", "our", or "Quantum Scale") operates the quantum-scale.co website, mobile experiences, APIs, and associated services (collectively, the "Platform"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have regarding your information. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not use the Platform.

This Privacy Policy should be read together with our Terms of Service. Terms defined in the Terms of Service have the same meaning in this Privacy Policy. Where applicable law grants you additional rights, those rights apply regardless of anything in this policy.

1. Scope and Who We Are

Quantum Scale is the data controller for personal information collected through the Platform. We are an online education and tooling company operating in the eCommerce vertical. Our registered contact details are listed in Section 17.

This Privacy Policy applies to all users worldwide, including individuals located in the European Economic Area ("EEA"), the United Kingdom, Switzerland, the United States (including California), Canada, Israel, and other jurisdictions. Region-specific rights are described in Sections 10 and 11.

2. Information We Collect

2.1 Information you provide directly

• Account information. Your name, email address, password (stored as a one-way hash), profile picture, and optional fields such as country, time zone, and the niche you operate in.
• Onboarding answers. Responses you give to our onboarding questionnaire (e.g., current revenue range, tools you use, goals). These help us tailor content to you.
• User-generated content. Bookmarks you save, calculator inputs, planner events, notes, feedback, bug reports, contact-form messages, poll responses, and any other content you create on or submit through the Platform.
• Communications. The content of emails, support messages, or survey responses you send us.
• Payment information. If paid features are offered in the future, payment details will be processed by our payment processor. We never store raw card numbers on our servers.

2.2 Information collected automatically

• Device and technical data. IP address, browser type and version, device type, operating system, language preference, screen size, referrer URL, and device fingerprint (a hashed value used for session continuity and fraud prevention).
• Usage data. Pages viewed, features used, clicks, time spent on pages, navigation paths, session duration, lesson/slide progress, checklist completion state, and interactions with content.
• Cookies and similar technologies. See Section 5 (Cookies).
• Approximate location. Derived from IP address at the city or country level for analytics and localization. We do not collect precise GPS location.

2.3 Information from third parties

• Google OAuth. When you sign in with Google, we receive your name, email, and profile picture from Google. If you connect Google Calendar, we receive events you have chosen to share with the Platform.
• Affiliate networks and partners. When you sign up for or activate a third-party tool we recommend, the partner may inform us that a sign-up or conversion occurred on your referral link, including the partner's transaction identifier. This lets us credit the correct referral and pay out commissions (see Section 4).
• Analytics and advertising vendors. We use Google Analytics and Meta (Facebook) conversion pixels. These vendors may provide us with aggregate data about how users reach and interact with the Platform.
• Public profile enrichment. For business-intelligence purposes we may enrich our records with publicly available business information (e.g., that a user operates a particular Shopify storefront), solely to tailor content.

3. How We Use Information

We use the information described above for the following purposes:

• To operate the Platform. Creating and authenticating your account, saving your bookmarks and progress, syncing your Google Calendar if you opt in, running calculators and analytics tools on your behalf, and delivering content.
• To personalize your experience. Recommending lessons, products, and tools based on your onboarding answers, niche, and past activity; adjusting the checklist to your current stage; surfacing relevant partner offers.
• To attribute affiliate referrals and process commissions. When you activate a partner tool through our link, we reconcile the conversion with the partner network and record the earned commission (see Section 4). The partner receives your identifier (as assigned by the partner network) for the purpose of attribution.
• To communicate with you. Transactional messages (account, security, billing), educational updates, product announcements, and marketing communications (subject to your preferences and applicable law).
• To analyze, measure, and improve. Understanding which features are used, which lessons convert, where users drop off, and how to improve the product. This includes producing aggregated and de-identified metrics.
• To operate cross-product experiences and sister services. We may use your information to deliver, improve, and personalize other software, services, or digital products owned, operated, or controlled by the same ownership group as Quantum Scale ("Affiliated Products"), provided that each Affiliated Product handles your information in a manner consistent with this Privacy Policy. This enables features such as unified sign-in, shared bookmarks, or carrying your onboarding answers between products. See Section 4.3 for details.
• To prevent abuse and secure the Platform. Detecting and stopping spam, fraud, credential stuffing, bot activity, and other malicious behavior; enforcing our Terms of Service.
• To comply with law. Responding to lawful requests, complying with tax, accounting, and record-keeping requirements, and defending legal claims.

Legal bases (EEA / UK / Swiss users)

Where GDPR or equivalent law applies, we rely on the following legal bases: (i) contract performance to deliver the Platform you requested; (ii) legitimate interests for analytics, product improvement, security, fraud prevention, and cross-product features within our ownership group, provided those interests are not overridden by your rights; (iii) consent for marketing communications, non-essential cookies, and optional integrations (such as Google Calendar sync); and (iv) legal obligation for tax, accounting, and compliance needs. You can withdraw consent at any time without affecting the lawfulness of prior processing.

