Privacy Policy

Effective and last updated: August 28, 2026

This Policy explains how QuantumLoop Labs LLC (“QuantumLoop,” “we,” “us”) handles personal information when you visit quantumlooplabs.com, communicate with us, submit a form, receive messages, become a client, use our portal, or receive our software and managed website services. It does not govern a client's own website or business; the client is responsible for the privacy notice and legal compliance for data it independently collects.

1. Information we collect

• Identity and contact: name, business, role, email, phone, address, and communication preferences.
• Client and project: requirements, service area, business hours, domains, content, files, credentials you choose to provide, support tickets, approvals, and correspondence.
• Account and commercial: portal account, authentication and audit events, proposals, contracts, terms acceptance version and timestamp, subscription and invoice status, and transaction identifiers. Payment processors handle full card details; we generally receive only limited billing and payment status information.
• Device, log, and network: IP address, browser/device type, operating system, referring URL, pages and buttons viewed, timestamps, cookie identifiers, security events, and approximate location derived from IP.
• Advertising and analytics: interactions with our ads and public pages, campaign identifiers, Google and Meta cookie/click identifiers, and conversion events. For server-side Meta conversion measurement, contact identifiers may be normalized and cryptographically hashed before transmission.
• SMS and call records: phone number, consent source and time, message content, delivery/opt-out status, and call logs or recordings when disclosed and permitted.
• Reviews and public content: review text, rating, name, company, and publication choice.
• Inferences: service interests and likely business needs derived from the information above.

Please do not send government identifiers, health data, payment-card numbers, or other sensitive personal information unless we specifically request it through an approved secure channel.

2. Sources

We collect information directly from you and your authorized users; automatically from browsers, devices, cookies, and logs; from advertising, communications, payment, hosting, authentication, and analytics providers; from referrals and business partners; and from public sources such as company websites, professional profiles, registries, and business directories.

3. How and why we use information

• Respond to inquiries, prepare proposals, onboard clients, authenticate users, and perform contracts.
• Build, host, maintain, secure, support, personalize, and improve Services and client relationships.
• Process subscriptions and payments, maintain business records, and send service communications.
• Measure site and advertising performance, attribute conversions, build advertising audiences, and improve campaigns.
• Send SMS only with the consent described below and send email consistent with your relationship and applicable law.
• Detect fraud, abuse, errors, and security incidents; enforce agreements; protect rights and safety.
• Meet legal, tax, accounting, insurance, audit, and regulatory obligations and handle disputes.
• Create aggregated or de-identified information that we do not reasonably attempt to reidentify.

4. Legal bases for EEA, UK, and similar laws

Where a legal basis is required, we rely on contract performance; legitimate interests such as security, service improvement, B2B communications, and fraud prevention; consent for optional SMS and cookies or advertising where required; and compliance with legal obligations. You may withdraw consent at any time without affecting earlier lawful processing. We balance legitimate interests against your rights.

5. How we disclose information

We may disclose relevant information to:

• Infrastructure, database, authentication, storage, deployment, security, monitoring, customer-support, email, and communications providers, including providers such as Netlify, Supabase, Brevo, and Twilio.
• Payment and billing providers such as Stripe.
• Analytics and advertising partners such as Google and Meta, which may use cookies and event data under their own terms.
• Subcontractors and professional advisers who need it to perform work and are subject to appropriate duties.
• A buyer, investor, lender, insurer, or successor in a merger, financing, diligence process, reorganization, or sale.
• Courts, regulators, law enforcement, counterparties, and others when reasonably necessary to comply with law, respond to process, enforce rights, or protect people and systems.
• Other persons at your direction or with your consent.

Sale and sharing. We do not sell personal information for money. Our use of Google and Meta advertising technology may be considered “sharing,” targeted advertising, or a “sale” under some state laws even though no money changes hands. Where applicable, you may request to opt out by contacting us as described below and can also use browser/device privacy controls. We do not knowingly sell or share the personal information of anyone under 16.

Mobile information. We do not share mobile numbers or SMS opt-in/consent data with third parties or affiliates for their own marketing or promotional purposes. We may disclose it to providers that deliver our messages, but they may use it only to provide those services or as required by law.

6. Cookies, pixels, and advertising choices

Our public marketing pages use Google Analytics, Google Ads, and Meta advertising measurement. Google and Meta may set or read identifiers (including Google's _ga/_gcl and Meta's _fbp/_fbc cookies), record page views and form-funnel events, connect visits with ad campaigns, and support measurement or audience creation, and we send matching server-side Meta conversion reports. To opt out of this measurement, use your browser or device privacy controls or contact us as described below; we treat an enabled Global Privacy Control signal as an opt-out. The authenticated client and admin portals are excluded from this marketing measurement. We currently do not respond to legacy “Do Not Track” signals, which lack a uniform standard.

7. SMS and phone communications

We send informational and transactional texts only after a documented web-form opt-in or verbal opt-in during a call. Consent is optional and not a condition of purchase. Message frequency varies; message and data rates may apply. Reply STOP (or CANCEL, END, QUIT, or UNSUBSCRIBE) to opt out and HELP for help. We keep consent and opt-out records to honor preferences and demonstrate compliance. Carriers are not liable for delayed or undelivered messages. See the SMS Program Terms.

8. Retention

We retain information only as reasonably needed for the purposes above, then delete or de-identify it subject to backups and legal holds. Typical periods are: unsuccessful inquiries and related correspondence up to 24 months; client, contract, billing, acceptance, and project records for the relationship plus up to 7 years; support and security logs generally up to 24 months; SMS consent and opt-out records for at least 4 years after the last message or longer if required; and advertising/cookie data according to provider settings, generally no longer than 24 months in systems we control. We may retain records longer for disputes, law, fraud prevention, or enforcement.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, encryption in transit, service-provider controls, logging, and restricted production access. No system is completely secure. You are responsible for safeguarding credentials and notifying us promptly of suspected unauthorized access.

10. International transfers

We are based in the United States and may process information in the United States and other countries where providers operate. Where required, we rely on adequacy decisions, contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism.

11. Your privacy rights

Depending on where you live and whether a law applies to us, you may have the right to request access, correction, deletion, portability, restriction, or a list of categories or specific information; object to or opt out of targeted advertising, sale, sharing, or certain profiling; withdraw consent; and appeal a denied request. You may use an authorized agent where permitted. We will verify requests proportionately, respond within applicable time limits, and will not unlawfully discriminate for exercising rights. Some information is exempt, and we may retain information needed for security, contracts, legal duties, and claims.

Submit a request to admin@quantumlooplabs.com with “Privacy Request” in the subject. To appeal, reply “Appeal” and explain your concern. You may also complain to your local privacy or data-protection regulator.

12. Children

Our website and Services are directed to businesses and are not intended for children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child provided information so we can investigate and delete it as appropriate.

13. Third-party sites and client websites

Links and integrations may lead to services we do not control. Their policies govern their processing. When we build or host a website for a client, that client determines its own customer-data practices and is responsible for its privacy notice, cookie choices, and lawful instructions. If you have a request about data collected by a client website, contact that client first.

14. Changes

We may update this Policy to reflect practices, providers, or law. We will post the revised Policy and effective date and provide additional notice when legally required. Material changes apply prospectively unless law permits otherwise.

15. Contact

QuantumLoop Labs LLC · Tampa, Florida, USA · admin@quantumlooplabs.com

Service use is also governed by our Terms of Service.