Privacy Policy
This policy explains how QuantAvec Labs collects, uses, shares, protects, retains, and deletes personal information for the Revenue Leak Diagnostic.
Effective August 27, 2026
Information we collect
We collect contact and account information, purchase and payment status received from Stripe, free-scan answers, business intake responses, authorized evidence files, support communications, audit results, and basic security and service logs. QuantAvec does not request passwords, authentication codes, full payment-card numbers, private member messages, or unrelated sensitive information.
Why we use it
We use information to provide the requested scan or diagnostic, verify purchases, authenticate customers, analyze revenue controls, request clarifications, generate and review reports, deliver services, prevent fraud, respond to support and privacy requests, maintain records, and improve the service using de-identified or aggregated operational learning.
Service providers and processing locations
Stripe processes payments. Supabase provides the primary database, authentication, and private file storage in its Canada Central region. Vercel hosts the application. Resend sends transactional email. OpenAI processes structured intake content to draft analysis for human review. These providers may process limited information in other jurisdictions under their service terms and legal obligations. QuantAvec remains accountable for information transferred to service providers for processing.
Evidence and data minimization
Providing an email address for the free scan is optional. Free-scan lead records are normally deleted after 180 days. Customers must remove unnecessary personal information before upload and provide only information they are authorized to share. Evidence files are private and isolated by customer organization. Uploaded evidence receives a policy-derived deletion date and is normally deleted 90 days after upload. Report, transaction, consent, audit, and accounting records may be retained longer where reasonably needed for the service, security, dispute handling, or legal obligations.
Choices and rights
You may request access to or correction of your personal information, withdraw optional consent, ask questions about our practices, or request deletion where retention is not required. Withdrawing information essential to an active diagnostic may prevent completion. We verify identity before fulfilling an access or deletion request.
Safeguards and incidents
QuantAvec uses passwordless authentication, row-level tenant isolation, private storage, restricted service credentials, encryption in transit, audit records, and a mandatory human report-release gate. No system can eliminate all risk. We investigate suspected incidents and provide notices when required.
Contact
Questions may be sent to support@quantaveclabs.com. Privacy and access requests may be sent to privacy@quantaveclabs.com.