4. Affiliate Commissions, Third-Party Tools, and Sharing with Partners

4.1 How affiliate commissions work

A large part of the Platform's business model is recommending third-party software, apps, services, supplier networks, and payment tools that we believe help our users grow their businesses. Many of these recommendations use affiliate, referral, or revenue-share arrangements. If you click one of our links, sign up, install an app, complete a trial, make a qualifying purchase, or take certain in-product actions (a "Qualifying Action") with the partner, the partner may pay us a commission, bounty, flat fee, revenue share, or other compensation.

We select partners based on our genuine assessment of their value to our users. Our editorial recommendations are not "for sale" — a partner cannot buy a recommendation — but we may have a financial relationship with providers we recommend. Where required by applicable law (for example, United States Federal Trade Commission guidelines for endorsements), we clearly disclose affiliate relationships. You are never charged more because you clicked a link on the Platform.

4.2 What we share with affiliate partners

When you click a partner link or take a Qualifying Action, we typically share only the minimum data needed to attribute the referral: a click identifier, timestamp, referring URL, and/or a hashed user identifier. The partner's own tracking may place a cookie or identifier in your browser to attribute your action to Quantum Scale. We do not share your email address, password, profile, or bookmarks with affiliate partners unless you explicitly authorize a direct integration (for example, by connecting an OAuth-based account).

4.3 Data use across the Quantum Scale ownership group (Affiliated Products)

Quantum Scale is part of a group of related software products operated by the same ownership and management. We may use and share your information across Affiliated Products for the following legitimate, narrowly scoped purposes:

• Unified account and sign-in. Offering you a single sign-on experience and avoiding duplicate onboarding across products you choose to use.
• Carrying your progress and preferences. Bookmarks, onboarding answers, and non-sensitive preferences may be shared so you do not have to start over in another Affiliated Product.
• Product improvement and analytics. Aggregated, de-identified, or pseudonymised usage data is used across the ownership group to improve the Affiliated Products as a whole.
• Marketing recommendations within the group. We may tell you about Affiliated Products in the same way we would tell you about relevant Quantum Scale features. You can opt out at any time.
• Shared security and fraud prevention. Credentials known to be compromised, fraud signals, and abuse patterns may be shared across Affiliated Products so an actor blocked from one cannot simply move to another.

Affiliated Products are bound by obligations no less protective than this Privacy Policy, and any cross-product data sharing is subject to the same retention limits, access controls, deletion rights, and security measures described here. Cross-product sharing does not constitute a "sale" of your personal information. If you request deletion of your Quantum Scale account, we will also initiate the deletion of your data held within Affiliated Products to the extent it is linked to the same identity, subject to Section 6 (Retention).

4.4 Third-party tool disclaimer

Once you install, connect, or sign up with a third-party tool, your use of that tool is governed by the tool's own terms and privacy policy. Quantum Scale is not responsible for how third parties collect, store, or use your data. We recommend reviewing each partner's privacy notice before connecting your account.

5. Cookies, Pixels, and Similar Technologies

We and our service providers use cookies, local storage, session storage, device fingerprinting, and pixel tags to operate the Platform and measure activity. The categories we use:

• Strictly necessary. Keep you signed in, remember your preferences, prevent cross-site request forgery, rate-limit abusive traffic. These cannot be disabled without breaking the Platform.
• Analytics. Google Analytics and an internal event store. These tell us which pages and features are used, how long sessions last, and where users drop off.
• Conversion measurement. Meta (Facebook) and other advertising platforms use cookies and pixels to measure whether ads we run lead to sign-ups or affiliate conversions. We send hashed email, name, and an external identifier to Meta via server-side Conversions API so that conversion attribution works with iOS and ad-blocker restrictions.
• Affiliate attribution. Partner networks place cookies that credit Quantum Scale when you complete a Qualifying Action with the partner.

In jurisdictions that require consent for non-essential cookies, we will ask for your consent and you can change your choice at any time.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy or as required by law.

• Active account data (profile, bookmarks, progress, calculator saves, planner events) is retained for the lifetime of your account.
• Page view and click-tracking logs are automatically deleted after 90 days via an automated retention job.
• Course file access logs are retained for 180 days.
• Security logs (failed logins, rate-limit events, fraud signals) are retained for up to 12 months.
• Transactional records (billing, tax) are retained for the period required by law, typically 7 years.
• Deleted account data is permanently removed within 30 days of your deletion request (Section 9.2), except for minimal records kept to satisfy legal, tax, or fraud-prevention obligations.
• De-identified and aggregated data may be retained indefinitely because it is no longer personal information.

7. Data Sharing

We do not sell or rent your personal information for money. We share information only in the following circumstances:

• Service providers. Vendors who host, store, process, or help us deliver the Platform, including Supabase (database, authentication, storage, hosted on AWS), Render (application hosting), Cloudflare or similar content delivery networks, Resend (transactional email), Google (OAuth, Calendar API), Sentry (error monitoring, if enabled), Upstash (rate-limiting cache, if enabled), Google Analytics, and Meta (conversion measurement). Each vendor is contractually bound to use your data only as needed to provide services to us.
• Affiliated Products. As described in Section 4.3.
• Affiliate partners. As described in Section 4.2 (attribution data only).
• Professional advisors. Lawyers, accountants, auditors, and insurers who assist us under confidentiality obligations.
• Business transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of the transaction, subject to the acquiring party being bound by this Privacy Policy or an equivalent successor policy.
• Legal obligations. When we reasonably believe disclosure is required to comply with a law, regulation, subpoena, court order, or lawful governmental request, or to protect our rights, the safety of our users or the public, or to detect and address fraud or security issues.
• With your consent. For any other purpose disclosed to you at the time you give consent.

We do not share your information with advertising networks for the purpose of cross-context behavioral advertising.

8. International Data Transfers

Quantum Scale operates globally and may transfer, store, and process your information in countries other than your own, including the United States, the European Union, and Israel. Data protection laws in these countries may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, UK International Data Transfer Agreements, adequacy decisions, or equivalent mechanisms to protect your information.

9. Your Rights and Choices

9.1 Rights available to everyone

• Access. Request a copy of the personal information we hold about you. You can export a machine-readable JSON bundle at any time via your account settings or by calling GET /api/user/export.
• Correction. Update your profile information at any time in your account settings.
• Deletion. Delete your account and associated data at any time from your account settings, which triggers POST /api/user/delete and cascades across the database, or by emailing us (Section 17).
• Communication preferences. Opt out of marketing communications via the unsubscribe link in any marketing email or by adjusting your notification settings.
• Integration controls. Disconnect Google Calendar or any other integration at any time.

9.2 Additional rights for EEA / UK / Swiss users (GDPR)

• Right to object to processing based on legitimate interests.
• Right to restrict processing in certain circumstances.
• Right to data portability for data you provided under consent or contract.
• Right to withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint with your local data protection authority.

To exercise any right, contact us at the address in Section 17. We will respond within 30 days (extendable by 60 additional days for complex requests, with notice to you). We may need to verify your identity before acting on a request.

9.3 Additional rights for California residents (CCPA / CPRA)

California residents have the right to know what categories of personal information we collect, use, disclose, and (if applicable) sell; to delete personal information; to correct inaccurate information; to limit use of sensitive personal information; to opt out of sharing for cross-context behavioral advertising; and not to be discriminated against for exercising these rights. Quantum Scale does not sell personal information in the traditional sense, and we do not share personal information for cross-context behavioral advertising. To submit a request, email us at the address in Section 17. An authorized agent may submit a request on your behalf with appropriate proof of authorization.

9.4 Rights for other jurisdictions

Users in Canada (PIPEDA), Brazil (LGPD), Australia (Privacy Act), Israel (PPA), and other jurisdictions with data-protection laws have substantially similar rights. We will honor requests to the extent required by applicable law.

10. Security

We take reasonable and appropriate measures to protect your information, including:

• Encryption in transit using TLS / HTTPS across all endpoints.
• Encryption at rest of the production database.
• Row-level security policies in our database that restrict access to the owning user.
• Separation of privileged credentials, with administrative secrets kept out of source code and rotated when exposure is suspected.
• Two-factor authentication for administrative access.
• Rate limiting, anomaly detection, and bot filtering on authentication endpoints.
• Strict Content Security Policy, HSTS, and other browser-side controls.
• Periodic security reviews and dependency patching.

No security system is impenetrable. In the unlikely event of a breach that affects your personal information, we will notify you and the appropriate authorities as required by applicable law.

11. Children

The Platform is intended for users who are at least 18 years old (or the age of majority in their jurisdiction). We do not knowingly collect personal information from children under 18. If we discover that we have inadvertently collected information from a minor, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with information, please contact us.

12. Google API Services — Limited Use

Quantum Scale's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request access to Google Calendar events only to sync your planner. We do not use Google user data for personalized advertising, we do not sell it, and we do not disclose it to third parties except as required to provide the feature, comply with law, or as expressly authorized by the user.

13. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no common industry understanding of how to interpret this signal, the Platform does not respond to it. We honor specific opt-out mechanisms described in Sections 5 and 9.

14. Third-Party Links

The Platform contains links to third-party websites, applications, and services (including affiliate links). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them with any information.

15. Aggregated and De-Identified Data

We may aggregate or de-identify information such that it can no longer reasonably be used to identify you and use that information for any purpose, including analytics, benchmarking, product development, research, publication, and sharing with partners. Aggregated and de-identified data is not considered personal information under this Privacy Policy.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform, or applicable law. When we make material changes, we will notify you by posting the updated policy on this page and, where appropriate, by email or in-app notice. The "Last updated" date at the top of this page always shows the most recent version. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

17. Contact Us

For any question, concern, or request regarding this Privacy Policy or your personal information, contact us at:
Email: support@quantum-scale.co
Postal address: available on request via the email above.

If you are in the EEA or UK and you believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.